PRIVACY POLICY

First published: 20/08/2017
Last updated: 04/09/2025

You can print this Privacy Policy from your browser using CTRL+P (Windows/Linux) or ⌘+P (Mac).

At MESSIKA, we deeply value your privacy and are committed to protecting it. We comply with all applicable data protection laws and regulations. This Privacy Policy explains how we collect, use, disclose, and protect your personal data (“Data”) when you interact with us through our website Messika.com, mobile apps developed by MESSIKA, and other digital services such as Messika’s Serenity (collectively, “Digital Services”). It also applies when you make purchases through our Digital Services or physical MESSIKA’s stores, engage with MESSIKA’s advisors, connect with us on social media, or otherwise interact with MESSIKA across all territories where we operate.

Local laws may impose specific requirements for some regions, which will be outlined in Part 2 of this policy.

Changes to the Privacy Policy. We may update this Privacy Policy from time to time by publishing a new version on Messika.com. As these changes can affect how we process your data, we recommend checking the “Privacy” section regularly. If a significant change occurs, we will notify you in advance and offer you the option to opt out of the new data usage or disclosure.

For any questions about how your Data is processed, you can contact us via email.

PART 1 : GENERAL PROVISIONS

1.      Who is responsible for processing your Data?

Your Data is processed by or on behalf of MESSIKA GROUP, a simplified joint-stock company registered in Paris under number 301 293 999, headquartered at 44 avenue des Champs Elysées, 75008 Paris, France (“MESSIKA” or “we”). MESSIKA collects and may share your Data with other MESSIKA entities, as described in Section 4 of this Part 1.

All sales (online or offline) are conducted by the MESSIKA entity indicated in the applicable General Terms and Conditions of sale.

2.      When do we collect your Data and why?

We only keep your Data for as long as necessary for the purposes for which it was collected unless legal requirements oblige us to keep it longer. Once the retention period expires, your Data is deleted or anonymized.

3.      What Data do we collect and process?

4.      Why and How We Process Your Data

a.      Data collected online and in-store

b.      Data collected exclusively online for our Digital Services

c.       Data collected exclusively in-store

5.      With whom do we share your Data?

We may share your Data with:

• Other MESSIKA’s entities (see Part 3), when they contribute to the provision of services.

Access to Data is only granted on a “need-to-know” basis, and only authorized personnel whose activity justifies it have access to Data.

• Service providers who help us to provide the Services (e.g. delivery, online payments, IT maintenance, technical service providers for e-mail dispatch and fraud control).
• Partners, but only with your consent, for co-hosted events or personalized advertising (see our Cookie Policy for a list).
• Other companies to whom we may sell or transfer all or part of our business.
• In cases where such data sharing is required by law, administrative or legal authorities or other authorized third parties.

Some digital partners may process your Data for their own purposes. Their privacy policies apply, and we encourage you to read them.

• Meta
• X
• Pinterest
• Snapchat
• TikTok
• YouTube
• LinkedIn
• Google
• Kakaotalk (Corée)
• Line (Japon)
• Weibo (Chine)
• TMall (Chine)
• Naver (Corée)
• WeChat (Chine)
• Red (Chine)

6.      International Data Transfers

Given MESSIKA’s global presence, your Data may be processed, accessed or stored outside your country of residence. Some recipients of your Data may be located in a territory that does not provide the same level of protection as your country of residence. Applicable legal and regulatory requirements are taken into consideration before any cross-border transfer of your Data. We will only transfer your Data to entities and partners :

• which are established in a country offering an adequate level of protection according to the competent supervisory and regulatory authorities, or
• with whom we have signed the standard contractual clauses provided for by the supervisory and regulatory authorities, or
• who undertake to apply a code of conduct or a certification mechanism validated by the competent supervisory and regulatory authorities.

7.      How we protect your Data

MESSIKA implements the technical and organizational measures we deem necessary to ensure the confidentiality and security of your Data, including:

• State-of-the-art physical and software protection of our IT systems.
• Implementation of physical and electronic back-up procedures for data collected, in compliance with current legislation on personal data protection and market standards.
• Raising the awareness of MESSIKA employees who, by virtue of their duties, may have access to your Data. These employees are bound by a strict obligation of confidentiality.
• Data is accessible only in a secure manner and to authorized persons. Access is limited and controlled (logical management of IP access, VPN).
• Internal audits and audits of IT service providers.
• Security of your payment information. All the financial information you provide on the Site is stored in the secure Site of the financial institution chosen by MESSIKA. All transactions on the Site are protected by SSL encryption.

Please note that despite our efforts, no internet transmission is completely secure. Data shared online could potentially be intercepted.

