Privacy policy
Last updated: September 1, 2026
1. Data Controller Identity
The website noila.fr is operated by:
Noïla
1 rue Marguerin – 75014 Paris
SIRET: 89441708800032
Email: contact@noila.fr
Website: noila.fr
As part of operating the Site and selling hair cosmetics products online, Noïla collects and processes certain personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable French law.
2. Personal Data Collected
We may collect the following categories of data:
Data provided directly by the Customer
When placing an order, creating an account, or making contact:
- first and last name;
- postal address;
- email address;
- phone number (if voluntarily provided);
- delivery information;
- order history;
- requests made to customer service.
Data collected automatically
When browsing the Site:
- IP address;
- browser type;
- operating system;
- pages viewed;
- browsing duration;
- cookie and tracker data.
3. Purposes of Processing
The data collected is used to:
- process and ship your orders;
- ensure customer follow-up and after-sales service;
- manage returns, refunds, and complaints;
- prevent fraud and secure transactions;
- improve the user experience on the Site;
- carry out audience statistics;
- send marketing communications if you have consented to this.
4. Legal Basis for Processing
Processing is based on:
- performance of the contract (order, delivery, payment);
- compliance with legal obligations (invoicing, accounting);
- Noïla's legitimate interest (security, Site improvement);
- consent where required (newsletter, non-essential cookies).
5. Secure Payment and Shopify
The store is hosted by Shopify.
Shopify provides the e-commerce platform enabling the sale of products.
Payments are secured via Shopify and the payment providers offered on the Site, including:
- credit card;
- PayPal;
- Apple Pay;
- Shop Pay.
Noïla never has access to the Customer's full banking details.
Payments are processed in accordance with PCI-DSS security standards.
For more information:
Shopify Privacy Policy
6. Data Recipients
Data may be shared only with providers necessary for the performance of the service:
- Shopify;
- payment providers;
- carriers (Mondial Relay, Chronopost);
- emailing/newsletter tools;
- technical or accounting service providers if necessary.
These providers only access the data strictly necessary for their duties.
7. Retention Period
Data is retained for a period proportionate to its purpose:
- orders and invoicing: applicable legal period;
- customer account: until deletion or prolonged inactivity;
- commercial prospecting: until consent is withdrawn or applicable legal period;
- cookies: as indicated in the cookie policy or banner settings.
Certain data may be retained longer to comply with applicable legal, tax, and accounting obligations.
8. Your Rights
In accordance with the GDPR, you have the following rights:
- right of access;
- right of rectification;
- right of erasure;
- right to object;
- right to restriction;
- right to portability;
- right to withdraw consent at any time.
To exercise your rights:
You may also lodge a complaint with the CNIL.
9. Cookies
The noila.fr website uses cookies and other trackers in order to:
- enable the proper functioning of the Site;
- remember your cart;
- secure your browsing;
- measure audience;
- improve the user experience.
On your first visit, a cookie banner allows you to:
- accept;
- refuse;
- configure cookies.
You may change your preferences at any time via the Site's cookie management tool.
Cookies that may be used
- _session_id: session identifier;
- _shopify_visit: visit statistics;
- _shopify_uniq: unique visitor count;
- cart: cart retention;
- secure_session_id: session security.
The retention period depends on the type of cookie used.
10. Newsletter and Marketing Communications
Subject to your consent, Noïla may send you:
- new products;
- promotional offers;
- brand information.
You may unsubscribe at any time via the link included in each email or by writing to:
11. Security
Noïla implements reasonable technical and organizational measures to protect personal data against:
- loss;
- unauthorized access;
- disclosure;
- alteration;
- destruction.
As no internet transmission is entirely secure, an obligation of means, not of result, applies.
12. External Links
The Site may contain links to third-party websites.
Noïla is not responsible for the privacy practices of these external sites.
The Customer is invited to consult their respective policies.
13. Amendments
Noïla reserves the right to modify this policy at any time.
The applicable version is the one published on the Site at the time of consultation.
In the event of a substantial modification, the update date will be revised.
14. Contact
For any questions regarding this policy:
Noïla
1 rue Marguerin – 75014 Paris
Email: contact@noila.fr