Privacy Policy (GDPR)
1. Data Controller
Maly’Craft – www.malycraft.fr
Contact: malycraft3d@gmail.com
Maly'Craft is responsible for processing your personal data, in the context of orders, customer management and communication.
Our store is hosted by Shopify , which also acts as a subcontractor and may collect certain information to provide its services.
2. Data collected
We can collect:
-
Contact details : name, address, email, telephone.
-
Order and payment data : billing and shipping address, payment methods (securely processed by Shopify Payments, Stripe, PayPal, etc.).
-
Browsing data : IP address, device type, cookies.
-
Communications : messages sent via the contact form, newsletter, customer service.
Shopify may also automatically collect certain information (technical information, browsing, cookies) in order to improve services.
3. Use of data
Your personal data is used for:
-
Process and ship your orders.
-
Communicating with you (confirmation, follow-up, customer service).
-
Manage your return or refund requests.
-
Sending you newsletters if you have consented to it.
-
Improve the user experience of the store.
-
To ensure the security of transactions and prevent fraud.
4. Data sharing
Your data may only be shared with:
-
Shopify (store hosting provider).
-
Our payment providers (e.g., Shopify Payments, PayPal).
-
Our carriers (e.g., La Poste, Mondial Relay) for shipping.
-
Our marketing partners (e.g., online advertising), only if you have consented.
Your data is never resold .
5. Cookies
Our site uses cookies for:
-
Shopping cart and payment functionality.
-
Traffic analysis (Google Analytics, Shopify Analytics).
-
Personalizing the shopping experience.
You can manage your cookie preferences via your browser or the banner displayed during your first visit.
6. Data retention
-
Order-related data: kept for 5 years (legal/tax obligation).
-
Billing data: kept for 10 years (accounting obligation).
-
Marketing data (newsletter): kept until unsubscription.
7. Your rights (GDPR)
In accordance with the GDPR, you have the following rights:
-
Access, rectification, deletion of your data.
-
Limitation or opposition to treatment.
-
Data portability.
-
You can withdraw your consent at any time (newsletter, cookies).
👉 To exercise your rights: contact malycraft3d@gmail.com .
You can also file a complaint with the CNIL ( www.cnil.fr) ) .
8. International Transfers
As the store is hosted by Shopify (Canada), your data may be transferred outside the EU.
Shopify applies recognized legal safeguards (European Commission Standard Contractual Clauses) to protect your data during these transfers.
9. Security
We implement technical and organizational measures to protect your data (secure payments, HTTPS, limited access).
However, no data transmission over the Internet is completely secure.
10. Modifications
This policy may be modified to reflect legal, technical, or commercial developments. The date of the update will be indicated at the top of the page.