8.      Your Rights and How to Exercise Them

In accordance with current regulations, you may have the following rights, depending on the provisions of the law applicable to you:

• Right of access and information: you have the right to be informed, in a concise, transparent, intelligible and easily accessible format, of the Data we hold and how we process your Data. You may also obtain confirmation as to whether or not your Data is being processed, and if so, you may access it and request a copy. If you have an account on messika.com, you can directly access the Data contained in your account. This access also allows you to correct, modify or delete certain identification data and your contact details.
• Right of rectification: you have the right to obtain rectification of your Data and to have Data that you consider incomplete completed.
• Right to erasure: in certain cases, you have the right to obtain the erasure of your Data. However, there are cases where, for legal or legitimate reasons, MESSIKA must retain this Data.

In addition, in accordance with the RGPD, as well as in other jurisdictions (Part 2), you have the following rights:

• Right to object to processing: you have the right to object to the processing of your Data where the processing is based on MESSIKA's legitimate interest. However, MESSIKA may invoke compelling legitimate reasons for continuing to process your Data. In addition, you may at any time ask to be removed from our mailing lists for offers, news and events by using the hypertext link provided for this purpose in each e-mail we send you.
• Right to limitation: in certain cases it is possible to request the limitation of the processing of your Data.
• Right to data portability: you have the right to request that MESSIKA provide you with your data in a structured, common, machine-readable format for the purpose of transferring it to another data controller. This right applies only to processing based on your consent and carried out by automated means. You may also object to your Personal Data being used to draw up your customer profile; in this case you will no longer be able to benefit from personalized offers or services. You may also withdraw consent at any time for future processing. Prior use remains lawful.

These rights may be exercised directly with MESSIKA by email in accordance with Section 9 below.

If you have consented to the processing of your Data, you may withdraw this consent at any time for future processing. Such withdrawal does not affect the lawfulness of processing prior to the withdrawal.

Once we have received your request, we may ask you for an official document if it is necessary to confirm your identity. If you feel your rights are not respected, you can lodge a complaint with your local data protection authority (in France: CNIL).

MESSIKA does not intentionally target or collect data from minors (i.e. persons under the age of 18). Nevertheless, should we inadvertently collect Data from a minor inadvertently, their legal guardian may exercise their rights on their behalf.

9.      How to Contact Us

For questions about this Privacy Policy or your Data, you can contact us by email.

To exercise your rights, please provide the necessary identification details (name, registered email, etc.) in your email request.

PART 2 : LOCAL PROVISIONS

1.      Kingdom of Saudi Arabia (KSA)

In the event that you visit a MESSIKA store in the KSA or use the MESSIKA Digital Services from the KSA, each processing of your data is based on your consent in compliance with applicable laws and regulations, and not on the basis of the need to perform a contract with you, a legal obligation and/or our overriding legitimate interest.

2.      Australia

In the event that you visit a MESSIKA store in Australia or use the MESSIKA Digital Services from Australia, each processing of your data is based on your consent in compliance with applicable laws and regulations, and not on the basis of the need to perform a contract with you, a legal obligation and/or our overriding legitimate interest.

3.      China

a.      General information

If you visit messika.cn operated by Messika (Shanghai) Commercial Co. Ltd, the following provisions apply:

By using our Digital Services, you consent to the processing activities described in this Privacy Policy. In addition to the Data previously mentioned in Part 1 Section 3 of the global data protection policy, we also process the following Data for the aforementioned purposes: information about your gender.

b.      Information security

MESSIKA takes all necessary measures to ensure the confidentiality of your Data. MESSIKA has implemented a robust data protection compliance program, which includes adopting data protection principles at least equivalent to the GDPR globally, including:

• Establishing a data protection office and a network of local data protection contacts;
• Adopting internal policies and procedures to ensure compliance with applicable data protection laws and regulations;
• Implementing appropriate legal, technical, and organizational measures to enforce data protection principles.

However, there is no guarantee of:

• Absolute security or error-free transmission of information over the Internet;
• Absence of vulnerabilities in stored information or data.

c.       Protection of minors' rights

MESSIKA’s Digital Services are primarily intended for adults. Minors may not create their own account without parental or guardian's consent.

If we collect Data from minors with parental consent, we will only use or publicly disclose such information in circumstances permitted by law and with the explicit consent of the parents or guardians.

Although local laws and customs may define minors differently, we consider anyone under the age of 18 to be a minor.

If we discover that we have collected Data from minors without prior verifiable parental consent, the Data will be deleted as soon as possible.

