Privacy policy

Controller and contact

MEDUZA STORE, SAS, 7 impasse de la Colombière, 82710 Bressols, France, SIRET 91959767400028, is the data controller. Contact contact@meduzastore.com or +33 9 60 14 54 27 (telephone support in French).

Orders and customer service

We process your identity, contact details, billing and delivery addresses, ordered items and payment and delivery status to perform the sales contract, deliver your order and handle questions or returns. Information required for accounting and other legal obligations is processed on that legal basis. We do not receive your full payment card number or security code.

With your consent we use your email address and, if supplied, your name and preferences for the Mautic newsletter. Subscription is not required to order or request a return. You may withdraw consent at any time using the unsubscribe link; this does not affect earlier lawful processing.

Cookies and external content

Functional cookies support your basket and session. Optional statistics and external content are activated only after the applicable consent. Use Cookies in the footer to review or change your choices. We use the language you select to display the chosen storefront version.

Service providers

Only authorised staff and providers receive the information needed for their task. The store uses WordPress and WooCommerce, Payplug for payments, Sendcloud and the selected carrier for delivery, OVHcloud for storefront hosting and backups, and o2switch for Mautic hosting. Recipients handle data according to their role and applicable privacy rules.

Retention

We keep order and account information for as long as needed to provide services, address outstanding requests and meet legal retention or evidence requirements. Accounting records are kept for ten years under French law. A declaration confirmed through our online withdrawal function and its notification dispatch receipts are retained for five years from the declaration as evidence; completed records are then automatically deleted. An undelivered notification remains pending. Newsletter information is used until you unsubscribe; a necessary suppression record prevents unwanted re-enrolment.

Security and backups

Access is limited to authorised persons. Online withdrawal declarations are stored encrypted. Protected backups allow recovery after an incident; data may remain in them until the relevant backup expires. Recovery must respect deletion and unsubscribe requests that have already been processed.

Your rights

You may request access, correction, deletion, restriction or portability, and object where applicable. Contact contact@meduzastore.com; if we reasonably doubt your identity, we may request only what is necessary to verify it. You may complain to the CNIL (cnil.fr) or your competent European supervisory authority. Legal retention requirements may limit immediate deletion.