Privacy Policy

Last updated: 2/3/2026

Nature Pharmacy is committed to protecting your privacy and personal data. This privacy policy informs you about how we collect, use, share and protect your information in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

The controller of your personal data is:

Company Name: Nature Pharmacy

SIRET Number: [À COMPLÉTER - 14 chiffres]

Address: [À COMPLÉTER - Adresse complète]

Email: contact@nature-pharmacy.com

Data Protection Officer (DPO): [À COMPLÉTER - Nom du DPO]

DPO Contact: dpo@nature-pharmacy.com

2. Data Collected

We collect the following data when you use our platform:

Identity Data

Last name, first name, date of birth, gender

Contact Data

Email address, phone number, postal address

Order Data

Purchase history, cart, preferences, product reviews

Payment Data

Banking information (processed securely by our payment providers)

Connection Data

IP address, connection logs, cookies, browsing data

Technical Data

Browser type, operating system, pages visited, visit duration

3. Processing Purposes

Your data is collected and processed for the following purposes:

Management of your account and customer relationship
Processing and tracking of your orders
Payment and billing management
Fraud prevention
Service improvement and personalization of your experience
Sending marketing communications (newsletters, promotional offers) with your consent
Compliance with our legal and regulatory obligations

4. Legal Basis for Processing

The processing of your data is based on the following legal grounds:

Contract Performance

Processing is necessary for the performance of the sales contract and the provision of our services.

Consent

You have consented to the processing of your data for specific purposes (newsletter, non-essential cookies).

Legitimate Interest

Processing is necessary for our legitimate interests (service improvement, fraud prevention).

Legal Obligation

Processing is necessary to comply with our legal obligations (accounting, taxation).

5. Data Recipients

Your data may be shared with the following recipients:

Authorized internal staff of Nature Pharmacy
Partner sellers for processing your orders
Service providers (hosting, payment, delivery, marketing)
Marketing partners (with your consent)
Administrative and judicial authorities (upon legal request)

We ensure that all our partners respect the confidentiality and security of your data in accordance with GDPR.

6. Retention Period

Your data is retained for the following periods:

Account data: As long as your account is active + 3 years after last activity
Order data: 10 years (accounting and tax obligations)
Payment data: Duration necessary for the transaction + legal statute of limitations
Newsletter data: Until withdrawal of your consent
Cookies: Maximum duration of 13 months
Connection logs: 12 months maximum

After these periods, your data is securely deleted or anonymized.

7. Your Rights

In accordance with GDPR, you have the following rights:

Right of Access

You can obtain a copy of your personal data.

Right of Rectification

You can request correction of inaccurate or incomplete data.

Right to Erasure

You can request deletion of your data under certain conditions.

Right to Data Portability

You can receive your data in a structured and commonly used format.

Right to Object

You can object to the processing of your data for legitimate reasons.

Right to Restriction

You can request restriction of processing of your data in certain cases.

Right to Withdraw Consent

You can withdraw your consent at any time for processing based on it.

To exercise your rights, contact us at: dpo@nature-pharmacy.com

You also have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr

8. Data Security

We implement appropriate technical and organizational measures to protect your data against loss, misuse, unauthorized access, disclosure, alteration or destruction:

SSL/TLS encryption for all communications
Secure storage on protected servers
Strict access control to personal data
Monitoring and detection of security incidents
Regular backups and business continuity plan
Staff training and awareness on data security

9. Cookies

Our site uses cookies to improve your browsing experience and analyze site usage.

To learn more about the cookies we use and how to manage them, see our Cookie Policy.

10. International Data Transfers

Your data is primarily stored and processed within the European Union. If a transfer outside the EU is necessary, we ensure that appropriate safeguards are in place in accordance with GDPR (standard contractual clauses, adequacy decision).

11. Minors' Data

Our service is intended for adults (18 years and older). We do not knowingly collect personal data from minors without parental consent. If you believe a minor has provided us with data without authorization, contact us immediately.

12. Policy Changes

We may modify this privacy policy occasionally to reflect changes in our practices or for legal reasons. The most recent version will always be available on this page with the update date.

In case of substantial modification, we will inform you by email or via a notification on the site.

13. Contact

For any questions regarding this privacy policy or to exercise your GDPR rights, you can contact us: