Personal data protection policy

 

Our Personal Data Protection Charter

This Charter is intended to inform you of Laboratoire Therascience's commitment to scrupulously respecting the trust you place in it, and to ensuring the confidentiality and security of the personal data you entrust to it, in accordance with the French "Data Protection Act" (loi Informatique et Libertés) No. 78-17 of January 6, 1978, as amended, and the provisions of the European General Data Protection Regulation (GDPR), which came into force on May 25, 2018. This charter supplements the information provided to you when you share your data with us (for example: when creating your customer account, when placing an order by mail or on our website, or when subscribing to a newsletter). As data controller, and in order to serve you better, Therascience SAM is required to collect and use certain personal data.

1. Nature of the data and purposes of processing

The information collected about you falls into the following categories: 

• Identity data: title, last name, first name, address, date of birth (to verify that the user is of legal age); 
• Contact data: address, phone number (mobile and landline), email address; 
• Data specific to our field of activity: name and city of your healthcare prescriber; 
• Financial data: information related to payment methods; 
• Commercial data: customer number, purchase history, reviews of our products; 
• Technical data: connection data, data relating to your browsing on our website, login and password, as well as data relating to the opening of our emails and your interaction with them (see section 1.1). 

This information is requested from you during various interactions with our company: creating a customer account on our website, ordering by mail, phone, or via our website. 

On the one hand, it is essential for the following purposes: 

• Recording and fulfilling your order; 
• Tracking the status of your delivery; 
• Processing your requests and complaints. 

On the other hand, always in keeping with your rights and interests, it may also be used for the following purposes: 

• Managing and improving the customer relationship; 
• Optimizing your use of the website; 
• Communications by mail and/or email (requiring, in this specific case, your express consent) to introduce you to our new products, offer you special deals, gifts and discounts, and suggest products suited to your expectations; 
• Conducting satisfaction surveys and collecting reviews on our products; 
• Offering partner offers aligned with your interests, sent exclusively by mail; 
• Measuring the opening of our emails and personalizing our communications, using tracking pixels, based on your prior and specific consent (see section 1.1). 

1.1 Tracking pixels in our emails 

Our emails may contain a "tracking pixel": a very small image that, when loaded, allows us to know whether you have opened an email and how you interact with its content. We use this technology for the following purposes: 

Open measurement for marketing purposes and personalization of our communications: subject to your prior, freely given, and specific consent, collected separately from your newsletter subscription. You may grant or withdraw it at any time from your "My Communication Preferences" area. 

Measuring successful delivery of our emails (deliverability): in order to identify recipients who have become inactive and adjust our mailings accordingly. Strictly limited to this purpose, this measurement does not require your consent. 

Emails related to fulfilling a service you requested, known as "transactional" emails (order confirmation, invoice, delivery tracking, password reset, security alerts), are not subject to consent. In accordance with the CNIL's recommendation of April 14, 2026, and the guidelines of the European Data Protection Board (EDPB), you retain control over this processing and may object to it at any time. 

Information from this tracking is used only for the purposes described above. It is neither shared with third parties nor reused to serve you advertising on other websites or social media. 

1.2 Cookies and trackers on our website 

While browsing our website, cookies and similar technologies may be placed on your device. Some are necessary for the website to function and for the security of your order: these do not require your consent. Others, intended to measure audience, remember your preferences, or offer you advertising tailored to your interests, are only placed after your acceptance. 

You express your choice on your first visit, purpose by purpose, and you may change it at any time via the cookie management module accessible on the website. Declining is as simple as accepting. 

Details of these trackers, their purpose, and their retention period are set out in our cookie policy. Trackers placed by our advertising partners are covered in section 4.1.

2. Your rights and how to exercise them

In accordance with the law, you have the following rights regarding your personal data: 

• A right of access and a right of rectification, in the event this data proves inaccurate or incomplete; 
• The rights to request the portability of your data, as well as its erasure, deletion, and restriction of processing; 
• A right to object to the use of your data for commercial prospecting purposes or in connection with marketing processing such as profiling; 
• The right to lodge a complaint with a competent supervisory authority. 

Regarding processing based on your consent (in particular, tracking of email opens and personalization), you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out before such withdrawal. You may exercise this directly from your "My Communication Preferences" area. 

