Privacy policy

In force from 5 September 2026. This Privacy Policy replaces all previous versions.

1. Who is responsible for your data

The data controller is Fons and Splendor SAS, trading as Pure n' Bio, 59 rue de Ponthieu, Bureau 326, 75008 Paris, France (RCS Paris 917 710 295).

For any question about your personal data, or to exercise your rights, write to info@purenbio.com.

2. What we collect

  • Identity and contact details — name, email address, telephone number, delivery and billing address (including, for Saudi Arabia, the Short National Address required for delivery).
  • Order data — products ordered, amounts, currency, order history, correspondence with our support team.
  • Payment data — processed directly by our payment providers. We receive only the outcome of the transaction and the last digits and type of card. We never store your full card number.
  • Technical and usage data — IP address, device and browser type, pages viewed, referring source, collected through cookies and similar technologies.
  • Marketing preferences — whether you have consented to receive our emails or messages.

3. Why we use it, and on what legal basis

  • To perform your order — processing, payment, shipping, customs clearance, tracking, returns and refunds, and customer support. Legal basis: performance of the contract.
  • To meet legal obligations — accounting, tax, customs declarations and record retention. Legal basis: legal obligation.
  • To protect the store — fraud prevention and security. Legal basis: our legitimate interest.
  • To improve the Site — aggregated audience measurement. Legal basis: legitimate interest, or consent where required.
  • To send marketing messages — newsletters, offers and product news. Legal basis: your consent, which you may withdraw at any time.

We do not sell your personal data, and we do not use it for advertising or marketing purposes without your consent.

4. Who we share it with

We share only what is necessary, with:

  • Shopify (Shopify International Limited, Ireland) — the e-commerce platform hosting the Site;
  • payment providers — Shopify Payments, Tabby and similar services, for processing your payment;
  • carriers and customs brokers — to ship, clear and deliver your parcel;
  • service providers — email, messaging, review and analytics tools acting on our instructions;
  • public authorities — where required by law.

Some of these providers are located outside the European Economic Area. In that case transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

5. How long we keep it

  • Order and invoicing data: 10 years, as required by French commercial and tax law.
  • Customer account and support data: for the life of the account, then 3 years after the last contact.
  • Marketing consent data: 3 years after the last interaction, or until you unsubscribe.
  • Cookie data: as stated in the cookie banner, and no longer than 13 months.

6. Your rights

Under the GDPR you may, at any time, request access to your data, its correction, its erasure, the restriction of its processing, or its portability; object to processing based on our legitimate interest; and withdraw your consent to marketing.

Write to info@purenbio.com. We answer within one month. You also have the right to lodge a complaint with a supervisory authority — in France, the CNIL (www.cnil.fr).

If you reside in the GCC, these rights are granted to you in addition to any rights you hold under your national data protection law, including the Saudi Personal Data Protection Law and the UAE Personal Data Protection Law.

7. Cookies

The Site uses cookies that are strictly necessary for it to function (basket, session, security), and — only with your consent — measurement and marketing cookies. You can accept, refuse or change your choice at any time through the cookie banner or your browser settings. Refusing non-essential cookies does not prevent you from ordering.

8. Security

We apply appropriate organisational and technical measures to protect your data against loss, alteration, destruction and unauthorised access, including encryption in transit. No transmission over the internet can be guaranteed to be completely secure, and we ask you to keep your account password confidential.

9. Children

The Site is not intended for children under 16. We do not knowingly collect data from them. If you believe we hold such data, write to us and we will delete it.

10. Changes

We may update this policy. The version in force is the one published here, with its effective date shown at the top.