Privacy policy

Last updated: 23.08.2026

This Privacy Policy describes how HAIR COMPLEX INTERNATIONAL SAS (“HCI,” “we,” “us,” or “our”) — the data controller — collects, uses, and discloses your personal information when you visit or make a purchase from novelliss.com (the “Site”).

Data controller

HCI, registered office 4 Traverse Alexandre III, 06400 Cannes, France, is the data controller for personal data processed through this Site. Contact: office@novelliss.com.

What we collect, why, and on what legal basis

Data collected	Purpose	Legal basis
Device/browser info, IP address, cookies	Operate and secure the Site	Legitimate interest
Name, billing/shipping address, phone, email	Process and fulfil your order	Performance of a contract
Payment information (processed by Shopify Payments; we do not store card details)	Process payment	Performance of a contract
Order history, invoices	Accounting and tax compliance	Legal obligation
Email address (if you opt in)	Marketing communications	Consent
VAT number (professional customers)	Determine correct VAT treatment	Legal obligation

Fields marked as required at checkout are mandatory to process your order; marketing opt-in and any optional profile fields are not.

Sharing your personal information

We share personal information with: - Shopify (e-commerce platform and payment processor) - AD2L (fulfillment/logistics partner) - Marketing and analytics providers, if and when we adopt them (this policy will be updated at that time)

We do not sell your personal information.

International transfers

Shopify and Shopify Payments may process data using infrastructure located outside the European Economic Area. Where this occurs, Shopify’s own Data Processing Addendum incorporates the European Commission’s Standard Contractual Clauses (SCCs) as the transfer safeguard. AD2L processes fulfillment data only within France/the EU. We do not otherwise transfer your personal data outside the EEA or UK.

Your rights under GDPR

You have the right to access, correct, delete, restrict, or object to our processing of your personal information, and the right to data portability. To exercise these rights, contact office@novelliss.com. You also have the right to lodge a complaint with your local data protection authority (in France, the CNIL).

Data retention

• Order and invoice records: 10 years (French accounting/tax obligation)

• Customer account and commercial relationship data: 5 years after the last interaction (French commercial limitation period)

• Marketing/prospect data (if you opt in and do not purchase): 3 years from your last contact with us, after which we will ask if you’d like to remain subscribed

• Data is deleted or anonymized once these periods expire, unless a longer retention is legally required

Cookies

We use cookies to operate and improve the Site, including for analytics and (where consented) marketing purposes. You can manage your preferences through our cookie consent banner and your browser settings.