Privacy policy
Privacy Policy
Last updated: September 24, 2026
French Formulas UG (haftungsbeschränkt) ("we", "us") operates the online store frenchformulas at frenchformulas.com on the Shopify e-commerce platform. Protecting your personal data is important to us. This Privacy Policy describes what data we collect, how we use and share it, and what rights you have.
1. Data Controller and Contact
French Formulas UG (haftungsbeschränkt)
Im Meisental 37, 67433 Neustadt an der Weinstraße, Germany
Commercial Register: Amtsgericht Ludwigshafen am Rhein, HRB 71076
Email: hello@frenchformulas.com
Phone: +49 6321 965 3000
2. Collection and Processing of Personal Data
We only process personal data to the extent necessary to provide a functional website and our services:
- Basic and contact information: name, billing and shipping address, email address, phone number (for contract performance and customer care, Art. 6(1)(b) GDPR).
- Customer account: login details, settings and preferences, if you create an account (Art. 6(1)(b) GDPR).
- Payment and transaction data: payment information, items purchased, order history, returns (for processing purchases and returns, Art. 6(1)(b) GDPR).
- Communications: the content of your messages to us, e.g. customer inquiries (Art. 6(1)(b) or (f) GDPR).
- Technical and usage data: IP address, browser type, device information, access times (for IT security, fraud prevention and website operation, Art. 6(1)(f) GDPR).
3. Cookies and Consent
We use strictly necessary cookies based on Section 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies and tracking technologies (analytics and marketing) are only used with your consent via our cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw your consent at any time with future effect via the cookie settings on our website. Withdrawal does not affect the lawfulness of processing carried out before it.
4. Service Providers and Platforms
Shopify
Our store is hosted by Shopify International Ltd., Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland. Shopify provides the technical infrastructure and processes order, payment, and website data on our behalf. Data may be transferred to Shopify servers in the US or other third countries; such transfers are safeguarded by EU Standard Contractual Clauses.
For certain enhanced features, Shopify uses data about your interactions with our store together with data from other stores. Shopify is responsible for this processing and is also the point of contact for your rights in this respect.
More information: https://www.shopify.com/legal/privacy/customers and https://privacy.shopify.com/en
Microsoft Clarity
We use Microsoft Clarity, an analytics service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity shows us how visitors use our website, for example through mouse movements, clicks, scrolling, heatmaps, and pseudonymised session recordings. Form inputs are masked. Clarity sets cookies and may transfer data to Microsoft in the US; Microsoft is certified under the EU-U.S. Data Privacy Framework.
- Legal basis: exclusively your consent via our cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
- Withdrawal: at any time via the cookie settings.
More information: https://privacy.microsoft.com/privacystatement
AI Shopping Assistant
Our website offers an AI-powered chat that helps you choose products and routines. The service is provided by Microsoft Clarity (provider details above). When you use the chat, your messages and the responses are processed to give you suitable recommendations. Responses are generated automatically by AI and do not replace medical or pharmaceutical advice. Please do not enter health data, diagnoses, or your name and contact details in the chat.
- Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in providing helpful product guidance) or Art. 6(1)(b) GDPR where your request relates to a purchase.
Google Analytics
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how visitors use our website, for example which pages are viewed, how long a visit lasts, and which channels bring visitors to us. For this purpose, Google Analytics sets cookies and processes data such as device information, approximate location, and usage behaviour. Google Analytics 4 does not store IP addresses. Data may be transferred to Google in the US; Google is certified under the EU-U.S. Data Privacy Framework. Data is automatically deleted after [14] months.
- Legal basis: exclusively your consent via our cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
- Withdrawal: at any time via the cookie settings.
More information: https://policies.google.com/privacy
Meta Pixel and Conversions API
We use the Meta Pixel and related technologies (e.g., Conversions API) provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. This allows us to see which actions users take after viewing or clicking a Meta ad (Facebook/Instagram), helping us evaluate campaigns and deliver targeted advertising. Data may be transferred to Meta in the US; Meta is certified under the EU-U.S. Data Privacy Framework.
- Legal basis: exclusively your consent via our cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
- Withdrawal: at any time via the cookie settings.
More information: https://www.facebook.com/privacy/policy
Klaviyo (Newsletter and Email Marketing)
For our newsletter and automated emails, we use Klaviyo, a service provided by Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA. When you subscribe to our newsletter, we store your email address and, if provided, your name. Subscription uses a double opt-in process: you receive an email asking you to confirm. Klaviyo also records whether and when you open our emails and which links you click, and, with your consent, your activity in our store (e.g., products viewed, abandoned carts) so we can send you relevant content. Data is transferred to the US; such transfers are safeguarded by EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
- Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
- Withdrawal: at any time via the unsubscribe link in every email or by contacting hello@frenchformulas.com.
More information: https://www.klaviyo.com/legal/privacy-notice
5. Sharing Data with Third Parties
We only share personal data in the following cases:
- with shipping and logistics partners to deliver your order (Art. 6(1)(b) GDPR),
- with payment service providers ([PayPal, Klarna, Shopify Payments]) to process payments (Art. 6(1)(b) GDPR),
- with the service providers listed above for the purposes described there,
- where required by law (e.g., tax regulations) or by valid requests from authorities (Art. 6(1)(c) GDPR).
We do not sell your data.
6. International Data Transfers
Where personal data is processed outside the European Economic Area (EEA) or the UK (e.g., in the US), we ensure an adequate level of protection through EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
7. Data Retention
We retain personal data only as long as necessary for the purposes described here or as required by statutory retention periods (e.g., tax and commercial record-keeping obligations of up to 10 years). Data processed on the basis of your consent is deleted after you withdraw it, unless we are legally required to retain it.
8. Children
Our services are not intended for persons under 16. We do not knowingly collect data from children. If you are a parent and become aware that your child has provided us with personal data, please contact us so we can delete it.
9. Your Rights
Under the GDPR, you have the following rights:
- Access to your data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure ("right to be forgotten", Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on legitimate interests (Art. 21 GDPR)
- Withdrawal of consent (e.g., for Clarity, Google Analytics, Meta Pixel, Klaviyo) at any time with future effect
To exercise these rights, contact us at: hello@frenchformulas.com
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany.
10. Changes to This Privacy Policy
We update this Privacy Policy when our services or the legal situation change. The version published on this page applies.


