Privacy policy

KYMAS places particular importance on the processing, confidentiality, and security of your personal data. It is important to us to offer you personalized services while respecting your personal choices and your privacy.

By using our website “www.kymas.com” (hereinafter the “Site”), you acknowledge that you have read this privacy policy (hereinafter the “Privacy Policy”), which governs the use and protection of your personal data collected when using our Site or in our Boutiques, meaning any information that directly or indirectly identifies you (“Data” or “Personal Data” or “Personal Information”), such as your last name, first name, postal address, email address, and customer number.

Effective as of June 7, 2025

WHO IS THE DATA CONTROLLER?
WHAT DATA DO WE COLLECT?
FOR WHAT PURPOSES DO WE USE YOUR DATA?
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
WHAT ARE YOUR RIGHTS?
WHO CAN ACCESS YOUR PERSONAL DATA?
WHERE DO WE TRANSFER YOUR DATA?
SECURITY AND CONFIDENTIALITY OF YOUR PERSONAL DATA
MISCELLANEOUS
SPECIFIC APPENDIX FOR U.S. RESIDENTS

1. WHO IS THE DATA CONTROLLER?

The data controller determining the purposes for collecting your Data is KYMAS, a Simplified Joint Stock Company (S.A.S) with a share capital of €1,000, registered with the Toulouse Trade and Companies Register (RCS) under number 980519334, with its registered office located at 4 rue des buis, 31170 Tournefeuille (hereinafter the “Company” or “We”).

For any questions regarding your Personal Data, you may contact us by email at support@kymas.com or by completing the contact form available on the dedicated page of the Site and selecting the subject “Privacy Policy.”

2. WHAT DATA DO WE COLLECT?

Different categories of personal data may be collected by the Company during your in-store experience or while browsing the Site. Personal Data refers to any information that allows you to be identified either directly (for example, by your name) or indirectly (for example, through a unique customer number). Under this Privacy Policy, the Personal Data that We collect directly from you includes Personal Information such as:

  • Your identification and contact details (last name, first name, email address, phone number, postal address, nationality);

  • Your gender and date of birth;

  • Your purchase history in-store and on the Site;

  • Your contact and purchasing preferences (size, style, colors);

  • Your browsing data on our Site (for example, the date and time of your connection and/or browsing, pages visited), the type of device and browser, your location, browser language, internet service provider, IP address, and, where applicable, your social media identifiers; and

  • Your communications with our customer service department.

Personal data required to fulfill the purposes described in Article 3 are indicated on the various pages of the Site. If you do not complete these mandatory fields, We will not be able to respond to your requests and/or provide you with the requested products and services. Other information is optional and allows us to better understand you and improve our communications and services toward you.

3. FOR WHAT PURPOSES DO WE USE YOUR DATA?

We may use your Personal Data for purposes defined according to the nature of our relationship. Your Personal Data is collected only when the Company has a legal basis for doing so.

Depending on the context in which your Personal Data is collected, it may be used for one or more of the following purposes:

Purpose of Processing — Legal Basis

  • Ensuring delivery of your ordered products

  • Managing your requests submitted to our Customer Service and any complaints
    → Performance of your purchase contract

  • Creating your customer account

  • Sending our newsletters and personalized offers

  • Sending your electronic receipt

  • Conducting marketing activities, opinion surveys, and market research

  • Providing a personalized browsing experience based on your purchase history and Site navigation
    → Your consent

  • Managing requests related to the exercise of your personal data rights

  • After-sales service and implementation of legal product warranties
    → Legal obligation

  • Analyzing and improving the quality and performance of services

  • Managing transactions and preventing fraud

  • Preparing statistics, segmentation, studies, and analyses to improve our offerings and services, after ensuring anonymization of your Personal Data (or ensuring the data cannot be reassigned to an identified individual)

  • Sharing data within the Company for customer knowledge purposes

  • Other administrative or accounting activities
    → Legitimate interest

4. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We retain your Personal Data for a limited period depending on the purpose for which it was collected. To determine retention periods, We apply the following criteria:

  • Data collected when placing an order on the Site: as long as you remain a customer and up to three (3) years from the last interaction between us. Billing data will be retained for ten (10) years from the invoice date;

  • Data collected when creating a customer account: until you request deletion of your account or after three (3) years from the last interaction between us;

  • Data collected when using services offered in-store or on the Site: until the service ends, you unsubscribe, or three (3) years from the last interaction;

  • Data related to Customer Service requests: until the request has been processed.

