Independent site of an Atomy Europe member · orders are placed with a free Atomy account, at the same price for everyone

Privacy policy

Last updated: 6 September 2026

This translation is provided for information only; the French version prevails.

Who is responsible

The publisher of the K-Beauty Paris website (see the legal notice), established in Belgium, is the controller of the processing described here, within the meaning of the General Data Protection Regulation (GDPR) and the Belgian law of 30 July 2018. For any question: contact@k-beauty.paris.

What we collect, and why

  • Sponsor code request. Your e-mail address, the date of the request, the page it came from, the code assigned and, if you confirm it, your Atomy member number. Purpose: to send you the code and the registration steps, then to assign the following codes correctly. Legal basis: your request (pre-contractual measure) and the publisher’s legitimate interest in organising sponsorship. Retention: 24 months after the request.
  • Account and assistant subscription. E-mail address, plan, dates, customer ID at Stripe and, if you fill it in, your beauty profile (skin type, concerns, hair, allergies, routine). Purpose: to provide the subscribed service and manage billing. Legal basis: the contract. Retention: for the life of the account, then 5 years for billing data (legal obligation).
  • Conversations with the assistant. For plans that include memory, your messages and the answers are stored on your account; you can delete each conversation from the assistant. On the Discovery plan, the conversation stays in your browser. Retention: until you delete it, or until the account is closed.
  • Free trial counter. The number of questions already asked, linked to your access code or your account. This counter is needed to enforce the trial limit; it stores no questions. Retention: as long as the access exists, since the trial cannot be renewed.
  • Contact form. Name, e-mail, subject, message. Purpose: to reply to you. Retention: 12 months.
  • Technical logs. IP address and connection data, kept by our hosting providers for the security of the service, for no more than 12 months.

We collect no payment data: your card is entered at Stripe and we never see its number.

Who has access

  • Vercel (United States) hosts the site; Supabase hosts the database and the accounts, in the European Union or the United Kingdom; OVH (France) sends our e-mails; Stripe (Ireland / United States) processes subscription payments.
  • Anthropic (United States) generates the assistant’s answers: the content of your questions, and your beauty profile if you have one, is sent to it to produce the answer. Under its commercial terms, Anthropic does not use these exchanges to train its models.
  • Atomy Europe receives nothing from the Site. The data you enter on the Atomy registration form is governed by Atomy’s privacy policy.
  • Transfers outside the European Union rely on the European Commission’s standard contractual clauses or on an adequacy decision.

We neither sell nor rent your data, and we send no newsletter without your explicit consent.

Cookies

The Site uses only strictly necessary cookies: the login session, and the anonymous visit identifier of the free-question counter. No advertising cookies, no social-network trackers, no third-party audience measurement. These cookies are exempt from consent under Article 129 of the Belgian law of 13 June 2005 on electronic communications; this is why no banner is displayed.

Your rights

You may request access to your data, its rectification or erasure, the restriction of or objection to a processing operation, and its portability, by writing to contact@k-beauty.paris. We reply within one month. You may also lodge a complaint with the Belgian Data Protection Authority (autoriteprotectiondonnees.be, rue de la Presse 35, 1000 Brussels). Conversations and the beauty profile can be deleted directly from your account; account deletion is requested by e-mail.

Security

Password-free magic-link login, encrypted exchanges (HTTPS), database access restricted by per-user rules, sensitive writes reserved for the server. No system is infallible: in the event of an incident affecting your data, we would inform you.

Changes

This policy may evolve with the Site; the update date appears at the top of the page.