Privacy Policy

1. Introduction

Laboratoires FENIOUX attaches particular importance to the protection of personal data and respect for the privacy of users of its website.

This Privacy Policy aims to inform visitors, customers and professionals about how their personal data is collected, used, stored and protected when browsing the website www.laboratoires-fenioux.com.

Personal data is processed in accordance with Regulation (EU) 2016/679 of 27 April 2016, known as the General Data Protection Regulation (GDPR), and the French Data Protection Act (Loi Informatique et Libertés), as amended.

2. Data Controller

The data controller is:

Laboratoires FENIOUX

• Address: 9, avenue Pierre de Coubertin – 36024 CHÂTEAUROUX Cedex – France

• Telephone: +33 (0)2 54 27 16 94

• Email: info@feniouxlab.fr

• SIREN: 333 469 682

• SIRET: 333 469 682 00020

• Intra-Community VAT number: FR 43 333 469 682

For any questions concerning the protection of your personal data or to exercise your rights, you may contact us at info@feniouxlab.fr.

3. Personal Data Collected

As part of its activities, Laboratoires FENIOUX may collect various categories of personal data.

Identification and contact information:

• First and last name;

• Postal and delivery addresses;

• Email address;

• Telephone number;

• Company or professional activity information, where applicable.

Customer account information:

• Login credentials;

• Customer profile information;

• Order history;

• Preferences and information required for account management.

Order information:

• Products ordered;

• Purchase amounts and dates;

• Billing and delivery information;

• Order status;

• Payment-related information, excluding complete banking details when processed directly by payment service providers.

Communication information:

• Enquiries submitted through contact forms;

• Correspondence with customer service;

• Newsletter subscriptions;

• Communication preferences;

• Data relating to interactions with marketing communications, where permitted by applicable regulations.

Technical and browsing information:

• IP address;

• Browser and device type;

• Pages visited;

• Connection information;

• Cookies and other tracking technologies, depending on their purpose and the choices expressed by the user.

Only data necessary for the intended purposes is collected.

4. Purposes and Legal Bases for Processing

Personal data may be used for the following purposes:

Laboratoires FENIOUX ensures that each processing activity is based on an appropriate legal basis.

5. Customer Account and Order Management

When a user creates an account or places an order on the website, certain personal data is required to provide the service.

This information is used in particular for:

• Creating and administering accounts;

• Recording and processing orders;

• Preparing and shipping products;

• Issuing invoices;

• Managing returns and complaints;

• Maintaining customer relationships.

Information identified as mandatory in forms is necessary to process the request or fulfil the order.

Failure to provide this information may prevent account creation, order processing or provision of the requested service.

Optional information helps improve communication and service quality.

6. Services Reserved for Healthcare Professionals

The website offers specific features intended for professionals, including a professional area and services related to product recommendations.

In this context, additional data may be collected to:

• Verify users' professional status;

• Manage access to restricted services;

• Identify professionals and their reference details;

• Monitor enquiries and orders;

• Enable the use of professional features.

7. Newsletters and Marketing Communications

Laboratoires FENIOUX may offer users the opportunity to receive newsletters, product information, news and commercial offers.

Subscription to marketing communications is based on the user's consent where required.

Where permitted by regulations, Laboratoires FENIOUX may also send customers communications concerning products or services similar to those previously purchased, provided they are given the opportunity to object.

Communications may be personalised according to expressed preferences, purchase history and interactions with messages, in compliance with applicable regulations.

Campaign management:

Laboratoires FENIOUX uses ActiveCampaign, among other solutions, to manage certain marketing communications and subscriber lists.

The necessary data may be transferred to this service provider as part of the services supplied and in accordance with applicable contractual safeguards.

Each electronic marketing communication includes a means of unsubscribing or opting out of future solicitations.

Users may also request that these communications cease by contacting info@feniouxlab.fr.

Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

8. Transactional Emails

As part of customer account and order management, Laboratoires FENIOUX may send transactional emails, including:

• Account creation confirmations;

• Order confirmations;

• Payment-related information;

• Order tracking and shipping notifications;

• Password resets;

• Information required for account or service management.

These communications are necessary for managing the contractual relationship and are not considered marketing newsletters when they do not contain significant promotional content.

Laboratoires FENIOUX uses Mailjet, among other solutions, to send certain transactional emails.

9. Customer Reviews

Laboratoires FENIOUX uses Avis Vérifiés, an independent platform specialising in the collection, management and publication of consumer reviews.

This solution makes it possible to collect reviews from customers who have actually made a purchase, promoting transparency and reliability in the ratings published on the website.

The collection, moderation and publication of reviews follow a transparency-based approach founded on the principles of the international NF ISO 20488 standard relating to online consumer reviews.

As part of this service, certain personal data may be transferred to Avis Vérifiés, including the customer's email address, order reference and information necessary to verify the purchasing experience.

Avis Vérifiés acts as an independent third-party service provider in managing customer reviews.

The procedures for collecting, moderating and publishing reviews are specified in the Avis Vérifiés terms of service.

