Privacy Policy
Last updated: 13 September 2026
At WILLAÏA, we value your privacy and are committed to protecting your personal data.
This Privacy Policy explains how WILLAÏA collects, uses, stores and protects your personal information when you visit willaia.com, create an account, make a purchase, subscribe to our communications, contact us, participate in a consultation or questionnaire, or otherwise interact with WILLAÏA.
This Privacy Policy is intended to provide information in accordance with the General Data Protection Regulation ("GDPR"), the French Data Protection Act (Loi Informatique et Libertés) and other applicable data protection laws.
1. WHO WE ARE
The data controller responsible for the processing of your personal data is:
WILLAÏA
66 Avenue des Champs-Élysées
75008 Paris
France
Email: contact@willaia.com
Website: willaia.com
For any question regarding this Privacy Policy or the processing of your personal data, you may contact us at the email address above.
2. PERSONAL DATA WE MAY COLLECT
Depending on how you interact with WILLAÏA, we may collect the following categories of personal data.
Identity and contact information
This may include your first name, last name, email address, telephone number, billing address, shipping address and country of residence.
Account information
If you create a WILLAÏA customer account, we may process information associated with your account, including your login details, account preferences, saved addresses, order history and other information you choose to provide.
We do not have access to your password in readable form.
Order and transaction information
When you make a purchase, we may collect information relating to the products purchased, order value, delivery method, billing and shipping information, transaction status, returns, refunds and communications concerning your order.
Payment information
Payments on our website are processed through Squarespace Payments and its payment service providers.
WILLAÏA does not directly store your complete payment-card details. Payment information is processed by the relevant payment providers in accordance with their own privacy and security practices.
Squarespace currently identifies Stripe as providing payment-processing services and Sift as providing fraud monitoring/detection in connection with Squarespace Payments.
Marketing and communication information
When you subscribe to WILLAÏA communications, we may collect your email address, subscription status, consent information, language preference, interactions with our emails and marketing preferences.
Where applicable, we may also process information such as whether an email was delivered, opened or clicked in order to understand the performance of our communications and improve them.
Customer service and correspondence
When you contact us, we may collect your name, email address and the content of your request, as well as any information you voluntarily provide to us.
Consultation, questionnaire and hair-profile information
If WILLAÏA offers a hair consultation, questionnaire, product recommendation tool or similar service, we may collect information you voluntarily provide regarding your hair characteristics, concerns, preferences, routines and product needs.
We use this information to provide relevant recommendations, personalize your experience and improve our products and services.
Important: WILLAÏA's hair questionnaires and recommendations are intended for cosmetic and product-selection purposes and are not intended to provide medical diagnosis or medical advice. Please do not submit health or other sensitive personal information unless a WILLAÏA service specifically requests it and provides appropriate information concerning its processing.
Technical and usage information
When you use our website, certain information may be collected automatically, including your IP address, device and browser information, approximate location derived from your IP address, pages visited, interactions with the website, referring source, session information and cookie or similar identifier information.
Some of this information is collected only where you have provided the necessary consent.
3. HOW AND WHY WE USE YOUR DATA
We process your personal data only where we have an appropriate legal basis.
We may process your data to:
Process and fulfil orders. This includes accepting payments, arranging delivery, managing returns and refunds, providing order updates and responding to issues concerning your purchase. This processing is generally necessary for the performance of our contract with you.
Create and manage your account. We process the information necessary to create, secure and administer your WILLAÏA account and provide the services you request.
Provide customer service. We use your information to respond to questions, requests, complaints and other communications.
Send marketing communications. Where required by law, we rely on your consent to send WILLAÏA news, product launches, private access, offers and other marketing communications by email.
Personalize your experience. Where permitted and, where required, with your consent, we may use information about your preferences and interactions to provide more relevant content, recommendations and communications.
Conduct analytics and improve WILLAÏA. We may analyse website usage, campaign performance, customer behaviour and other information to improve our website, products, communications and customer experience. Where this involves non-essential cookies or trackers, we will seek consent where required.
Prevent fraud and protect our services. We may process information where necessary to detect fraud, misuse, security threats and suspicious transactions.
Comply with legal obligations. Certain information may need to be retained or disclosed to comply with accounting, tax, consumer-protection, regulatory or other legal requirements.
4. EMAIL MARKETING AND THE WILLAÏA PRIVATE LIST
You may choose to join the WILLAÏA private list to receive news, early access, product announcements, offers and other communications.
We use Klaviyo to manage email subscriptions and marketing communications.
When you subscribe, information such as your email address, marketing preferences, subscription status and interactions with WILLAÏA emails may be processed through Klaviyo.
You may withdraw your consent at any time by selecting the unsubscribe link contained in our marketing emails or by contacting us at contact@willaia.com.
Unsubscribing from marketing communications will not prevent us from sending essential transactional or service communications relating to an order, account or request you have made.
Klaviyo currently states that its customer data is stored in the United States, in AWS infrastructure in Northern Virginia. Klaviyo states that it participates in the EU-U.S. Data Privacy Framework and uses additional safeguards such as Standard Contractual Clauses where appropriate.
5. COOKIES, ANALYTICS AND ADVERTISING
WILLAÏA uses, or intends to use, cookies and similar technologies to operate the website, remember preferences, understand how visitors interact with the website, measure performance and support advertising activities.
