Privacy policy

Data controller

The controller of your personal data is:

• Maxime Boulay, trading as a French sole trader under the name Ma typo
• Address: La Chapelle Anthenaise, 53950, France
• Company number (SIRET): 934 416 009 00017
• Email : matypo.fr@gmail.com

What personal data we collect

We collect certain personal information when you interact with our site, in particular when you:

• Create a customer account on the site
• Place an order
• Contact us through the contact form or by email
• Subscribe to our newsletter (where applicable)
• Browse our site (cookies)

The information collected may include:

• Identity: surname, first name
• Contact details: delivery and billing address, email, phone number
• Payment data: handled solely by our secure providers, never stored on our site
• Purchase history and exchanges with our customer service
• Browsing data: IP address, pages viewed, time spent (cookies)

Purposes and legal bases

We use your personal data for the following purposes:

• Processing and dispatching your orders (legal basis: performance of the contract)
• Keeping you informed about your order (performance of the contract)
• Answering your requests and questions (legitimate interest)
• Improving our services and your experience (legitimate interest)
• Sending you marketing information, only with your prior agreement (consent)
• Meeting our legal obligations, in particular accounting and tax ones (legal obligation)

How long we keep your data

Your data is kept only for as long as is strictly necessary for the purposes of the processing:

• Customer account data: for as long as your account is active, then 3 years after the last activity
• Order and invoicing data: 10 years (accounting and tax obligation, article L123-22 of the French Commercial Code)
• Marketing prospect data: 3 years from the last contact
• Cookies: 13 months at most
• Payment data: not kept by Ma typo (handled by our providers)

Sharing data with third parties

We never sell or rent your personal data to third parties.

However, we do share some data with service providers that are strictly necessary to fulfil your order:

• Stripe (WooPayments) — Bank card payment processing (transfers outside the EU are covered by the European Standard Contractual Clauses)
• PayPal Europe — PayPal payment processing (registered office: Luxembourg, EU)
• Carriers (La Poste / Mondial Relay / Chronopost) — To deliver your order
• Hostinger International Ltd — Website hosting (registered office: Cyprus, EU)

All our providers are contractually required to protect your data and to use it only within the strict scope of the service they provide.

Keeping your data secure

We put in place appropriate technical and organisational security measures to protect your information against unauthorised access, alteration, disclosure or destruction.

• HTTPS / SSL connection across the whole site
• Secure hosting and regular backups
• Payment data handled by PCI-DSS certified providers (the strictest banking standard)
• Access to data limited to what is strictly necessary

Cookies

Our site uses cookies to work properly and to improve your experience. Cookies are small text files stored on your device.

We use three categories of cookie:

• Essential cookies: needed for the site to work (cart, login). No consent required.
• Audience measurement cookies: they help us understand how the site is used so we can improve it.
• Marketing cookies: used only with your explicit consent.

You can set or refuse cookies at any time from your browser settings. Refusing some cookies may limit certain features of the site.

Your rights

Under the GDPR and the French Data Protection Act, you have the following rights over your personal data:

• Right of access — You can ask to see the data we hold about you
• Right to rectification — You can ask for inaccurate or incomplete data to be corrected
• Right to erasure (the “right to be forgotten”) — You can ask for your data to be deleted
• Right to object — You can object to your data being used for certain purposes, marketing in particular
• Right to restriction — You can ask us to restrict the processing of your data
• Right to portability — You can receive your data in a structured format and pass it to another controller
• Right to withdraw consent — At any time, without affecting the lawfulness of earlier processing

To exercise any of these rights, email us at matypo.fr@gmail.com setting out your request. We undertake to reply within one month at the latest.

If, after contacting us, you believe your rights are not being respected, you have the right to lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr

Changes to this policy

We reserve the right to change this privacy policy at any time, in particular to keep up with legal or technical developments.

Changes will be published on this page with an updated date. We encourage you to check this page from time to time to stay informed of our practices.

Contact us

For any question about this policy or about your personal data, you can reach us:

• By email: matypo.fr@gmail.com
• By phone: +33 7 67 79 07 82
• By post: Maxime Boulay — Ma typo, La Chapelle Anthenaise, 53950, France