You may exercise these various rights free of charge and at any time by sending an email to the following address: info@therascience.com, specifying "Protection des données personnelles" (Personal Data Protection) in the subject line. You may also write to us at the following address: 

Laboratoire Therascience, Service marketing clients, 3 rue de l'Industrie, 98000 MONACO, enclosing a photocopy of an identity document. In all cases, please specify your first name, last name, and customer number. 

When you object to the use of your data, all necessary measures are taken as quickly as possible by our departments; however, due to processing times, you may still receive messages for a limited period. We apologize for this and thank you in advance for your understanding.

3. Data retention:

For product orders: the data collected is retained for as long as necessary to fulfill your order, and then for the period required to establish proof of a right or contract; this data may be archived in accordance with the provisions of the French Commercial Code relating to the retention period for books and documents created in connection with commercial activities, and the Consumer Code relating to the retention of contracts concluded electronically. 

For prospecting data (newsletter subscriptions, customer accounts created without a purchase, etc.): the data collected is retained for the purposes of fulfilling web offers; it may be archived in accordance with the aforementioned provisions of the Commercial Code and the Consumer Code. 

For data from any other form, such as recruitment: data is collected in order to respond to you and is retained for the duration of the exchange. 

For email tracking data (opens, interactions): this data is retained for a maximum period of 25 months from the date of collection, after which it is deleted or anonymized. Your choice regarding open tracking (consent or objection), however, is retained in order to provide proof of it and avoid asking you again. 

4. Data recipients:

Your personal data is intended for the departments of Laboratoire Therascience concerned by your requests, as well as its authorized service providers and subcontractors. However: 

• When you order a product on the Website, the personal data you provide as part of the order is intended for Laboratoire Therascience, or its subcontractors responsible for fulfilling said order; 
• Our electronic communications are sent using one or more specialized email platforms, acting as subcontractors on behalf of Laboratoire Therascience and offering appropriate data protection guarantees. 

4.1 Advertising trackers and social media campaigns 

If you accept them during your visit to our website, trackers placed by advertising platforms, in particular Meta Platforms Ireland Limited (Facebook, Instagram), allow us to measure the effectiveness of our campaigns, to serve you advertising tailored to your interests on those platforms, and to build audiences of people with browsing profiles similar to yours. 

In this context, and only if you have accepted these trackers, certain information about your visit may be transmitted to these platforms: pages viewed, products added to the cart, order confirmation, and, where applicable, your email address in encrypted (hashed) form — never in plain text. This encrypted address is used solely to recognize an existing account on the platform in order to link the visit to the advertisement that preceded it. These transmissions take place from your browser or from our servers, depending on the case. 

You may change or withdraw your choice at any time via the cookie management module accessible on the website. Withdrawal stops future transmissions. 

Outside of this context, Laboratoire Therascience does not share its contact files with advertising platforms. In particular, information relating to the opening of our emails (section 1.1) is not transmitted to them and is not used to build these audiences. 

These platforms may transfer your data outside the European Union; such transfers are governed by the appropriate safeguards provided for under the GDPR. Details of these trackers, their retention periods, and the cookie management module are presented in our cookie policy.

5. Data security and confidentiality

Laboratoire Therascience has endeavored to implement the necessary precautions to preserve the confidentiality and security of the personal data processed and to prevent it from being distorted, damaged, or destroyed, or from unauthorized third parties gaining access to it. Technical and organizational security measures have been put in place for this purpose. 

However, Laboratoire Therascience does not control all the risks associated with the operation of the Internet and draws internet users' attention to the potential risks inherent in its use and operation. 

Your data is hosted on secure servers, whether managed by Laboratoire Therascience or by its subcontractors selected for the security and confidentiality guarantees they offer. 

Our security measures include, where applicable, the use of firewalls and secure servers, encryption, the deployment of appropriate access rights management systems and procedures, careful selection of subcontractors, adequate training for Therascience staff responsible for processing personal data, as well as other measures essential to ensuring appropriate protection of your personal data against any unauthorized use or disclosure. Where applicable, we may also make backup copies and use other means to prevent any accidental damage to or destruction of your personal data. Regarding the section of the Therascience website that handles online transactions, we use an industry-standard security system, such as the "Secure Sockets Layer" (SSL) encryption protocol, to preserve the confidentiality and security of your online transactions.