Privacy policy

Last updated: 11 October 2026

K&J cos. SAS (hereinafter “nuaj.”) attaches particular importance to protecting your personal data. This policy describes which data is collected on bynuaj.fr, why, who processes it, how long it is kept and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Data controller

K&J cos. SAS, a simplified joint-stock company (société par actions simplifiée) with share capital of €500, registered with the Marseille Trade and Companies Register (RCS) under number 103 971 255, with its registered office at 85 traverse de la Granière, 13011 Marseille, France. Contact: hello@bynuaj.fr

2. Data collected

Depending on how you use the site, we collect:

  • Identity and contact details: surname, first name, email address and, if you provide it, telephone number
  • Addresses: delivery and billing address
  • Order: products ordered, gift chosen, amount, date, delivery method, pre-order and shipping tracking, returns, withdrawals and warranty claims
  • Payment: payment method used and transaction status. Card details are entered and processed directly by our payment providers: we never have access to your full card number and do not store it.
  • Customer account: if you create one, your email address (you sign in with a code sent by email), your saved addresses and your order history
  • Exchanges: messages sent via the contact form (name, email, subject, message) or by email
  • Diagnostic: email address, area chosen and description of your needs (see “Personalised diagnostic”)
  • Newsletter: email address, date and source of your sign-up, opens and clicks in our emails
  • “Coming soon” list (Bientôt chez vous): email address, country, site language, page and source of your sign-up
  • Reviews: display name, rating, text and, where applicable, photos
  • Browsing: IP address, device and browser type, pages viewed, products viewed or added to the basket, origin of the visit. Some of this data is only collected with your consent (see “Cookies and trackers”).

3. Purposes and legal bases

  • Processing your order or pre-order (payment, shipping, invoicing, tracking), after-sales service, returns, withdrawal and warranty: performance of the contract
  • Managing your customer account: performance of the contract
  • Replying to your messages and diagnostic requests: pre-contractual steps taken at your request and, for the information about your skin that you choose to share with us, your consent
  • Sending our newsletter and offers: consent
  • Writing to you when shipping opens in your country (“Coming soon” list): consent
  • Inviting you to leave a review after delivery: legitimate interest (collecting genuine reviews from people who have placed an order). Publication of your review is based on your consent, given by submitting it.
  • Preventing fraud, securing the site and payments, ensuring the site works properly: legitimate interest
  • Measuring site traffic in order to improve it: consent
  • Measuring the effectiveness of our advertising and showing you ads on other platforms: consent
  • Complying with our legal obligations (accounting, tax, legal guarantees, responses to authorities): legal obligation
  • Establishing, exercising or defending our rights in the event of a dispute: legitimate interest

4. Newsletter, welcome code and “Coming soon” list

You can sign up to our email list from the forms on the site. You give your consent by ticking the box provided, if there is one, and submitting the form: your sign-up is then immediate, with no confirmation email. Signing up entitles you to a 10% welcome code on your first order.

If we do not ship to your country yet, you can join our “Coming soon” list (Bientôt chez vous). We collect your email address, your country, the site language, and the page and source of your sign-up, stored in our emailing tool (Klaviyo). We use them to write to you when shipping opens in your country. This sign-up is based on your consent, given by submitting the form, with no confirmation email.

Every email contains a one-click unsubscribe link. You can also write to us at hello@bynuaj.fr. Unsubscribing does not affect emails related to your orders, which you will continue to receive.

5. Personalised diagnostic

The Diagnostic page lets you describe your needs to receive a recommendation by email. We collect your email address, the area chosen and your description, stored in our emailing tool (Klaviyo), in order to reply to you.

This form is not intended to receive medical information: describe your skin and your goal, without mentioning any diagnosis or treatment. If you nevertheless choose to share health information with us, we use it only to reply to you, on the basis of your consent, which you can withdraw at any time.

Submitting this form also signs you up to our email list: as with the newsletter, your sign-up is immediate, with no confirmation email, and you can unsubscribe at any time.

6. Reviews

After your order is delivered, an invitation to leave a review is sent to you automatically by email (Klaviyo). If you publish a review, it appears on the site with the name you give, your rating, your text and, where applicable, your photos. To have your review removed or to stop receiving these invitations, write to hello@bynuaj.fr.

7. Cookies and trackers

On your first visit, a banner lets you accept or refuse non-essential cookies: both buttons are shown side by side, at the same size, and an option lets you choose category by category. Refusing is as easy as accepting and makes no difference to your access to the site or to your orders.

You can change your choices at any time with the “Cookie settings” link at the bottom of every page, or here: manage my cookies.

Necessary cookies (no consent required). They enable the basket, checkout, security and fraud prevention, remembering your delivery country and language, and remembering your cookie choices (Shopify). The site also uses your browser's storage to remember your gift choice during your visit and, if you visit from a country we do not ship to yet, the detected country during your visit and whether you closed the “Coming soon” banner. Shopify also measures technical data on how the site runs and performs (loading times, display errors).

