Privacy policy
At Hermetica Paris (operated by Memo America INC), we respect the right to privacy of our visitors and recognize the importance of protecting the information collected about them. This privacy policy concerns how we collect, store, and use the personal information you provide to us.
Hermetica Paris is committed to processing your personal data in accordance with the provisions of the General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the amended Law No. 78-17 of 6 January 1978 relating to data processing, files, and freedoms (the "Data Protection Act"), which define the conditions under which personal data processing may be carried out.
Any information collected through the website that allows you to be identified directly or indirectly is considered personal data and will be processed in accordance with this policy.
Any questions regarding our privacy policy should be addressed to contactusa@hermetica.com or via the Contact Us page on this site. If you are under 16, you must inform a parent or guardian of our privacy policy to obtain their consent before registering, subscribing, or placing an order with us.
Data Controller
The data controller of the data collected and processed on this website is Memo America INC. You can reach our data protection contact at contactusa@hermetica.com.
Purposes of Processing, Legal Bases, and Retention Periods
We only collect and process data that is strictly necessary for the purposes we set, and we only retain it for the necessary time.
| Processing Purpose | Legal Basis | Data Processed | Retention Period |
|---|---|---|---|
| Managing requests received through the contact form | Legitimate interest to respond to your contact requests | Name, first name, email address, phone number, order number, content of your message | For customers: 3 years from the end of the commercial relationship. For prospects: 3 years from the collection of personal data or from the last contact from the prospect. At the end of this period, and if no activity is detected on your account, all your personal information will be deleted from our servers. |
| Creating a user account and providing an identifier | Legitimate interest to manage customer and user accounts | Customer ID, name, first name, postal address, email, age; managing login with Facebook & Google services if applicable | For the duration of the commercial relationship, or until the account is deleted by the user, or 3 years from the last account activity |
| Managing the loyalty program and referrals | Legitimate interest to provide customers with a loyalty and referral program; user consent | Customer ID, name, first name, email, age, number of referrals, number of loyalty points | For the duration of the commercial relationship, or until the account is deleted by the user, or 3 years from the last account activity |
| Managing product or service orders | Contract execution | Customer ID, name, first name, postal address, email, order history, amounts, products ordered | 5 years from the end of the contractual relationship. Archiving for accounting purposes up to 10 years |
| Managing payment for products and services | Contract execution for providing purchased goods and services | Name, first name, banking information, billing information, credit card number, cardholder name, card expiration date, security code (processed to validate payment but never retained) | Retention of banking data for 13 months. The card security code is never retained |
| Retaining credit card data for future purchases | Consent | Name, first name, banking information, billing information, credit card number, cardholder name, card expiration date | Until consent withdrawal or card validity duration |
| Managing newsletter and Member List subscription | User consent to receive information via the newsletter | Email address, first name | For the duration of the newsletter subscription |
| Operating online help for real-time assistance | Legitimate interest to provide users with a real-time help tool | Customer ID, name, first name, help request, date and time of request, written conversation, order tracking number | Retained for 3 years from the last contact, then deleted |
| Scheduling online appointments | Legitimate interest to provide an online appointment scheduling tool with store advisors | Name, first name, phone number, email address, date and place of appointment | For customers: 3 years from the end of the commercial relationship. For prospects: 3 years from the collection of personal data or from the last contact from the prospect. |
| Managing marketing activities | Legitimate interest to develop marketing and communication activities about our products and services; user consent for mailing activities | Name, first name, customer ID, purchased products and services, mobile phone number (SMS), postal address, email address | For customers: 3 years from the end of the commercial relationship. For prospects: 3 years from the collection of personal data or from the last contact from the prospect |
| Managing job applications through the dedicated site section | Consent to allow job applications through the site to develop company staff | CV and cover letters. Recruitment portal: https://memo-international.talentview.io/en | Retained for 2 years from the last contact with the candidate, then deleted |
| Allowing you to post comments on our site | Legitimate interest to provide quick access to product reviews | Username, rating, message content collected via the Judge.me platform | Present on the site as long as we have not removed them or they remain on the Judge.me platform |
For cookie management, you can consult our cookie policy here: us.hermetica.com/pages/cookies-policy.
Marketing Opt-in and Opt-out
By registering, subscribing, or using our services with your specific consent, Hermetica Paris is able to use your personal data for marketing purposes in accordance with this policy. All personal information shared with us will not be retained in an identifiable format longer than necessary.
You have the right to know at any time what information we hold about you, and the right to review and update your personal data. If you believe the personal information we hold is not accurate, please log in using the "Login" menu on the home page; your personal information will then be available for review and change in the "My Account" section (under "My Details", "Shipping Details" and "My Email Preferences"). You can change or delete recorded credit/debit card details each time you make a purchase, or by adding or changing a shipping/billing address. If you change your billing or shipping address while your order is still being processed, the order will be reprocessed through security validation checks. If you prefer, you can contact us by email at contactusa@hermetica.com and we will assist you.
Regarding the marketing messages you receive after registering at us.hermetica.com, you can withdraw your consent at any time by selecting the unsubscribe option included in these messages. You can also choose to prevent the use of your personal information for marketing or targeting purposes. If you wish to unsubscribe or delete all your data from our database, you can contact us to make a deletion request (see below).
Personal Data of Minors
Our services and products are not intended for minors. It is the responsibility of a minor's parents, or any person with parental authority, to decide whether their child is authorized to use the services and products we offer.
Recipients of Your Data
Within our company
The data collected through our site is intended for our marketing department and other internal departments for processing your orders and implementing the purposes described above.
Our partners
The information we store will neither be sold nor used for purposes other than guaranteeing you the best possible service. Your personal data may only be disclosed to third parties when necessary to achieve the purposes described above. These third parties are companies or organizations to which we entrust the management of services on our behalf, or which local laws require. We ensure that third parties handle your personal data with the utmost care and in compliance with applicable data protection laws, whether they are based within or outside your country.
These third parties include:
- Couriers and carriers
- Payment providers
- IT support
- Marketing communication agencies and consultants
- Market research and analysis service providers
- Legal advisors and other professional consultants
- Regulatory bodies, governments, and enforcement agencies
Data Transfers
Some recipients of personal data may be located outside your country. Where required, appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws. For example, hosting the site with our provider Cloudflare involves data transfers to the United States and Canada, carried out under recognized transfer mechanisms.
Data Security and Confidentiality
Because your data is valuable, we do everything possible to guarantee its security and confidentiality. We have implemented an information security management system and continually maintain our security at the state of the art. We always prioritize securing the personal data you entrust to us.
Your Rights
We are committed to answering your questions clearly and precisely and to providing the necessary elements when you exercise your rights. Depending on the grounds for processing, you can generally exercise the following rights:
- Right of access: to obtain confirmation that your personal data is or is not being processed, and to receive a copy of it;
- Right of rectification: to obtain the correction of inaccurate personal data or the completion of incomplete data;
- Right of erasure: to obtain the deletion of your personal data where possible;
- Right to object: to object at any time to the processing of your personal data based on our legitimate interest;
- Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time without justification;
- Right to restriction: to request that processing be frozen for a given period;
- Right to portability: to receive the personal data you have provided in a structured, commonly readable format and to transfer it to a third party.
Exercising Your Rights
To exercise your rights, or to ask any question about data processing, you can contact us by email at contactusa@hermetica.com (attn: personal data protection), or by mail to Memo America INC, attn: personal data protection.
Update to This Policy
This privacy policy was last updated on 6 July 2026. In case of any modification, you will be informed on this page.