These technologies may include services provided by:
Squarespace — website hosting, ecommerce functionality and essential website services;
Google Analytics / Google — website analytics, measurement and, where applicable, advertising;
Meta — measurement and advertising associated with services such as Facebook and Instagram;
TikTok — measurement and advertising;
and other technologies that may be introduced as WILLAÏA's services evolve.
Some cookies are strictly necessary for the website to function and may be placed without your consent where permitted by law.
Analytics, advertising, retargeting and similar non-essential technologies are activated only where permitted by applicable law and, where required, after you have provided consent through our cookie-management mechanism.
You may accept, reject or manage non-essential cookies through the cookie settings available on our website.
Under French guidance, advertising trackers require prior consent, while certain audience-measurement trackers can be exempt only when they meet restrictive conditions—for example, being limited to anonymous statistics for the publisher and not enabling cross-site tracking or third-party non-anonymous data sharing.
Further information about the technologies used on the website may be provided in our Cookie Policy / Cookie Settings.
6. WHO WE SHARE YOUR DATA WITH
We do not sell your personal data.
We may share personal data with trusted service providers where necessary to operate WILLAÏA, including providers involved in:
website hosting and ecommerce infrastructure;
payment processing and fraud prevention;
order fulfilment and delivery;
email and customer communications;
analytics and website performance;
advertising and marketing;
customer support;
IT, security and cloud services;
accounting, legal and professional services.
These may include Squarespace, Klaviyo, Stripe, Sift, Google, Meta and TikTok, depending on which services you use and the consent choices you make.
We may also disclose personal data where required by law, court order or competent authority, or where necessary to establish, exercise or defend legal claims.
7. INTERNATIONAL DATA TRANSFERS
Because WILLAÏA operates internationally and uses service providers that operate globally, your personal data may be processed outside France or the European Economic Area.
Where personal data is transferred to a country that does not benefit from an adequacy decision of the European Commission, we seek to rely on appropriate safeguards where required, such as Standard Contractual Clauses, an applicable adequacy framework, or another lawful transfer mechanism.
For example, Klaviyo currently stores customer data in the United States and states that it relies on the EU-U.S. Data Privacy Framework for applicable EU-U.S. transfers, as well as Standard Contractual Clauses for transfers not covered by that framework.
8. HOW LONG WE KEEP YOUR DATA
We retain personal data only for as long as necessary for the purpose for which it was collected and to satisfy applicable legal, accounting, tax, contractual and regulatory obligations.
The applicable retention period depends on the nature of the information and our relationship with you.
For example:
Customer and order information may be retained for the duration of our commercial relationship and for any additional period required by applicable accounting, tax, consumer-protection or legal obligations.
Marketing information is retained while you remain subscribed or for the period permitted under applicable law. If you withdraw consent, we may retain limited information necessary to record and respect your opt-out.
Customer-service correspondence may be retained for as long as reasonably necessary to resolve your request and protect our legitimate interests.
Cookie and analytics information is retained according to the applicable technology, your choices and applicable legal requirements.
When information is no longer required, it will be deleted, anonymised or otherwise handled in accordance with applicable law.
9. YOUR DATA PROTECTION RIGHTS
Depending on the applicable law and circumstances, you may have the right to:
obtain information about how your personal data is processed;
request access to your personal data;
request correction of inaccurate or incomplete information;
request deletion of your personal data;
request restriction of processing;
object to certain processing;
withdraw your consent at any time where processing is based on consent;
request portability of certain personal data;
object to direct marketing at any time; and
exercise applicable rights concerning automated decision-making.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, contact:
We may need to request information reasonably necessary to verify your identity before fulfilling certain requests.
The CNIL confirms that individuals must be informed about their data processing at collection and about their relevant rights.
10. RIGHT TO COMPLAIN
If you believe that your personal data has been processed in violation of applicable data-protection law, you have the right to lodge a complaint with a competent supervisory authority.
In France, the supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL).
CNIL — Commission Nationale de l'Informatique et des Libertés
We encourage you to contact WILLAÏA first if you have concerns so that we have an opportunity to address them.
11. SECURITY
We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
If you create an account, you are responsible for maintaining the confidentiality of your account credentials and should notify us if you suspect unauthorised access to your account.
12. CHILDREN
WILLAÏA's website and services are not specifically directed at children.
We do not knowingly seek to collect personal data from children for marketing purposes. If we become aware that personal data relating to a child has been collected in circumstances requiring parental or guardian authorisation that has not been obtained, we will take appropriate steps in accordance with applicable law.
13. THIRD-PARTY LINKS
Our website may contain links to third-party websites, platforms or services.
WILLAÏA is not responsible for the privacy practices of independent third parties. We encourage you to review their privacy policies before providing personal information to them.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our services, technologies, business practices or legal requirements.
The current version will always be available on our website and the date of the latest update will appear at the top of this page.
Where required, we will provide additional notice of material changes.
15. CONTACT US
For questions regarding this Privacy Policy or your personal data, or to exercise your data-protection rights, please contact:
WILLAÏA
66 Avenue des Champs-Élysées
75008 Paris
France
Email: contact@willaia.com