Confidentiality policy
Website www.bodysculptor.fr – Version dated 01/10/2026 – English translation provided for information only; in the event of any discrepancy, the French version prevails.
This policy informs users of the website www.bodysculptor.fr (the “Website”), as well as BODYSCULPTOR’s customers and prospects, of how their personal data is processed, in accordance with Regulation (EU) 2016/679 (“GDPR”) and the amended French Data Protection Act No. 78-17 of 6 January 1978 (“Loi Informatique et Libertés”).
1. DATA CONTROLLER
BODYSCULPTOR S.A.S., a French simplified joint-stock company with a share capital of €100,000, registered with the Paris Trade and Companies Register under number 934 832 908, whose registered office is located at 26 rue d’Armaillé, 75017 Paris (France).
Contact for any question relating to your data: in**@**********or.fr
2. DATA COLLECTED
We only collect the data necessary for the purposes described in Article 3:
identification and contact data: surname, first name, postal and email addresses, telephone number;
for professionals: company name, position, SIRET or VAT number;
order data: products purchased, order history, invoices, exchanges with customer service;
browsing data (cookies and trackers, see Article 9);
content you choose to publish (testimonials, comments).
BodySculptor does not collect health data. Please do not provide any in the free-text fields of the forms.
Bank card data is collected and processed directly by our payment service provider Stripe; BodySculptor has no access to it and does not store it.
Mandatory fields are marked with an asterisk. If they are not completed, we will be unable to process your request or order.
3. PURPOSES, LEGAL BASES AND RETENTION PERIODS
| Purpose | Legal basis | Retention period |
|---|---|---|
| Order management, delivery, invoicing, after-sales service, warranties | Performance of the contract | Duration of the contractual relationship |
| Accounting and tax obligations | Legal obligation | 10 years (invoices and accounting records) |
| Payment fraud prevention | Legitimate interest | Time needed to process the transaction, then archiving in accordance with legal rules |
| Responding to contact, demonstration or call-back requests, including forwarding them to HOLICARE for professional devices (see Article 4) | Pre-contractual measures / legitimate interest | Time needed to process the request, then 3 years from the last contact |
| Email marketing to customers (similar products) | Legitimate interest | 3 years from the last purchase or last contact |
| Email marketing to non-customer consumers, newsletter | Consent | Until consent is withdrawn, or 3 years without interaction |
| Marketing to professionals (offers related to their business) | Legitimate interest | 3 years from the last contact |
| Publication of testimonials on the blog | Consent | Until consent is withdrawn |
| Audience measurement and non-essential cookies | Consent | 13 months maximum for trackers; 25 months maximum for the data collected |
At the end of these periods, the data is deleted or anonymised.
4. RECIPIENTS
Your data is intended for BodySculptor’s authorised internal departments and, solely for the purposes set out above, for its processors within the meaning of Article 28 of the GDPR: payment service provider (Stripe), carriers, logistics provider, Website host (IONOS), emailing tool (HUBSPOT), audience measurement tools (Google Analytics) and advertising tools (Meta). BodySculptor does not sell or rent your data to third parties. An up-to-date list of our service providers is available on request from in**@**********or.fr.
Since 1 October 2026, HOLICARE has been the exclusive official distributor of professional BodySculptor® devices in metropolitan France. When you send us, via the Website’s forms, a request for a demonstration, quote, training or call-back relating to these devices, your identification and contact data and the content of your request are forwarded to HOLICARE so that it can contact you and follow up on your request. This transfer is based on pre-contractual measures taken at your request. HOLICARE then processes this data as a separate data controller, in accordance with its own privacy policy, which you may request from HOLICARE. Requests relating to products intended for consumers are not forwarded to HOLICARE.
5. TRANSFERS OUTSIDE THE EUROPEAN UNION
Some service providers (in particular Google, Meta and Stripe) may process data outside the European Union, particularly in the United States. These transfers are governed by an adequacy decision of the European Commission (EU-US Data Privacy Framework, for certified providers) or, failing that, by the European Commission’s standard contractual clauses. A copy of these safeguards is available on request.
6. SECURITY
BodySculptor implements appropriate technical and organisational measures to protect your data (restricted access, HTTPS encryption, backups). Its service providers are subject to the same security and confidentiality obligations.
7. YOUR RIGHTS
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent at any time where processing is based on consent. You may object at any time, without giving reasons, to direct marketing, in particular via the unsubscribe link included in every email. You may also set instructions regarding what happens to your data after your death.
To exercise your rights: in**@**********or.fr, or by post to BODYSCULPTOR S.A.S., 26 rue d’Armaillé, 75017 Paris, France. You will receive a reply within one month, which may be extended by two months for complex requests. Proof of identity may only be requested if there is reasonable doubt about your identity.
If you believe that your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr/fr/plaintes). If you do not wish to receive telephone marketing, you can register free of charge on the Bloctel list (www.bloctel.gouv.fr), which applies to French telephone numbers.
8. NO AUTOMATED DECISION-MAKING
BodySculptor does not take any decision producing legal effects concerning you based solely on automated processing.
9. COOKIES AND TRACKERS
During your visit, cookies and trackers may be placed on your device:
Strictly necessary cookies (operation of the Website, shopping cart, security, storing your cookie choices): these do not require your consent.
Audience measurement cookies (Google Analytics) and advertising or social media cookies (Meta/Facebook, LinkedIn, YouTube…): these are only placed with your prior consent, obtained via the banner displayed on your first visit.
You can accept, refuse or customise these cookies at any time, just as easily, via the “Cookie settings” link at the bottom of each page. Refusing these cookies does not prevent access to the Website. Cookies have a maximum lifespan of 13 months. Your choice (acceptance or refusal) is stored for 6 months and you will then be asked again. Social media sharing buttons only place cookies after you have given your consent. The use of your data by these networks is governed by their own privacy policies.
10. CHANGES TO THIS POLICY
BodySculptor may amend this policy. The version in force is the one published on the Website, on the date indicated at the top.