10. Cookies and Other Tracking Technologies

The website www.laboratoires-fenioux.com uses cookies and other tracking technologies to ensure its proper functioning and, depending on the user's choices, to measure website traffic and improve the services offered.

Strictly necessary cookies

These cookies enable, in particular:

• Shopping cart functionality;

• Identification of logged-in users;

• Session management;

• Storage of certain choices necessary for website operation;

• Secure browsing.

They may be used without prior consent when they meet the exemption conditions provided for by regulations.

Audience measurement cookies

These cookies analyse website traffic and help improve understanding of how the website is used, in order to enhance its content and features.

They are subject to consent when the conditions for regulatory exemption are not met.

Advertising and marketing cookies

These cookies may be used to measure the effectiveness of advertising campaigns, provide relevant content or personalise certain communications.

They are used with the user's prior consent where required.

Managing preferences

Users may accept, reject or modify their cookie preferences at any time by accessing the "Cookie Settings" section available in the website footer.

Refusing non-essential cookies does not prevent access to the website's main features.

A detailed list of cookies, their providers, purposes and retention periods is available through the website's cookie management tool, subject to the information actually displayed by that tool.

11. Recipients of Personal Data

Personal data is intended for authorised departments of Laboratoires FENIOUX, within the limits of their responsibilities.

It may also be disclosed to service providers involved in website operation and service delivery, including:

• Website hosting and IT maintenance providers;

• Secure payment service providers;

• Carriers and logistics partners;

• Email marketing and communication management providers;

• Customer review collection providers;

• Audience measurement and advertising providers, where the corresponding processing is authorised;

• Administrative or judicial authorities where required by law.

These recipients only have access to the data necessary to perform their duties.

Laboratoires FENIOUX ensures that processing carried out by its data processors is governed by appropriate contractual arrangements in accordance with the GDPR.

12. Transfers of Data Outside the European Union

Certain technical or commercial service providers may be located outside the European Economic Area or may access data from third countries.

Where such transfers occur, Laboratoires FENIOUX ensures that they are based on a mechanism recognised by applicable regulations, including an adequacy decision by the European Commission or Standard Contractual Clauses accompanied, where necessary, by additional safeguards.

Users may request information about transfers concerning them and the applicable safeguards by contacting Laboratoires FENIOUX.

13. Data Retention Periods

Personal data is retained for a period proportionate to the purposes for which it was collected, subject to legal retention obligations.

Upon expiry of the applicable retention periods, data is deleted, anonymised or securely archived where continued retention remains legally justified.

14. Data Security and Confidentiality

Laboratoires FENIOUX implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

Depending on the processing activities concerned, these measures include:

• Securing communications using HTTPS;

• Managing access rights;

• Protecting accounts and IT systems;

• Securing payment transactions;

• Backup and maintenance measures;

• Raising awareness among authorised personnel handling data;

• Supervising service providers involved in processing activities.

Security measures are adapted to the risks associated with processing activities and are regularly reviewed and improved.

15. Individual Rights

In accordance with applicable regulations, each data subject has the following rights, under the conditions provided for by law:

• Right of access: obtain information about the personal data being processed and request a copy;

• Right to rectification: request correction of inaccurate or incomplete data;

• Right to erasure: request deletion of personal data in circumstances provided for by regulations;

• Right to restriction of processing: request temporary suspension of certain processing activities;

• Right to object: object to certain processing activities, particularly for direct marketing purposes;

• Right to data portability: receive certain data in a structured, commonly used format;

• Right to withdraw consent: withdraw previously given consent at any time, without retroactive effect;

• Right not to be subject to certain decisions based solely on automated processing, under the conditions provided for by the GDPR.

Users may also provide instructions regarding the handling of their personal data after their death, in accordance with French law.

16. Exercising Your Rights

To exercise their rights or ask any questions about the processing of their personal data, users may contact:

Laboratoires FENIOUX

9, avenue Pierre de Coubertin
36024 CHÂTEAUROUX Cedex – France
Email: info@feniouxlab.fr

Laboratoires FENIOUX undertakes to process requests within the time limits prescribed by regulations, generally within one month of receipt, unless a legally justified extension applies.

Proof of identity may only be requested where there is reasonable doubt about the identity of the person making the request.

In the event of an unresolved issue, data subjects may lodge a complaint with the French Data Protection Authority (Commission nationale de l'informatique et des libertés, CNIL):

www.cnil.fr

17. Minors' Data

The website is primarily intended for adults and professionals.

Minors are encouraged to seek assistance from their legal representative before providing personal data or placing an order.

Where a minor's consent is required for processing their data in connection with an information society service, the specific rules applicable to minors are observed.

18. Changes to the Privacy Policy

Laboratoires FENIOUX may amend this Privacy Policy to reflect regulatory, technical or organisational developments, as well as changes to the services offered on the website.

The applicable version is the one published on www.laboratoires-fenioux.com.

In the event of substantial changes, appropriate information may be provided to the users concerned.

Last updated: 27 October 2026