Privacy Policy

1. Data controller

Given the size of the company and the nature of the processing, SmartDepil has not appointed a Data Protection Officer (DPO). For any question about your data, you can write directly to the address above.

2. Data we collect

We only collect the data strictly necessary to handle your request. You provide it directly when you fill in one of our forms (contact, quote request, demo booking, newsletter sign-up).

Data you provide

• Identity: last name, first name
• Contact details: email address, phone number
• Business information: company or salon name, type of business, address and city
• Project information: equipment you are interested in, planned budget, free-text message

Technical data

• IP address and connection information (browser, date and time), logged automatically by our hosting provider for security purposes
• Your language preference (French or English), stored in your browser (see Cookies and local storage)

The profitability simulator runs entirely in your browser: the values you enter (price per session, number of sessions, costs, equipment price) are neither sent to us nor stored.

We do not collect any health data or other special category data within the meaning of Article 9 GDPR. Please do not include any in the message field.

3. Purposes and legal bases

Your data is not subject to any automated decision-making or profiling. It is never sold, rented or transferred for commercial purposes.

4. Recipients and processors

Your data is accessible only to SmartDepil and, for strictly technical purposes, to the following providers, who act as processors and are contractually bound to ensure its security and confidentiality:

If you choose to contact us via WhatsApp (button in the contact window), your messages go through that service, operated by WhatsApp Ireland Ltd (Meta group), which processes them under its own privacy policy. SmartDepil only uses your messages to respond to your request.

Your data may also be disclosed to administrative or judicial authorities where required by law.

5. Transfers outside the European Union

Some of our providers (Airtable, Google) are based in the United States or may process data there. These transfers are covered by appropriate safeguards under Chapter V GDPR: the provider's certification under the EU–U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and/or the Standard Contractual Clauses adopted by the European Commission.

You can obtain further information about these safeguards by writing to contact@smartdepil.com.

6. Retention periods

7. Cookies and local storage

The SmartDepil website does not use any analytics or social media cookies. It may use, only with your consent, Google Ads cookies to measure advertising performance, as described below.

Only your language preference is stored in your browser's local storage (key smartdepil_lang), so that the site is automatically displayed in French or English on your next visits. This tracker is strictly necessary for the service you request: under Article 82 of the French Data Protection Act, it is exempt from consent. It contains no data that can identify you and is never sent to our servers.

You can delete it at any time by clearing your browser's browsing data.

Google Ads cookies (subject to your consent)

When we run Google ads, a banner lets you accept or refuse Google Ads measurement cookies, as easily as each other. If you accept, the Google tag (Google Ireland Ltd) is loaded and sets cookies (for example _gcl_au, kept for 90 days) that tell us whether a request sent on the website follows a click on one of our ads. These cookies are only used to measure how effective our campaigns are: we do not enable ad personalisation (remarketing). If you refuse, or as long as you have not made a choice, the Google tag is not loaded and no advertising cookie is set.

Your choice is kept for 6 months in your browser's local storage (key smartdepil_consent), after which you will be asked again. You can change it or withdraw your consent at any time using the Manage cookies link, also available at the bottom of every page of the website. Data sent to Google may be processed in the United States, under the conditions described in the Transfers outside the European Union section.

8. Data security

SmartDepil implements appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration:

• Encryption of exchanges between your browser and the website (HTTPS)
• Access to data restricted to authorised SmartDepil personnel only
• Use of recognised providers offering GDPR-compliant security guarantees
• Access credentials for our tools protected and kept server-side

In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify the CNIL within 72 hours and inform you where required by law.

9. Your rights

Under the GDPR and the French Data Protection Act, you have the following rights over your data:

• Right of access: find out what data we hold about you and obtain a copy
• Right to rectification: have inaccurate or incomplete data corrected
• Right to erasure: request the deletion of your data
• Right to restriction: request that the use of your data be temporarily suspended
• Right to object: object at any time to processing based on our legitimate interest, including direct marketing, without having to give a reason
• Right to data portability: receive your data in a structured, machine-readable format
• Withdrawal of consent: withdraw your consent at any time (for example to the newsletter), without affecting processing already carried out
• Post-mortem instructions: set instructions regarding what happens to your data after your death

You can also unsubscribe from the newsletter at any time using the link included in every email.

10. Complaint to the CNIL

If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL):

If you live in another EU country, you may also contact the data protection authority of your country of residence.

11. Intended audience

The SmartDepil website is intended for beauty and aesthetics professionals (salons, beauticians, nurses, medical aesthetics clinics). It is not intended for minors, and we do not knowingly collect data from anyone under the age of 15.

12. Changes to this policy

SmartDepil may update this privacy policy, in particular to comply with legal changes or when adding a new service. The version in force is always the one published on this page, with its last updated date. In the event of a significant change, we will inform you by appropriate means.

13. Contact