Maison Ysance places great importance on protecting the personal data of its customers and visitors. This policy describes the types of data collected, their use, and the rights of individuals in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

1. Data Controller

The data controller for personal data is: Maison Ysance.

Address: 20, rue Francisque de Corcelle, 61500 ESSAY

Phone: 06 12 17 02 64

Email: contact@maisonysance.com

2. Data Collected

Maison Ysance may collect the following information during browsing or orders on the website:

• Identification and contact information: name, first name, postal address, email, phone number.

• Order and payment information: products ordered, order history, payment information (processed only by certified providers).

• Browsing data: IP address, pages visited, visit duration, traffic source (cookies and analytical tools).

• Preferences: newsletter subscriptions, marketing communications.

3. Purposes of Processing

The collected data is used for:

1. Order management: processing, shipping, tracking, and after-sales service.

2. Secure payment: transaction processing by certified providers, without storing banking data.

3. Customer communication: sending confirmation emails, newsletters, or promotional offers if consent is given.

4. Website improvement and analysis: browsing statistics and optimization of user experience.

5. Legal and tax obligations: retention of necessary information for invoicing and legal compliance.

4. Legal Bases for Processing

Processing is based on:

• Contract performance (order and delivery management).

• Consent for sending marketing communications.

• Legal obligation for retaining invoices and accounting documents.

• Legitimate interest for fraud prevention and website improvement.

5. Data Sharing and Transfer

Maison Ysance may share your data with:

• Logistics providers for order shipping.

• Payment providers for secure transaction processing.

• Technical and analytical providers for website hosting and optimization.

Data is never sold to third parties, and any transfer outside the European Union is strictly governed by contractual clauses compliant with the GDPR.

6. Data Retention Period

Data is retained for:

• Orders and invoices: 10 years for tax obligations.

• Customer accounts: duration of account maintenance or until a deletion request is made.

• Cookies and browsing data: maximum 13 months, unless consent is given for marketing purposes.

7. User Rights

In accordance with the GDPR, you have the following rights:

• Access and rectification of your personal data.

• Erasure ("right to be forgotten") within legal limits.

• Data portability of the provided data.

• Restriction or opposition to the processing of your data.