Privacy Policy

Last updated: September 2, 2026

This Privacy Policy explains how Noxelya collects, uses, discloses and protects your personal information when you visit noxelya.com, place an order, subscribe to our emails or text messages, or otherwise interact with us (together, the “Services”). Please read it carefully. By using the Services, you acknowledge that you have read and understood this Policy.

1. Who we are

Noxelya is a brand operated by KANYA, a French simplified joint-stock company (société par actions simplifiée) registered under SIREN 103 588 521, with its registered office at 60 rue François Ier, 75008 Paris, France. KANYA is the controller responsible for the personal information described in this Policy.

For any question about this Policy or to exercise your rights, contact us at founder@noxelya.com.

2. Information we collect

Depending on how you interact with the Services, we may collect:

Contact details — name, email address, mailing and shipping address, and, where you provide it, phone number.
Order and transaction information — items viewed, added to cart or purchased, order history, returns and exchanges, and shipping details.
Payment information — processed directly by our payment providers. We do not store full card numbers on our systems.
Account information — where you create an account, your login details and saved preferences.
Communications — the content of your emails, text messages, chat messages and support requests, including reviews and photos you choose to send us.
Marketing preferences — your email and SMS subscription status, and the date, time and source of your consent.
Device and usage information — IP address, browser and device type, operating system, referring pages, pages viewed, and interactions with the Services, collected through cookies and similar technologies.

We do not ask for and do not knowingly collect health information, government identification numbers, or other sensitive categories of personal information.

3. How we collect it

Directly from you, when you place an order, create an account, subscribe, or contact us.
Automatically, through cookies, pixels and similar technologies when you use the Services.
From our service providers, such as our e-commerce, payment, shipping, analytics and marketing partners, acting on our behalf.

4. How we use your information

To process, fulfill, ship and support your orders, returns and exchanges.
To create and manage your account and remember your preferences.
To communicate with you about your order, your account, and your requests.
To send you marketing communications by email and, where you have expressly opted in, by text message.
To measure, operate, secure and improve the Services, including our advertising.
To detect, investigate and prevent fraud, abuse, chargeback fraud and other unlawful activity, and to protect our rights, our customers and our business.
To comply with our legal, tax and accounting obligations and to establish, exercise or defend legal claims.

5. Text message (SMS) program

This section applies to our SMS and MMS marketing program in the United States.

How you join. You can only join by giving your express written consent, by checking an unchecked opt-in box and providing your mobile number at checkout on noxelya.com. We do not add numbers collected for shipping, delivery or customer service to our marketing program, and we do not add numbers obtained from third parties.
No purchase required. Your consent to receive marketing text messages is not a condition of any purchase.
What you receive. Recurring automated marketing text messages from Noxelya, such as cart reminders, order-related offers, restock alerts and promotions.
Message frequency. Message frequency varies. You can expect up to 8 messages per month.
Rates. Message and data rates may apply.
How to stop. Reply STOP to any message to opt out at any time. You will receive a single confirmation message and no further marketing text messages. You may also opt out by writing to founder@noxelya.com. We honor opt-out requests made in any reasonable manner, including other clear expressions such as QUIT, END, CANCEL, UNSUBSCRIBE or a plain request to stop texting you.
Help. Reply HELP for assistance, or contact founder@noxelya.com.
Carriers. Mobile carriers are not liable for delayed or undelivered messages. Message delivery is not guaranteed and may be affected by your carrier, device or location.
Eligibility. You must be at least 18 years old and the authorized subscriber or user of the mobile number you provide. Please tell us promptly if you give up or change that number.
Your data. To operate the program we share your mobile number with the messaging platform and telecommunications carriers strictly necessary to deliver the messages you asked for.

We do not sell, rent, lease or share mobile phone numbers, SMS opt-in information, or SMS consent with any third party or affiliate for their own marketing or promotional purposes. This information is used solely to operate the Noxelya text message program described above.

6. Email marketing

Where you subscribe, we send you marketing emails about our products, offers and news. Every marketing email contains an unsubscribe link, and you can withdraw your consent at any time by clicking it or by writing to founder@noxelya.com. We may still send you non-marketing messages about your orders and your account.