Audience measurement (with your consent). Visit statistics from Shopify and Google Analytics (Google). If you accept only this category, Google tools work without advertising cookies.

Marketing and advertising (with your consent). These tools measure the effectiveness of our ads and allow us to show you ads on other platforms:

  • Meta (Facebook and Instagram), via Shopify's Facebook & Instagram channel
  • Google Ads and Google Merchant Center (Google)
  • TikTok
  • Snapchat (Snap)
  • Klaviyo: pages and products viewed and the steps of your order, to personalise our emails
  • Shopify Collabs: attributing a sale to a partner creator when you arrive via their link
  • Printful: statistics on products viewed

These tools only load after you consent. When you make a purchase, they may receive the order details (products, amount) and identifying information such as your email address or telephone number, in order to match the purchase to an ad. For the collection and transmission of this data, nuaj. and each advertising platform (Meta, Google, TikTok, Snap) are joint controllers; each platform then processes this data on its own behalf, under its own privacy policy.

The Klaviyo script, which displays our sign-up forms and reviews, is loaded on every page.

Fonts. Some of the site's fonts are loaded from Google Fonts servers (Google): your browser then sends your IP address to Google, which is needed to display the page.

8. Recipients and service providers

Your data is accessible to the nuaj. team to the extent necessary for its work, and to our service providers, who process it on our behalf and according to our instructions:

  • Shopify International Limited (Ireland): hosting of the site and the shop, payment via Shopify Payments, customer accounts, fraud risk analysis, statistics
  • Klaviyo, Inc. (United States): newsletter, “Coming soon” list, emails related to your journey, forms, diagnostic and reviews
  • The carriers responsible for delivery
  • Our email provider, for emails received at hello@bynuaj.fr

Some partners process your data on their own behalf, under their own privacy policy:

  • PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg), if you pay with PayPal: privacy policy
  • Klarna Bank AB (Sweden), if you choose payment in three instalments; approval of this payment is a matter for Klarna alone: privacy policy
  • Shopify, for Shop Pay and the Shop app, if you use them: privacy policy
  • Only with your consent, the platforms listed under “Cookies and trackers”: Meta Platforms Ireland Ltd (policy), Google Ireland Ltd (policy), TikTok (policy), Snap (policy) and Printful Latvia AS, Latvia (policy)
  • Administrative or judicial authorities, where required by law

We neither sell nor rent out your data.

9. Transfers outside the European Union

Some service providers and partners, in particular Shopify, Klaviyo, Google, Meta, TikTok and Snap, may process your data outside the European Union, notably in Canada and the United States. These transfers are based on an adequacy decision of the European Commission (Canada; the EU-US Data Privacy Framework for certified US companies) or, failing that, on the standard contractual clauses adopted by the European Commission. You can obtain a copy of these safeguards by writing to hello@bynuaj.fr.

If you have your order delivered outside the European Union, your delivery details are passed to the carriers and, where applicable, to the customs authorities of the destination country: this transfer is necessary to fulfil your order.

10. Retention periods

  • Orders: 10 years for any order of €120 or more (article L213-1 of the French Consumer Code), which is the case for our devices
  • Invoices and accounting records: 10 years (legal obligation)
  • Commercial relationship data (contact, exchanges, after-sales service): 3 years from the end of the commercial relationship (your last purchase or your last contact)
  • Customer account: until it is deleted, which you can request at any time; order data is kept for the periods above
  • Newsletter, “Coming soon” list and diagnostic: until you unsubscribe or withdraw your consent, and at most 3 years after our last contact with you
  • Reviews: for as long as they are published, or until you ask for them to be removed
  • Bank card data: we do not keep it; it stays with our payment providers, under their own obligations
  • Cookies subject to your consent: for the period set by each tool; you can delete them at any time from your browser and withdraw your consent with the “Cookie settings” link

11. Security

The site is secured by HTTPS. Payments are processed by PCI DSS certified providers, and access to data is limited to those who need it.

12. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection to the processing of your data. You can object at any time, without giving a reason, to receiving our marketing emails, and withdraw your consent at any time, without affecting processing already carried out. You can also set instructions on what happens to your data after your death.

To exercise these rights, write to hello@bynuaj.fr or to K&J cos. SAS, 85 traverse de la Granière, 13011 Marseille, France. We reply within one month, which may be extended by two months for a complex request; we will let you know if this is the case. If we have reasonable doubts about your identity, we may ask you for additional information.

You can also lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr/fr/plaintes, or by post: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

13. Minors

Purchases on bynuaj.fr are reserved for adults, as provided in our terms and conditions of sale. We do not knowingly collect data about people under 15. If you think a minor has sent us data, write to us: we will delete it.

14. Changes

This policy may change, in particular if we add or remove a service provider. The date at the top of the page shows the latest version.

15. Contact

For any question about this policy or your data: hello@bynuaj.fr