Privacy Policy
Last updated: 24 September 2026 — Version 3.1 This policy explains what data BeautySwapp uses when you browse the Website, sell or buy a product, or sign up to the newsletter, why, how long it is kept and how to exercise your rights under Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act. This English version is provided for convenience; in the event of any discrepancy, the French version shall prevail.
Who is responsible for your data?
| Item | Details |
|---|---|
| Data controller | BEAUTYSWAPP, SAS with share capital of EUR 2,000, Paris Trade and Companies Register No. 992 591 925 |
| Address | 6 rue d'Armaillé, 75017 Paris, France |
| Legal representative | Roxane Gentile, President |
| Personal data contact | hello@beautyswapp.com (subject: "Personal data") — +33 (0)7 69 16 47 21 |
| Data Protection Officer | None appointed to date; requests are handled by our personal data lead at the address above. |
What data, and why?
| Situation | Data | Legal basis | Retention period |
|---|---|---|---|
| You sign up to the newsletter | Email address, sign-up date, opens and clicks | Consent | Until you unsubscribe, or 3 years without interaction |
| You sell a product (WhatsApp) | First name, surname, telephone number, town, product photos and information, storage conditions, messages | Performance of a contract | During the relationship, then 3 years after the last exchange |
| Your listing is published | Seller's first name and town, product photos and description | Performance of a contract | While published, then 1 year after removal |
| You are paid for your sales | Name, bank details (IBAN), amounts paid | Performance of a contract; legal obligation (accounting) | 10 years for accounting records |
| Reporting Sellers' income to the tax authorities (DAC7) | Surname, first name, date of birth, address, tax identification number, payment details, number and value of sales, commissions | Legal obligation (Articles 1649 ter A et seq. of the French General Tax Code) | 10 years |
| You buy a product | Name, email, telephone, chosen pick-up point, product bought, amount, Stripe payment reference (card details are never passed to BeautySwapp) | Performance of a contract | 3 years after purchase; 10 years for accounting records |
| You make an offer or ask a question (WhatsApp, email) | First name, telephone number or email, messages | Performance of a contract; legitimate interest (answering your requests) | 3 years after the last exchange |
| You make a claim | Correspondence, photos, decision taken | Performance of a contract; legitimate interest (defence of our rights) | 3 years after closure; 5 years in the event of litigation |
| Reports of illegal content | Name and email of the person reporting, listing concerned, decision | Legal obligation (DSA) | 3 years |
| You browse the Website | IP address, browser type, pages requested (technical logs) | Legitimate interest (security and proper operation of the Website) | 1 year |
BeautySwapp does not ask for any health data. Please do not include any in your messages (for example an allergy or a pregnancy).
Listings drafted with artificial intelligence
The photos and information sent by Sellers are analysed by an artificial intelligence tool that drafts a proposed listing (brand, shade, size, condition). No decision is taken solely on the basis of this tool: the Seller approves the listing and a member of the BeautySwapp team checks it before publication. Please do not include faces or personal information in your photos.
Who receives your data?
Your data is accessible to the BeautySwapp team, within the scope of their tasks, and to the following recipients:
the Seller or Buyer, for the purposes of the sale: the Buyer sees the Seller's first name and town; the Seller receives only the Mondial Relay label;
our service providers, acting on our instructions:
| Provider | Role | Location | Safeguard for transfers outside the EU |
|---|---|---|---|
| Hostinger International Ltd (Cyprus) | Hosting of the Website and CMS | -- | -- |
| OVH SAS (France) | Domain name | European Union | — |
| Cloudinary | Storage and display of product photos | -- | -- |
| Google (Google Fonts) and Indian Type Foundry (Fontshare) | Fonts loaded by the Website, which receive your IP address | United States; India | ⚖ Recommendation: host the fonts on the Website's own server to remove this transfer |
| WhatsApp Ireland Limited (Meta) | Messaging with Sellers and Buyers | European Union; transfers to the United States | Data Privacy Framework — WhatsApp also acts as a controller for its own purposes |
| Mailjet (Sinch Mailjet SAS) | Newsletter delivery | European Union | — |
| Mondial Relay (France) | Delivery to Point Relais® | European Union | — |
Stripe Payments Europe, Limited (Ireland), which processes payments and collects your details on the payment page; Stripe also acts as an independent controller for its own obligations (fraud and money-laundering prevention), under its privacy policy (stripe.com/gb/privacy). Data may be transferred to Stripe, Inc. (United States) under the Data Privacy Framework;
authorities, where required by law (tax authorities under DAC7, judicial authorities).
BeautySwapp does not sell your data.
Transfers outside the European Union
Where data is transferred outside the European Union, BeautySwapp ensures it is adequately protected: a country recognised as adequate by the European Commission, a US company certified under the EU–US Data Privacy Framework, or the European Commission's standard contractual clauses. You may obtain a copy by writing to hello@beautyswapp.com.
Cookies and trackers
At present, the Website uses no audience measurement tools or advertising trackers. Only technical elements strictly necessary for it to function may be stored on your device; these do not require your consent. If trackers requiring consent are added, a banner will let you accept or refuse them, and this policy will be updated.
Security
BeautySwapp takes appropriate measures to protect your data: encrypted connection (HTTPS), access limited to authorised persons, strong passwords and strong authentication on administration tools. In the event of a data breach presenting a risk, BeautySwapp notifies the CNIL within 72 hours and informs you if the risk is high.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing (including direct marketing, via the unsubscribe link in every newsletter) and to data portability, as well as the right to withdraw your consent at any time and to give instructions on what happens to your data after your death.
To exercise these rights, write to hello@beautyswapp.com (subject: "Personal data") or to BEAUTYSWAPP, 6 rue d'Armaillé, 75017 Paris, France. We reply within one month, which may be extended by two months for complex requests. Some data must be kept while a legal obligation requires it (accounting, tax).
You may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France), or with the authority of your country of residence.
Minors
The BeautySwapp service is reserved for persons aged 18 or over.
Changes to this policy
This policy may change, in particular when the BeautySwapp app is launched. The current version is always available on the Website.