7. Cookies, pixels and advertising

We use cookies and similar technologies to keep the Services working, remember your preferences, measure traffic, and to make our advertising more relevant. These include analytics tools and advertising pixels operated by our advertising partners, which may set their own cookies and process information about your visit to show you our ads on their platforms and on other websites.

You can control cookies through your browser settings. Disabling some cookies may affect how the Services work for you. Where required by law, we ask for your consent before setting non-essential cookies, and you can withdraw it at any time.

8. When we disclose your information

We disclose personal information only as described in this Policy, and only to the extent necessary:

To service providers acting on our behalf — our e-commerce platform, payment processors, email and SMS platforms, telecommunications carriers, customer support tools, fulfillment and shipping partners, analytics and hosting providers. They are permitted to use your information only to provide services to us.
To advertising partners — for measurement and targeted advertising, subject to your rights and choices described below. This never includes mobile numbers or SMS consent.
Where you ask us to — for example to arrange delivery of your order.
For legal reasons — to comply with applicable law, respond to lawful requests from public authorities, enforce our terms and policies, respond to payment disputes and chargebacks, or protect our rights, our customers, or the safety of others.
In a business transaction — in connection with a merger, acquisition, reorganization or sale of assets, subject to this Policy.

We do not sell your personal information for money.

9. International transfers

We operate from France and serve customers in the United States and elsewhere, so your personal information may be transferred to, stored in and processed in countries other than the one you live in, including the United States. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms, such as the European Commission’s Standard Contractual Clauses, or on a finding of adequacy.

10. Data retention

We keep your personal information for as long as needed for the purposes described in this Policy: for the duration of our relationship, then for the periods required by tax, accounting and commercial law, and for as long as needed to establish, exercise or defend legal claims. Records of your marketing consent and of any opt-out are kept for as long as necessary to demonstrate our compliance. When information is no longer needed, we delete it or anonymize it.

11. Security

We use appropriate technical and organizational measures to protect your personal information, including encryption in transit and restricted access to our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send us sensitive information through unsecured channels, and keep your account credentials confidential.

12. Your rights and choices in the United States

Depending on where you live, you may have the right to:

know what personal information we have collected, used and disclosed about you, and request access to it;
request deletion of your personal information;
request correction of inaccurate personal information;
obtain a portable copy of your personal information;
opt out of the sale or sharing of your personal information for targeted advertising;
not be discriminated against for exercising any of these rights.

To exercise these rights, email founder@noxelya.com. To opt out of the sharing of your information for targeted advertising, you can also use the Your Privacy Choices page on our website. If you visit our site with a Global Privacy Control signal enabled, we treat it as an opt-out request for that browser.

We may need to verify your identity before acting on your request, and you may use an authorized agent where the law allows it. We respond within the timeframes required by applicable law. If we decline your request, you may appeal by replying to our response.

13. Your rights in the EEA and the UK

If you are located in the European Economic Area or the United Kingdom, you have the rights to access, rectify, erase, restrict and object to the processing of your personal information, the right to data portability, and the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

We process your personal information on the following legal bases: performance of our contract with you (orders and support), your consent (marketing emails and text messages, non-essential cookies), our legitimate interests (securing and improving the Services, preventing fraud, defending our rights), and compliance with our legal obligations.

To exercise your rights, contact founder@noxelya.com. You also have the right to lodge a complaint with your local supervisory authority. In France, this is the Commission Nationale de l’Informatique et des Libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

14. Children

The Services are intended for adults. We do not knowingly collect personal information from children, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us with personal information, contact founder@noxelya.com and we will delete it.

15. Third-party websites

The Services may contain links to websites we do not operate. We are not responsible for their privacy practices or their content, and we encourage you to read their policies before providing them with any information.

16. Changes to this Policy

We may update this Policy to reflect changes in our practices or for legal, operational or regulatory reasons. We will post the updated version on this page and revise the “Last updated” date above. Where required by law, we will notify you of material changes.