Privacy Policy, GDPR

Data Controller

The data controller for personal data is MAZALET, operated by Clément DEVILLIERS. Contact: contact@mazalet.com.

Data Collected

MAZALET may collect the following data: identity, first name, last name, email address, postal address, phone number, billing address, delivery address, order history, size and style preferences, exchanges with customer service, payment information processed by secure providers, browsing data, and marketing consents.

Legal Bases

Processing is based, as appropriate, on the performance of the contract, compliance with legal obligations, customer consent, MAZALET's legitimate interest in ensuring the security and improvement of the service, or customer relationship management.

Recipients and Processors

Data may be transmitted, only when necessary, to Shopify, payment providers, carriers, technical service providers, email tools, accounting or legal advisors, and competent authorities when required by law.

Transfers Outside the European Union

Certain providers, notably Shopify or technical tools, may process data outside the European Union. MAZALET ensures that it uses providers that offer appropriate safeguards in accordance with the GDPR.

Retention Periods

Order and billing data are retained for the period necessary to fulfill accounting and tax obligations. Customer account data is retained as long as the account is active or until a deletion request is made, subject to legal obligations. Marketing data is retained until consent is withdrawn or unsubscription. Cookies are retained according to the durations specified in the cookie policy or consent banner.

Data Subject Rights

In accordance with the GDPR, every individual has a right of access, rectification, erasure, objection, restriction, data portability, and withdrawal of consent. Any request can be sent to contact@mazalet.com. Proof of identity may be requested in case of reasonable doubt about the applicant's identity.

Security

MAZALET implements reasonable measures to protect personal data against unauthorized access, loss, alteration, or disclosure. Payments are processed by secure providers, and MAZALET does not retain full credit card data.

Complaint

The customer may lodge a complaint with the CNIL if they believe their rights are not being respected.