Privacy Policy – GDPR

1• Recitals

The purpose of this Privacy Policy, provided by Apothicom Distribution (hereinafter referred to as "Apothicom") is to inform users (hereinafter referred to as the "User" or "Users") and customers (hereinafter referred to as the "Customer" or "Customers") that make use of the website (hereinafter referred to as the "Website") of how their personal data (hereinafter referred to as "Personal Data") is processed once collected, in accordance with Data Privacy Act no. 78-17 of 6 January 1978 as amended, and Regulation (EU) 2016/679 of 27 April 2016, known as the General Data Protection Regulation (GDPR).

2• Concepts and definitions

  • Personal Data: Any information that allows for the direct or indirect identification of a natural person.
  • Processing: Any operation or set of operations, performed at any point within the data's life cycle, through digital or physical means, fulfilling a clear, lawful, and explicit objective.

3• Personal Data collected

The Personal Data collected concerns the following:

  • Identification: Surname, first name, company or organisation name (if professional);
  • Contact details: Delivery and invoicing address(es), email address, telephone number;
  • Order information;
  • Bank details;
  • Browsing information: IP address, cookies;
  • Geographic location.

Data considered as mandatory is marked with an asterisk and is necessary for the processing of Customer orders.

4• Rights – Data Protection Officer

In accordance with the laws and regulations in force, any User concerned by the processing of their Personal Data has the following rights:

  • Right of information;
  • Right of access;
  • Right to rectification;
  • Right to deletion;
  • Right of opposition;
  • Right to restriction of processing;
  • Right to data portability;
  • Right to withdraw consent at any time.

Users can exercise these rights or ask questions by contacting Apothicom's Data Protection Officer (DPO) via:

Data Protection Officer (DPO)

Apothicom Distribution

52 Avenue Edison, 75013 Paris, France

+ 33 (0) 1 53 61 18 41

Required information:

  • Surname and first name;
  • Email address;
  • Customer account number.

Users may lodge a complaint with the CNIL if they believe their Personal Data rights have been violated.

5• Purposes – Legal basis – Data retention period

Purpose(s) Legal basis Data retention period
Offering products based on geographic location Fulfilment of the General Terms & Conditions of Sale Cookies are enabled for a period of 6 months. Any User or Customer may, at any time and before the data retention period has expired, reset these cookies via their browser settings or online account.
Creating and managing Customer accounts Fulfilment of the Contract Personal Data is stored as long as the Customer account remains active. If the Customer account is inactive for a period of 2 years, Personal Data will be deleted in the absence of a response from the Customer to the reactivation email sent .
Managing the Contract (quotes, orders, deliveries) Fulfilment of the Contract Personal Data is stored for a period of 10 years.
Accounting (invoices) Compliance with accounting and tax obligations Personal Data is stored for a period of 10 years.
Contractual relations and follow-up (information requests, Customer support, claim management) Fulfilment of the Contract Personal Data is stored as long as the Customer account remains active.
Analysing Website audiences, improving Customer experience Consent DaData is collected via cookies and stored for a period of 2 months before being deleted. Cookies are enabled for a period of 6 months. Any User or Customer may, at any time and before the data retention period has expired, reset these cookies via their browser settings or online account.
Sales prospecting (newsletters, product info, surveys, trials) Consent Personal Data is stored for a period of 3 years from the last time the User was in touch with Apothicom, unless the User withdraws their consent. After this 3-year period, consent will be requested again.

Our Website uses different types of cookies:

  • Technical cookies: Required for Website functionality (e.g., product display by location, basket, sessions);
  • Analytical cookies: To measure Website traffic (e.g., via Matomo);
  • Third-party cookies: May be used by partners for embedded content.

Users can view the list of enabled cookies by clicking here.

Users can manage their preferences via their Customer account:

6• Data recipients

Personal Data is shared only with the following subcontractors ("Partners") for the purposes mentioned above:

  • Apothicom staff;
  • Logistics and transport providers;
  • Payment provider (Axepta);
  • Technical providers:
    • Accounting and management software;
    • Hosting services;
    • Marketing and analytics tools;
  • Legal authorities if required by law.

7• Security measures

Apothicom and its Partners implement technical and organizational measures to ensure the Website is secure and protect Personal Data.

8• Data transfers outside the European Union

Some data may be transferred outside the EU, especially when using third-party services. Apothicom uses Brevo and Mailchimp for marketing:

  • Brevo is based in Europe (France), but may also use servers or service providers outside the European Union in certain cases.
  • Mailchimp is based in the USA, operated by The Rocket Science Group.

These transfers are governed by standard contractual clauses (SCC) validated by the European Commission and/or additional security measures implemented by the service providers in order to ensure a level of protection equivalent to that required by the GDPR.

9• Modifications to the Privacy Policy

Apothicom reserves the right to modify this Privacy Policy at any time, in order to ensure its Users of its compliance with the laws in force.

Any such modifications will have no impact on any prior orders on and/or visits to the Website, which remain subject to the Privacy Policy in force at the time of the order and/or visit, as accepted by the User or Customer at said time.

Users and Customers are invited to read and familiarise themselves with this Privacy Policy every time they make use of the services provided by Apothicom. Apothicom shall inform its Users and Customers of any significant modifications to this Privacy Policy.

This Privacy Policy was published on 1 June 2025.

10• Applicable law

This Privacy Policy is governed by French law. Any dispute regarding the interpretation or fulfilment hereof that cannot be settled amicably between the parties shall fall within the jurisdiction of the French courts.

Last updated: 1 June 2025