top of page

Privacy Policy

At NATCHA, we make the protection of our customers' and users' data a priority. It is important to us that you understand how we process your Personal Data and how we fulfill our obligations under applicable data protection laws, regulations or guidelines (“Data Protection Laws”), including the Data Protection Act of January 6, 1978 as amended and the (EU) General Data Protection Regulation of April 27, 2016 (“GDPR”). This Privacy Policy applies to the processing that we carry out on your Personal Data and describes the way in which it is collected and processed by NATCHA via its website. For more information about your rights and the regulations applicable to the processing of personal data in general, visit the CNIL website.



"Customer" means a user of the Site who has placed an order.
"Account" means the space registered on the Platform which is managed by the User using a username and password. It mainly allows the exchange of information and any interaction with NATCHA.

"Personal Data" means any information directly or indirectly identifying a natural person (eg name, registration number, telephone number, photograph, date of birth, town of residence, etc.).

"Partner" means any referenced company providing equipment or services, with which NATCHA works in the context of the provision of its Services 
“Site” means the NATCHA website available at
“User” means any natural person or entity that has an account on the site.
"Visitor" means any natural person or entity, non-User, browsing the Site for any purpose whatsoever.


This Privacy Policy describes the processing activities carried out on your Personal Data by:

Nathalie Challulau

You can also reach us at the following email address: 

Hereinafter “NATCHA”.
We act as Data Controller, which means that we have defined the uses and conditions under which your Personal Data is processed. We will only use them in a fair, legal, transparent manner and in accordance with data protection legislation.



We collect personal data via our contact form. These data are collected for making appointments with NATCHA. 

As part of your browsing on our Site and/or your use of the above services (“the Services”), we process your Personal Data, which is defined as any data allowing you to be identified directly or indirectly.

We process the following Personal Data:

    • your identity (surname, first name, title).

    • your contact details (email address, telephone number).

    • your information regarding your request for care.

    • your appointment history.

    • your data relating to your browsing on our site/platform (IP address, connection data and browsing data, order history, preferences and areas of interest, products consulted).

    • your data relating to the management of services (complaints, etc.).

The mandatory or optional nature of the Personal Data requested from you, as well as the consequences in the event of a lack of response, are specified at the time of data collection with an asterisk (*).



NATCHA processes your personal data to:

    • allow you to create a user account on the Platform.

    • allow you to make appointments for your care.

    • communicate information to Users who have subscribed to our Newsletter.

NATCHA also processes your Personal Data when you browse the site, answer questionnaires or write a comment on the Site.

The processing of your personal data is justified by different grounds (legal basis) depending on the use we make of it:


    • the processing of your personal data is based on our legitimate interest 

    • you have consented to the processing of your personal data for the purposes mentioned when obtaining your consent and which are detailed in section 3 above. You can withdraw this consent at any time.


Your personal data is kept:


    • for a period of 3 years from your last activity with NATCHA, with regard to the commercial data necessary to manage your customer relationship with NATCHA.



Your personal data may also be transmitted to third parties:

    • to our subcontractors for the performance of any contract we enter into with them or with you, for example when we use a partner to ensure the provision of services.

    • to providers of audience analysis tools and search engines and other selected third parties who help us improve and optimize our Websites.

    • to our legal advisers and others in legal proceedings to enforce or enforce our rights under any contract.

In any event, your Personal Data is not transferred outside the European Union.



Before proceeding with the processing of your personal data and at the latest when collecting your personal data, we will inform you of the purpose of the processing relating to your personal data, the recipients of this data, the retention period applied to your personal data, as well as your rights in this context.
In accordance with Data Protection Laws, you have the right to access, rectify, limit and, if necessary, delete your Personal Data.
You may also have the right, for legitimate reasons, to oppose the processing of Personal Data concerning you.

  • You have a right of access to your data:  

You have the right to request confirmation of the processing of your personal data, access to this personal data (by providing a copy) and further information on how we process your personal data.


  • You have the right to ask us to rectify your data 

You have the right to ask us to rectify your Personal Data if it is inaccurate or incomplete.


  • You have the right to ask us to erase your data 

You have the right to ask us to erase or delete your Personal Data where there is no reason for us continuing to process it.
This right would apply if we no longer need to use your Personal Data, if you withdraw your consent to the processing of particular categories of your Personal Data or if you object to the way we process your Personal Data (see section "You have the right to object to the processing of your Personal Data" below).


  • You have the right to request the limitation of the processing of your personal data 


This right may be requested provided that:

  • The data we hold about you is incorrect 

  • You believe that the processing applied to your data is unlawful 

  • We no longer need your personal data for the purposes of the aforementioned purposes, but they are still necessary for the observation, exercise, or defense of your rights in court, 

  • You want to check the legitimate reasons we invoke to justify one of our treatments. 


  • You have a right of opposition

You have the right to object to the processing of your Personal Data based on our legitimate business interests, unless we are able to demonstrate that, in the aggregate, our legitimate interests outweigh your rights or we need to continue to process your personal data for the establishment, exercise or defense in legal claims. However, you also have the right to object to the processing of your personal data for direct marketing purposes without having to justify this request.

  • You have the right to withdraw your consent 

You have the right to withdraw your consent to the processing of your personal data at any time. 

You can exercise these rights, on presentation of a copy of your identity document, by simple written request sent by e-mail to the following address:

Or by post: NATCHA, 19 chemin de la brunette, 13100 Le tholonet 


We will respond to any request received from you within one month from the date of the request. If your request is not sufficiently precise or does not include all the elements necessary to respond to your request, NATCHA may ask you to provide additional elements.

You also have the right to lodge a complaint with the national data protection authority. In France, this authority is the Commission Nationale de l'Informatique et des Libertés ( CNIL ).



We place various cookies on your terminal when you browse our Site for the analysis and improvement of our Site.
What is a cookie ?
A “cookie” is a small text file placed in your navigation software and facilitating it on our website.
We may use different types of cookies:

    • Technical cookies: these are cookies necessary for the proper functioning of the Website. You can refuse and delete these cookies through your browser settings, but your user experience will necessarily be disrupted. These technical cookies include:

      • Session cookies, which allow the ordinary browsing session and the use of the Site (for example, allowing authentication in the personal user space). Session cookies are only set temporarily: when you close the browser, the cookies will be deleted.

      • Functional cookies, which allow the user to navigate the Site according to a set of selected criteria (for example, the products selected for purchase) in order to improve the service provided.



During your first visit to the Website, a banner informs you of the use of cookies on the Websites and invites you to accept such cookies. Cookies will only be placed if you accept them.

You can configure the cookies used on the Site at any time. Your browser can also be configured to inform you of cookies placed on your browser software and ask you to accept them or not.

You can accept or refuse cookies one by one or refuse them systematically.

With the exception of cookies strictly necessary for the operation of our Site, all cookies will expire after a maximum of thirteen months.



We will take all necessary steps to notify you of any changes to this Privacy Policy. This Policy was last reviewed and updated on 04/27/2021.

Elles me font confiance​​, 
Ludivine Sagnier, Camille Cottin, Melanie Laurent, Lou de Laâge, Vahina Giocante, Marine Vigne, de nombreuses autres célébrités et le magazine ELLE.

  • natcha_facialist
bottom of page