Complimentary shipping over €80·

LOUCET
EN|DE

Privacy Policy

Last revised · August 2026

Welcome to Loucet. We are committed to protecting your personal information and your right to privacy. This policy explains how we collect, use, disclose and safeguard your information when you visit loucet.com, place an order or subscribe to our letter.

The controller responsible for your data is the provider named in our Legal Notice.

1. Information we collect

A. Data you provide

  • Order data: name, delivery and billing address, email address and telephone number where given.
  • Payment data: processed by our payment provider. We receive confirmation of payment and the last four digits of the card, never the full card number.
  • Account data: email address and password hash, order history and saved addresses, if you choose to create an account.
  • Newsletter data: your email address and the date of your consent.
  • Correspondence: the content of messages you send us about an order, skin consultation or return.
  • Reviews: your first name, city and any clip you submit, published only with your written consent.

B. Usage and technical data

  • IP address and browser characteristics.
  • Operating system and device type.
  • Language preference and referring URL.
  • Pages viewed and the time of the visit.

2. How we use your information

  • Fulfilling orders: processing payment, shipping, returns and refunds.
  • Service messages: order confirmations, dispatch notices and replies to your questions.
  • Managing accounts: registering you and keeping your order history.
  • The letter: sending the monthly email if, and only if, you asked for it.
  • Improving the Site: understanding which pages are used, in aggregate.
  • Security and fraud prevention, and meeting our accounting and tax obligations.

3. Legal bases

Where the GDPR applies, we process personal data on the following bases: performance of a contract for orders and deliveries (Art. 6(1)(b)); consent for the newsletter, published reviews and any non-essential cookies (Art. 6(1)(a)); legal obligation for invoicing and retention periods (Art. 6(1)(c)); and legitimate interests in operating a secure, working shop (Art. 6(1)(f)). Consent can be withdrawn at any time with effect for the future.

4. Sharing your information

We do not sell personal data. We share it only where it is needed to provide the service, or where the law requires it:

  • Payment providers, to take payment and process refunds. [Name the provider once chosen]
  • Shipping partners, to deliver your order and let you track it. [Name the carrier once chosen]
  • Hosting: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel runs the servers this site is delivered from and processes server logs, including your IP address, in doing so.
  • Email providers, for order confirmations and the letter. [Name the provider once chosen]
  • Tax advisers and authorities, where we are legally required to disclose.
  • A buyer or successor, in connection with a merger, financing or sale of the business.

Where a provider processes data outside the EU or UK, we rely on standard contractual clauses or an adequacy decision. For Vercel as a US provider, standard contractual clauses under Art. 46(2)(c) GDPR apply, and servers are run inside the EU where possible.

5. Cookies and tracking

  • Essential cookies: needed for the bag, checkout and login.
  • Analytics cookies: help us see how the Site is used. Set only with your consent.
  • Functionality cookies: remember your preferences, such as language and currency.

You can change your choices at any time through the “Cookie preferences” link in the footer, or withdraw consent in your browser settings. Disabling essential cookies will stop checkout from working.

6. How long we keep it

Order and invoice records are kept for as long as statutory commercial and tax retention periods require, which in Germany is generally between six and ten years. Account data is kept until you delete the account. Newsletter data is kept until you unsubscribe. Enquiries that do not lead to an order are deleted once the matter is closed.

7. Data security

We use appropriate technical and organisational measures to protect personal data, including encrypted transport. No transmission over the internet can be guaranteed to be completely secure, so any transmission remains at your own risk.

8. Your rights

  • Request a copy of the personal data we hold about you.
  • Have inaccurate data corrected.
  • Have your data erased, where no retention obligation stands against it.
  • Restrict or object to certain processing.
  • Receive your data in a portable, machine-readable format.
  • Unsubscribe from the letter at any time using the link in every email.
  • Complain to a supervisory authority in your country of residence.

9. Third-party websites

The Site may link to websites we do not control. We are not responsible for their content or their privacy practices.

10. Children

The Site is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Updates to this policy

We may update this policy from time to time. The current version is always the one published here, marked with the revision date above.

12. Contact

For any question about this policy or to exercise your rights, write to privacy@loucet.com. Postal address and provider details are in our Legal Notice.