4.      South Korea

MESSIKA implements reasonable security policies and measures to protect your Data. This “South Korea” section applies, in addition to the general privacy policy described in Part 1, to the processing of Data collected, stored and processed by MESSIKA when you access and use the www.messika.com/kr website or visit MESSIKA sales outlets in Korea.

a.      Data Collection and Use

MESSIKA collects the minimum necessary Data as described in Part 1 Section 3, for the purposes outlined in Part 1 Section 4, and does not use it beyond this scope. You may voluntarily provide additional Data if you wish.

b.      Data Retention Period

MESSIKA destroys Data once the retention and usage period mentioned in Part 1 Section 4 has expired. However, if retention is required under applicable laws (e.g., commerce, consumer protection in e-commerce), your Data will be stored separately for the period specified by the relevant laws and used only for the purposes provided by those laws.

c.       Subcontractors & Partners outside of South Korea

MESSIKA may entrust the processing of your Data to partners in Korea and abroad. A detailed list of partners, purposes, and categories of Data is provided in the document.

MESSIKA does not provide your Data to third parties. If MESSIKA needs to provide Data to third parties, it will obtain customer consent in accordance with the Korean Personal Data Protection Act and will inform customers accordingly.

d.      Rights and Exercise of Rights

You may exercise the rights listed in Part 1 Section 8 regarding your Data or that of a minor under 14 for whom you are the legal representative. MESSIKA may refuse requests in certain cases, such as legal obligations or risks to safety or contract execution.

e.      Data Destruction

Data is stored for a defined period (see Part 1 Section 4) and then destroyed or anonymized irreversibly. Printed documents are shredded or incinerated.

f.       Data Security

MESSIKA implements the measures described in Part 1 Section 7 to ensure Data security.

g.      Cookies

Your browser may allow you to control cookies and tracking technologies. Please refer to our Cookie Policy for more information.

5.      United Arabic Emirates (UAE)

In the event that you visit a MESSIKA store in the UAE or use the MESSIKA Digital Services from the UAE, each processing of your data is based on your consent in compliance with applicable laws and regulations, and not on the basis of the need to perform a contract with you, a legal obligation and/or our overriding legitimate interest.

You have the right to object to processing where it is carried out for statistical survey purposes (unless necessary for reasons of public interest), and/or where the processing violates any of the data protection principles set out in Article 5 of the UAE Personal Data Protection Law.

In certain circumstances, you have the right to object to decisions made on the basis of automated processing that have legal consequences or seriously affect you, including profiling. You also have the right to a human review of decisions made by automated processing.

6.      France

You have the right to set up instructions concerning the storage, deletion and communication of your personal data after your death.

You also have the right to register on the Bloctel lists, the French “do not call” lists for marketing purposes.

7.      Hong Kong SAR

In the event that you visit a MESSIKA store in Hong Kong or use the MESSIKA Digital Services from Hong Kong, each processing of your data is based on your consent in compliance with applicable laws and regulations, and not on the basis of the need to perform a contract with you, a legal obligation and/or our overriding legitimate interest.

8.      Japan

a.      Provision to third-parties

MESSIKA may provide your Data to third parties, such as data analytics and advertising companies, including social media providers, for research, analysis, and targeted advertising.

b.      Joint use

Joint users

Your Data may be jointly used with other MESSIKA entities (listed in Part 3), authorized department stores, and other authorized distributors in Japan.

Categories of Data used

Name, address, phone number, gender, age, date of birth, email address, and any other information you provide.

Purpose of Use

• MESSIKA Group entities: for purposes outlined in Part I Section 3, Part II Section 1 and 2(b), and Part III Section 1(b).
• Department stores: for purchase, service, marketing, and preference-related purposes.

Managing Entity

Address: Messika Japan K.K., 1-3-2 Kitaaoyama, Minato-ku, Tokyo

Representative: Anne Roumane

c.       Overseas Transfers

MESSIKA may transfer, as outlined in Part 1, Section 5, your Data to countries with different data protection laws. Contact us for details on safeguards under Japanese law.

d.      Security

MESSIKA takes necessary and appropriate measures to prevent leaks, loss, or damage and to manage Data security. Read Part 1, Section 7 and/or contact us for more details.

e.      Your rights

You may request disclosure, correction, deletion, suspension of use, or suspension of third-party provision of your Data under Japanese law. Depending on your registration location, you may be asked to contact the relevant department store.

f.       Contact

For questions about this Privacy Policy or your Data, you can contact us by email.

9.      Macao SAR

In the event that you visit a MESSIKA store in Macao or use the MESSIKA Digital Services from Macao, each processing of your data is based on your consent in compliance with applicable laws and regulations, and not on the basis of the need to perform a contract with you, a legal obligation and/or our overriding legitimate interest.

