Privacy policy

Last updated: 2025

Smug LLC, operating the Hormone Paris brand ("Hormone Paris", "we", "us", "our"), is committed to protecting your personal data. This Privacy Policy describes how we collect, use, store, and share your personal information when you visit or make a purchase from www.hormoneparis.com (the "Site").

By using the Site, you acknowledge that you have read and understood this Privacy Policy.

01 — Data Controller

Smug LLC
Sharjah Media City, Sharjah, UAE
VAT No. 100441030200003
License No. 2007248.01
customercare@hormoneparis.com

02 — Personal Data We Collect

We may collect the following categories of personal data:

• Identity and contact data: name, email address, billing address, delivery address, telephone number
• Transaction data: details of purchases made, payment method (we do not store full card details), order history
• Technical data: IP address, browser type, device identifiers, pages visited, time spent on pages, referral source
• Usage data: information about how you interact with the Site, including clicks, searches, and navigation patterns
• Communications data: records of correspondence if you contact us by email or through the Site
• Marketing preferences: your preferences for receiving communications from us

03 — How We Collect Personal Data

We collect personal data through the following means:

• Directly from you when you place an order, create an account, subscribe to communications, or contact us
• Automatically through cookies and similar tracking technologies when you visit the Site
• From third parties including our e-commerce platform (Shopify), analytics providers (Google Analytics), marketing platforms (Klaviyo), and advertising platforms (Meta)

04 — How We Use Your Personal Data

We use your personal data for the following purposes:

• To process and fulfil your orders, including payment processing and delivery coordination
• To manage your account and provide customer support
• To send order confirmations, shipping updates, and other transactional communications
• To send marketing communications where you have consented or where we have a legitimate interest in doing so
• To analyse how the Site is used and improve its performance and content
• To detect and prevent fraud and other unlawful activity
• To comply with our legal obligations
• To track orders through our order tracking service (17TRACK)

05 — Legal Basis for Processing (EU/EEA Customers)

For customers located in the European Union or European Economic Area, we process your personal data on the following legal bases:

• Contract performance: processing necessary to fulfil your order
• Legitimate interests: analytics, fraud prevention, and improving our services
• Consent: marketing communications and non-essential cookies
• Legal obligation: compliance with applicable laws

06 — Third-Party Services and Data Sharing

We share your personal data with the following categories of third parties, solely to the extent necessary for the purposes described in this policy:

• Shopify Inc. — e-commerce platform provider. Shopify processes data as both a service provider on our behalf and, in respect of certain features (Shop Pay, Shop Sign-in), as an independent data controller. For details, see Shopify's Privacy Policy at shopify.com/legal/privacy.
• Google LLC — analytics services (Google Analytics). Data may be transferred to the United States. For details, see policies.google.com/privacy.
• Meta Platforms Inc. — advertising and audience measurement (Meta Pixel). Data may be transferred to the United States. For details, see facebook.com/privacy/policy.
• Klaviyo Inc. — email and SMS marketing platform. Data may be transferred to the United States. For details, see klaviyo.com/legal/privacy.
• Stockist — store locator functionality.
• 17TRACK — order tracking functionality.
• Fulfilment and logistics partners — third-party logistics providers who fulfil and ship orders on our behalf.
• Payment processors — payment card data is processed by Shopify Payments and associated payment providers. We do not store full payment card details.

We do not sell your personal data to third parties.

07 — International Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including the United States and the United Arab Emirates. Where such transfers occur in respect of individuals in the European Union or European Economic Area, we rely on appropriate safeguards including standard contractual clauses approved by the European Commission.

08 — Cookies

The Site uses cookies and similar tracking technologies for the following purposes:

• Strictly necessary cookies: required for the Site to function, including checkout and session management
• Analytics cookies: Google Analytics, used to understand how visitors interact with the Site
• Marketing cookies: Meta Pixel and Klaviyo, used to deliver relevant advertising and measure campaign effectiveness

You may control your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Site.

09 — Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and reporting obligations. Order and transaction data is typically retained for a minimum of 7 years in accordance with applicable commercial and tax regulations. Marketing data is retained until you withdraw consent or unsubscribe.

10 — Your Rights

Depending on your country of residence, you may have the following rights in respect of your personal data:

• The right to access the personal data we hold about you
• The right to correct inaccurate or incomplete personal data
• The right to request deletion of your personal data
• The right to restrict or object to our processing of your personal data
• The right to data portability
• The right to withdraw consent at any time where processing is based on consent
• The right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at customercare@hormoneparis.com. We will respond within the timeframe required by applicable law.

11 — Marketing Communications

We may send you marketing communications by email or SMS where you have subscribed or where we have a legitimate interest in contacting you. You may unsubscribe at any time by clicking the unsubscribe link in any communication or by contacting customercare@hormoneparis.com.

12 — Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment transactions are encrypted using SSL technology. However, no method of transmission over the internet is entirely secure and we cannot guarantee absolute security.

13 — Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated by posting the updated policy on the Site with a revised date. Continued use of the Site following any such update constitutes acceptance of the revised policy.

14 — Contact

For any questions regarding this Privacy Policy or to exercise your data rights, please contact:
customercare@hormoneparis.com