If you consent to cookies being placed on your device, We retain them for the duration provided by applicable regulations. For more information, please refer to our “Cookie Policy.”

Some of your Data may be archived with restricted access strictly for compliance with legal, accounting, and tax obligations, and for managing complaints and warranty claims within statutory limitation periods.

After these periods, Data will be deleted or irreversibly anonymized.

Your banking details are retained by our payment service providers. When making purchases on the Site, you must enter your banking details in the designated fields. If you consent, you may allow our payment provider to securely retain your banking details for future purchases by checking the box “Save your payment details.”

5. WHAT ARE YOUR RIGHTS?

In accordance with applicable personal data regulations, you have the following rights, which you may exercise at any time:

  • Right to information

  • Right of access and rectification

  • Right to erasure / right to be forgotten

  • Right to object

  • Right to data portability

  • Right to define the fate of your Data after death

To exercise these rights, you may access your customer account on the Site or contact Customer Service at support@kymas.com. We may request additional information to verify your identity.

We undertake to respond as promptly as possible after receiving your request.

6. WHO CAN ACCESS YOUR PERSONAL DATA?

Your Personal Data is primarily processed internally by relevant Company departments. Access is limited to authorized personnel when necessary.

We may share your information with:

  • Other entities within the Company’s group;

  • Trusted third-party service providers acting on our behalf (Site operators, payment providers, IT service providers, logistics companies, marketing agencies, market research and data processing companies).

These recipients are carefully selected and provide adequate guarantees regarding data security and confidentiality.

Personal Data may also be transferred:

i. For processing consistent with the original purpose and subject to your consent;
ii. As required by law or legal proceedings;
iii. In connection with mergers, acquisitions, or asset transfers.

7. WHERE DO WE TRANSFER YOUR DATA?

Your Personal Data may be transferred outside the European Economic Area to countries with different data protection laws. Such transfers are carried out securely and in compliance with applicable regulations.

We require recipients to implement appropriate safeguards, such as standard contractual clauses or binding corporate rules.

8. SECURITY AND CONFIDENTIALITY

We protect your Personal Data through appropriate technical and organizational security measures to prevent loss, alteration, destruction, or unlawful use.

We ensure that our partners maintain equivalent protection standards and implement anti-fraud and secure transaction measures.

9. MISCELLANEOUS

This Privacy Policy may be updated at any time to reflect regulatory changes or updates to our data practices. The updated version will be available on the Site under “Legal Notice.”

If you have a complaint regarding the protection of your Personal Data, you have the right to lodge a complaint with the CNIL (French Data Protection Authority) at https://www.cnil.fr/.

10. SPECIFIC APPENDIX FOR U.S. RESIDENTS

A. INFORMATION FOR CALIFORNIA RESIDENTS

This section applies only to California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Categories of Personal Information Collected (past 12 months):

  • Identifiers (name, postal address, IP address, email, passport number);

  • Additional personal information under Cal. Civ. Code Section 1798.80 (phone number);

  • Protected classification characteristics (gender);

  • Commercial information (purchase history);

  • Internet activity information (browsing and search history);

  • Professional/employment information;

  • Sensitive information (signature, physical characteristics including size preferences, known child data).

Categories of Sources:

  • Directly from you;

  • From your devices.

Business Purposes:

  • Providing services;

  • Security and integrity;

  • Customer account management;

  • Payment processing;

  • Marketing and advertising (as permitted by law);

  • Research and development;

  • Service improvement.

We do not knowingly sell or share personal information of consumers under 16 years old.

California residents have rights including:

  • Right to know;

  • Right to delete;

  • Right to correct;

  • Right to opt-out of sale or sharing;

  • Right to limit use of sensitive information;

  • Right to non-discrimination.

To exercise these rights, contact support@kymas.com or use the Site contact form.

B. INFORMATION FOR TEXAS RESIDENTS

Effective July 1, 2024.

Texas residents have rights including:

  • Right to confirm processing and access data;

  • Right to rectification;

  • Right to deletion;

  • Right to obtain a portable copy;

  • Right to opt-out (targeted advertising, sale, profiling);

  • Right to appeal.

To exercise your rights, contact support@kymas.com or use the Site contact form and select “Privacy Policy.”