10.   Singapour

In the event that you visit a MESSIKA store in Singapour or use the MESSIKA Digital Services from Singapour, each processing of your data is based on your consent in compliance with applicable laws and regulations, and not on the basis of the need to perform a contract with you, a legal obligation and/or our overriding legitimate interest.

11.   Taiwan (region)

In the event that you visit a MESSIKA store in Taiwan or use the MESSIKA Digital Services from Taiwan, each processing of your data is based on your consent in compliance with applicable laws and regulations, and not on the basis of the need to perform a contract with you, a legal obligation and/or our overriding legitimate interest.

In the event that you assert your rights in accordance with Section 7 of Part 1 of this Privacy Policy, MESSIKA will only provide you with information on how your data has been or may have been used or disclosed by MESSIKA in the year preceding the date of your request for information.

12.   Turkey

If you access our Digital Services while in Turkey, or if you are a resident of Turkey and purchase MESSIKA products or services via our Digital Services for shipment to Turkey, the following provisions apply:

a.      Legal basis for processing

In accordance with Article 5 of Law No. 6698 on the Protection of Personal Data, MESSIKA processes your Data based on:

• The processing is explicitly provided for or dictated by laws,
• The processing of your personal data is necessary provided that it is directly related to the conclusion or performance of the contract between us,
• The processing is compulsory in order for us to comply with our legal obligations,
• The relevant data is made available to the public by you,
• The processing is compulsory for our legitimate interests, provided that it does not violate your fundamental rights and freedoms,
• Your explicit consent (please note that we rely on this legal basis only when we need your consent for processing, and that we rely on this legal basis unless we rely on one of the other legal bases above).

b.      Your rights

In accordance with Article 11 of Law No. 6698 on the Protection of Personal Data, you have the right to:

• The right to know whether your Data is processed;
• If we do process your data, the right to request information about such processing and the right to know the purposes of such processing;
• The right to know to which third parties MESSIKA transfers your Data;
• The right to request the correction or deletion or destruction of your Data as well as the right to request from MESSIKA to inform third parties we transferred your Data to of this right;
• The right to object to automated processing outcomes;
• The right to claim compensation for unlawful processing.

c.       Exercising your rights

You can exercise your rights by sending us an email.

We will process your request as quickly as possible, and at the latest within 30 days of receipt. If your request involves additional costs for our company, you may be charged in excess of the rate determined by the Turkish Personal Data Protection Board.

d.      International transfers

Any transfer of your personal data to third parties outside Turkey will be based on your explicit consent.

13.   USA (including Notice at collection for California residents)

This article supplements the MESSIKA Privacy Policy, “Data” shall be interpreted as “information” in the sense of the CPRA. If you access our Digital Services while in the USA, or if you are a resident of the USA and purchase MESSIKA products or services via our Digital Services for shipment to the USA, the following provisions apply:

a.      Notice at collection

The type of personal information we collect depends on your relationship with us. It also depends on how you interact with us. California law requires us to tell you if we share information for cross-contextual behavioral advertising. Described below by category is the information we may collect and if we share it for cross-contextual behavioral advertising. To learn how to modify your cross-contextual advertising preferences view our Notice of Right to Opt-out of Sale/Sharing for Cross-Contextual Behavioral Advertising in the “Your rights” section below.

b.      Types of Data collected

Contact Data. We collect information such as your name and address. This may also include your phone number and email address.

Payment Data. We collect your billing address and payment method information.

Feedback Data. This includes any Data you voluntarily share with us about your experience with our products or services.

Demographic information. We may collect information like your gender, age, or birth date. We may also collect your zip code and location. In some cases, we may share this information for the purposes noted above.

Site Usage Data. If you use our Digital Services, we may collect information about the browser you are using, what site you came from, or what site you visit when you leave us, how long you stay on messika.com and the content you view, IP addresses, device identifiers, your operating system.

We keep personal information as long as it is necessary or relevant for the purposes for which it was collected. We also keep information as required by law.

c.       Purposes of collection

To communicate with you. We use Data to contact you about this Policy or our Terms. We also use information to respond to your questions or comments.

So you can purchase our products and use our services. We use Data to process orders, process your registration with our site and to let you participate in site features.

To improve our products and website. We use Data to make our website and products better. We may also use Data to customize your experience with us. For example, this may include saving your preferences or settings.

For marketing purposes. We use Data to send information about new products and special offers or promotions. We may deliver this information to you through various channels, such as email or on social media platforms.

