Privacy policy

Working draft: to be reviewed by a lawyer before launch.

Data controller

[Company name], [address], [contact@yourdomain].

Data collected

Identity, contact details, delivery address, order history, login data.

Purposes and legal bases

Order, payment and delivery management (performance of the contract); security and fraud prevention (legitimate interest); newsletter (consent, withdrawable at any time).

Recipients

Mollie (payment), partner carriers (delivery), [host], [emailing tool, e.g. Brevo].

Transfers outside the EU

[To define if data is processed in Cameroon or elsewhere outside the EU, and the safeguards in place.]

Retention

[To define]

Your rights

Rights of access, rectification, erasure, restriction, objection and portability, exercisable at [contact@yourdomain]. You may also lodge a complaint with the CNIL (cnil.fr).

Security

Encrypted connection (HTTPS). Card details are entered on Mollie's payment page and are never seen or stored by Guilaa. Passwords are stored hashed.