Privacy policy

What this site collects, why, for how long, and how to exercise your rights.

Data controller

Julie Maisonnier, Chemin des Écoles, 74540 Viuz-la-Chiésaz, France — hello@defilenmyrtille.com.

Data collected

  • Identity and contact details: first and last name, shipping and billing address, email address, and phone number if you choose to provide one — that field is optional.
  • Order data: items, amounts, shipping status.
  • Account data, if you create one: email and hashed password.
  • Technical data: IP address and server logs, kept for security.

Purposes and legal bases

  • Processing and delivering your orders: performance of the contract.
  • Keeping accounting records: legal obligation.
  • Site security and payment fraud prevention: legitimate interest.

Recipients

Your data is never sold or rented. It is shared only with the providers needed to fulfil your order:

  • Our production and shipping partner, to make and send your order: name, shipping address, email and phone where provided.
  • Stripe, for payment: card details are entered directly with Stripe and never reach our servers.
  • OVH, which hosts the site and database in France.

Transfers outside the European Union

Our production partner and Stripe may process some data outside the European Union, under the European Commission's standard contractual clauses.

Retention

  • Invoices and order data: ten years, as required by accounting rules.
  • Customer account: until you delete it.
  • Abandoned carts: twelve months.
  • Technical logs: twelve months.

Cookies

This site uses no advertising cookies and no analytics. No consent banner is required: the cookies below are strictly necessary for the site to work.

  • _medusa_cart_id: keeps your cart between pages.
  • _medusa_jwt: keeps you signed in.
  • _medusa_cache_id: a random identifier that separates cached pages; it is not used for tracking.
  • _medusa_pending_customer and _medusa_onboarding: account creation steps.
  • Language cookie: remembers your choice of French or English.
  • Stripe cookies on the payment page, for fraud prevention.

Your rights

You may access, correct, erase, restrict, object to or port your data by writing to hello@defilenmyrtille.com.

You may also lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris — cnil.fr.