To protect our company and constituents. We use Data to protect our company and customers. We use this same Data to identify fraud and secure our websites and systems.

d.      Data Collection Methods

Directly from you. We collect Data when you place an order or register with us. We collect information if you become a member of a club or enter a promotion or contest. We also collect information if you reach out to us through our sites or sign up for our emails. Information may be collected from you through a questionnaire or survey. We may collect information online, in-person, or at an event.

Passively. We collect Data about users over time and across different websites. We also work with third parties that collect Data this way. We use several common tracking tools such as cookies and web beacons to collect Data. To learn more about cookies visit the FTC’s Online Tracking page. Data may be collected across our Digital Services.

From third parties. Our business partners or vendors may give us information about you. Social media platforms may also give us this information.

e.      Do we combine your Data?

MESSIKA may combine Data that we have collected offline in-store or during events with Data we collect online. We may also combine Data we get from a third party with Data we already have.

f.       Who do we share your Data with?

Within the MESSIKA Group. We share all categories of Data with our parents, affiliates and subsidiaries (as listed in Part 3).

With vendors and services providers. We may Data with vendors who perform services on our behalf such as payment providers, vendors who help us develop our website or deliver products and services to you.

For cross-contextual behavioral advertising. We may share Data with third parties in order to provide cross-contextual behavioral advertising.

To comply with the law or to protect ourselves. We share all categories of Data we collect about you to respond to a court order or subpoena. We also share information in response to a government agency or investigatory body request. We share Data we collect when we investigate potential fraud.

With any successor to all or part of our business (if all or part of our business was sold, if there is a merger or acquisition, if there is financing or bankruptcy).

Additional Information for California, Nevada & Virginia

We do not sell Data for monetary or other valuable consideration We also do not sell Data of minors under the age of 16 for monetary or other valuable consideration. We do not use or disclose sensitive personal information, as defined by California law, for inferring characteristics or for purposes other than those permitted by law.

g.      Third-parties links

When using the Digital Services, you may come across links to third-party sites and/or applications. Our Privacy Policy does not apply to these third parties, and we invite you to read their privacy policies. MESSIKA is in no way responsible for the actions and practices of these third parties.

h.      Your Choices and Rights

You may choose not to receive marketing communications from us. You can unsubscribe from our marketing communications at any time by following the instructions included in promotional emails sent by MESSIKA or directly on this page in the “Unsubscribe from our newsletter” section. You will continue to receive transactional communications where required or permitted by law.

You can control cookies and other tracers. Your browser may give you the opportunity to control cookies and other tracking technologies. We invite you to consult our Cookie Policy for more information.

You can “opt-out” of contextual behavioral advertising directly via OneTrust. You can also control certain features directly via YourAdChoices, a tool from the Digital Advertising Alliance, here and here. Some browsers allow you to tell sites that you do not want your data to be processed for contextual behavioral advertising. If you set your browsers to “opt-out” certain features of our Digital Services may not work. You can learn how to configure your browsers by following the Global Privacy Control instructions.

Some browsers also offer the possibility of using a “do not track” function which informs the sites you visit not to track your activity.

Depending on where you live, you may have additional rights which you can exercise by contacting us directly by e-mail or by calling the Conciergerie:

• Access: to be informed of the categories of Data we collect and process, their sources and the purpose of collection.
• Portability: to request a copy of the Data specifically collected from you.
• Deletion: to request that we delete the Data we have collected about you.
• Correction: to request that we correct Data concerning you.
• Non-retaliation: so that you are not discriminated against in exercising your rights.

How it works. When you submit your request, we will use the information you provide to verify your request. We do this by matching the information you provide with information we already have about you. In some situations, we may not be able to process your request. This may include if a legal exception applies. If you disagree with our decision, you can contact us.

Third party agents: If you are submitting a request on behalf of someone, we may ask for additional information to verify your identity. This may include providing proof that you are registered with the Secretary of State to act on someone’s behalf or proof of a power of attorney.

To the attention of residents of the State of Nevada: you may contact us by email to “opt-out” of the future marketing of your Data to a third party.

i.        Minors

Our Digital Services are not intended for children, and we do not intentionally collect or maintain any Data from children under the age of 18. If you believe that we may have any Data from or about a person under the age of 18, please contact us by email or call Concierge. As a parent, you can learn more about protecting your children's Data on the FTC website.

j.        Data transfers

Data we collect on the US version of messika.com may be stored both inside and outside the USA. If you live outside of the USA and choose to use this site, you understand that it is at your own risk. You also understand that your information will be sent to the USA. The USA may not afford the same level of protection as laws in your own country.

a.      How to contact us?

You can email us or you can refer to Part 1, Section 9.

PART 3: MESSIKA ENTITIES