Privacy policy

This privacy policy describes how Mellora Massage (https://www.melloramassage.com/) collects, uses, stores and protects your personal data, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Data controller

The data controller is Jules Vaucelle, operator of the Mellora Massage store (SIRET 103 127 023 00010), 14 Rue Desaix, 44000 Nantes, France. For any question about your data: contact@melloramassage.com.

2. Data collected

Identity and contact: first name, last name, email address, phone number.
Shipping and billing: postal address.
Orders: order history and details.
Payment data: processed directly by our payment providers; we do not store any full payment card data.
Browsing data: cookies, IP address, pages viewed.

3. Purposes and legal bases

Processing and delivering your orders (performance of the contract).
Providing customer service and follow-up (performance of the contract).
Meeting our legal and accounting obligations (legal obligation).
Sending you, with your consent, our news and offers (consent).
Improving the site and measuring traffic (legitimate interest / consent for non-essential cookies).

4. Recipients and processors

Your data is only shared with the providers that are strictly necessary:

Shopify (Shopify International Ltd., Ireland): store hosting, order management and card payments;
PayPal (PayPal Europe S.à r.l. et Cie, S.C.A., Luxembourg): PayPal payments;
ParcelPanel: order tracking page;
our suppliers and carriers: preparation and delivery of your order (shipping name, address and phone number only);
our email tool integrated into Shopify: sending order emails and, with your consent, our news.

We never sell your data to third parties.

5. Transfers outside the European Union

Some of these providers, or their own subcontractors, may process data outside the European Union (in particular in the United States or Canada for Shopify, and in our suppliers' shipping country for delivery data). These transfers are governed by the safeguards provided by the GDPR: European Commission adequacy decision or standard contractual clauses.

6. Retention period

Your data is kept for as long as necessary for the purpose pursued: the duration of the business relationship, then archived in accordance with legal time limits (in particular 10 years for accounting documents). Marketing data is kept until you withdraw your consent.

7. Your rights

In accordance with the GDPR, you have the right to access, rectify, erase, object to, restrict and port your data, as well as the right to set guidelines regarding what happens to it after your death. To exercise these rights, write to us at contact@melloramassage.com. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

8. Cookies

The site uses cookies necessary for its operation as well as analytics and personalization cookies. You can accept, refuse or configure non-essential cookies at any time through the consent banner and your browser settings.

9. Security

We implement appropriate technical and organizational measures (encrypted connection, restricted access) to protect your data against any unauthorized access, alteration or disclosure.