Privacy Policy

www.bodifylab.com — Last updated: 01/01/2026

This Privacy Policy is intended to inform users of the www.bodifylab.com website about how their personal data is collected, used, retained, and protected in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and applicable French law (Data Protection and Civil Liberties Act).

1. Identity of the data controller

BODIFYLAB Legal form: Sole proprietorship Registered office: 15 Allée Etienne Cabet, 92000 Nanterre Registered with the Nanterre Trade and Companies Register — SIRET: 890718661 Email: infos@bodifylab.com | Telephone: +33 7 80 98 28 84

2. Personal data collected

Identification data: First and last name, postal address, email address, telephone number.

Order data: Products purchased, amounts and order history, delivery and billing addresses.

Payment data: Bank details are NEVER stored by BODIFYLAB. They are processed exclusively by secure payment providers.

Data related to programs & coaching: Stated goals (gaining weight, losing weight, curves), monitoring information (progress, customer feedback), exchanges with the assigned advisor, photos, videos and audio recordings.

Browsing data: IP address, browser type, pages viewed, cookies (see Cookies section).

No sensitive medical data is required.

3. Purposes of data processing

  • Management of orders and deliveries
  • Customer support and after-sales service
  • Management of programs and personalized coaching
  • Sending commercial information (if consent has been given)
  • Improvement of the user experience
  • Management of the customer account
  • Compliance with legal and accounting obligations

4. Legal basis for processing

In accordance with the GDPR, processing is based on:

  • Performance of a contract (order, program, coaching)
  • Consent (newsletter, marketing)
  • Legal obligation (billing, accounting)
  • Legitimate interest (security, service improvement)

5. Data retention period

Data type Retention period
Customer data 5 years after the last order
Accounting data 10 years (legal obligation)
Marketing data 3 years after the last contact
Cookies 13 months maximum

6. Recipients of the data

Data may be disclosed only to:

  • Secure payment providers
  • Carriers
  • E-commerce and CRM tools
  • Emailing tools
  • Coaching providers (strictly necessary)

BODIFYLAB never sells or rents personal data.

7. Transfer of data outside the EU

Certain data may be processed using tools located outside the European Union (e.g. cloud services).

In this case, BODIFYLAB ensures that standard contractual clauses are put in place and that the level of protection complies with the GDPR.

8. Data security

BODIFYLAB implements all necessary technical and organisational measures to ensure data security:

  • Secure access
  • Secure hosting
  • Access limited to authorised persons
  • Regular backups

9. Users’ rights

In accordance with the GDPR (Articles 15 to 22), each user has the following rights:

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure / “right to be forgotten” (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to object (Art. 21)
  • Right to data portability (Art. 20)

To exercise your rights: infos@bodifylab.com — A response will be provided within a maximum period of 30 days.

10. Cookies

The BODIFYLAB website uses cookies to:

  • Ensure the proper functioning of the website
  • Analyse browsing activity
  • Improve the user experience
  • Provide tailored content

Upon the first visit, a banner allows users to accept, refuse or customise cookies. Settings may be changed at any time.

11. Newsletter & communication

Newsletter subscription is optional.

Each email sent by BODIFYLAB contains an immediate unsubscribe link.

12. Data relating to minors

BODIFYLAB's products and services are intended exclusively for adults.

No voluntary collection of data relating to minors is carried out.

13. Amendments to the policy

BODIFYLAB reserves the right to amend this Privacy Policy at any time to ensure its compliance with applicable legislation.

The applicable version is the one published on the website at the time of browsing.

14. Complaints

In the event of a dispute relating to the processing of personal data, the user may lodge a complaint with the competent authority:

CNIL — French Data Protection Authority www.cnil.fr