Privacy policy
The essentials on protecting your data.
Effective date: 1 May 2026
Entrusting your data to a brand means trusting it. We take that trust seriously. This page explains in simple terms what we collect, why we do so, how long we keep it, and how you take back control whenever you wish.
In one sentence.
We only collect the data needed to process your order and improve your experience, we never sell your data, and you remain in control at all times. For any question: rgpd@bebooncare.com.
1. Who looks after your data
The website www.bebooncare.com is published by SASU DEVSECUP, a French company. It is the controller of your personal data within the meaning of the General Data Protection Regulation (GDPR).
For any request concerning your data, a single address: rgpd@bebooncare.com. The company's full contact details appear in our Legal notice.
2. What we collect, and why
We work on a simple principle: ask only for what we really need. Here, purpose by purpose, is what we collect.
To process and deliver your order, we need your first and last name, your delivery and billing addresses, your email, your telephone number and of course the contents of your basket. Without this information, we can neither identify you, nor get your order to you, nor keep you informed of its progress.
If you create a customer account (which remains optional), we keep your login details, your order history and the addresses you save. This is what lets you find your past purchases, repeat an order in one click, or manage several delivery addresses without having to re-enter them.
To send you our newsletter, and only after your explicit consent, we keep your email and, if you give it to us, your first name, so that we can address you by name rather than as a stranger. You can unsubscribe from every mailing, in one click.
To support you through our customer service, we keep a record of your email, your order number, the exchanges we have had and any attachments. This spares you from repeating your story at every conversation, and lets us act quickly when you contact us.
To run our loyalty programme, we keep track of your purchase history, your points balances and the benefits you have earned. Without this information, we cannot recognise you as a loyal customer.
To measure the site's audience and personalise our advertising, and only with your consent given via the cookie banner, we collect browsing data. This information helps us understand what really interests our visitors, improve the site, and deliver our communications to the right people rather than at random.
To meet our accounting and tax obligations, finally, we are required to keep your identity details, your billing address, the amounts and your invoices. That data depends neither on your choice nor on ours: French law requires it.
Personalisation quiz.
If you complete one of our quizzes to receive recommendations, please note that your answers are processed strictly anonymously. Nothing is recorded, nothing is linked to your identity. You can answer freely.
Payment data.
Your bank card number is never visible to or stored by bebooncare. It is sent directly to our secure payment provider, via an encrypted channel. We only see the confirmation of the transaction.
3. How long we keep it
Your data stays with us only for as long as strictly necessary: no more, no less.
Data relating to your customer account and your orders is kept for 3 years from your last purchase. Beyond that, and without any further interaction on your part, it is deleted or securely archived.
If you are subscribed to our newsletter, your data is kept until you unsubscribe, or at the latest after 3 years without any interaction on your part.
The cookies you accept have a maximum lifespan of 13 months, in accordance with the CNIL's recommendations.
Finally, invoices and accounting documents are kept for 10 years. This period is not bebooncare's choice: it is a French legal obligation from which we cannot depart.
4. Who we share it with
Your data is never sold, rented or exchanged. This is a clear commitment: there is no asterisk, no small print at the bottom, no hidden exception.
Your data may, however, be passed on to our technical service providers, and only when they need it to act on our behalf: the provider that processes your payment, the carrier that delivers to you, the host that runs the site, the marketing tools through which we communicate with you. Each of them is selected for its security guarantees and is contractually bound to comply with the GDPR.
Your data may also be passed on to public authorities where the law requires us to do so: under a court order, for example. The detailed list of our service providers is available on request at rgpd@bebooncare.com.
Data outside the European Union.
Some of the tools we use (social media, audience measurement), may transfer data to the United States. These transfers are governed by compliant legal safeguards: the Data Privacy Framework, standard contractual clauses approved by the European Commission. Full details are available on request.
5. Cookies, in plain terms
On your first visit to bebooncare.com, a banner asks for your consent to place non-essential cookies: those that measure the audience, personalise advertising, or interact with social media. You are free to accept, to refuse, or to choose case by case. Refusing does not degrade your shopping experience in any way.
Some cookies, however, are placed without asking for your consent: those that make your basket work, keep you logged in, and ensure the security of the site. The law allows this because they are essential to the service you have come for.
Your preferences are never set in stone. You can change them at any time via the “Manage cookies” link at the bottom of every page of the site.
6. Your rights, at any time
The GDPR gives you eight rights, which we respect unconditionally. At any time you can:
Access your data and request a copy of it. Have inaccurate information corrected or completed. Request the deletion of your data. Restrict the use we make of it. Retrieve your data in a reusable format: this is known as the right to portability. Object to a processing operation or to any commercial prospecting. Withdraw your consent, at any time, for the processing that depends on it. And finally, set out instructions regarding the fate of your data after your death.
To exercise any of these rights, a single address:
We respond to every request within one month at most. For security reasons (to protect your data against a request that does not really come from you), we may need to verify your identity before processing it.
Complaint to the CNIL.
If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL) via cnil.fr/fr/plaintes. We would of course rather resolve things directly with you: write to us first, and we will look for a solution.
7. How we protect your data
We implement the technical and organisational measures expected of a serious online retailer: systematic encryption of communications via HTTPS, daily backups, access restricted to authorised members of our team only, strengthened authentication for our administrators, rigorous selection of our service providers.
No security is absolute. If, despite our precautions, a data breach were to present a risk to your rights, we undertake to notify the CNIL within 72 hours, as required by the GDPR, and to inform you directly and without delay where the situation requires it.
8. To go further
This page sets out the essentials. For curious, methodical or simply vigilant minds, a detailed version of our policy is available on request at rgpd@bebooncare.com. It sets out in particular:
The details of each processing operation, with its precise purposes, its legal bases and the data concerned. The named list of all our technical service providers and their location. The details of retention periods, category by category. The exact legal mechanisms governing transfers outside the European Union. The technical details of our security measures.
This policy may change to reflect legal developments or changes to our services. Any substantial change will be flagged, and the date of the update will appear on the first page.