Privacy policy

01

Data controller

02

Data collected

03

Purposes of processing

Your data is used for:

• Processing orders
• Delivery via Mondial Relay and Colissimo
• Invoicing
• Customer service
• Handling returns
• Meeting accounting obligations
• Sending the newsletter, if you subscribed
• Statistics and site improvement

04

Legal basis

• Performance of the contract for orders.
• Legal obligation for keeping invoices.
• Consent for the newsletter (signup confirmed by e-mail, unsubscribe at any time), non-essential cookies and audience measurement.

05

Recipients

Your data may be shared with:

• Stripe — card payments
• PayPal — PayPal payments
• Boxtal — shipping labels and pickup-point search
• Mondial Relay and Colissimo — delivery
• Netlify — site hosting
• Supabase — database
• Brevo — e-mails
• Technical providers working on the site

Your data is never sold.

06

Retention periods

Order data

3 years after last activity

Invoices

10 years

Cookies

13 months maximum

Customer account

Until the account is deleted

07

Cookies

The site uses cookies needed for it to work and, where enabled, audience-measurement cookies.

A consent banner lets you accept or refuse non-essential cookies. You can change your choice at any time via the “Manage cookies” link at the bottom of the page.

08

Data security

• Secure HTTPS connection
• Active SSL certificate
• Restricted access to data
• Providers meeting applicable security standards

09

Your rights

Under the GDPR, you have:

• A right of access
• A right to rectification
• A right to erasure
• A right to object
• A right to restriction
• A right to portability

To exercise your rights, write to us at mdf783@gmail.com.

You may also lodge a complaint with the CNIL.

10

Transfers outside the European Union

Some providers, such as Stripe, PayPal or Netlify, may process data outside the European Union.

These transfers are covered by GDPR-compliant safeguards.

11

No profiling

No automated decision producing significant legal effects is made.