1. Controller and scope
Maryse Froment, 14 Bis avenue de la Poste, 30129 Redessan, France, is the controller. Contact: lepagemaryse@hotmail.com. This policy explains the processing carried out through the website, user accounts, contact forms, baskets and orders.
2. Data collected
Depending on your use, we process identity and contact details; messages; account identifiers and encrypted passwords; basket, order, delivery and payment-status information; correspondence; consent choices; and security logs such as IP address, browser, operating system, pages and timestamps. The payment provider handles full card details; Maryse Froment does not receive them.
3. Purposes and legal bases
- Answer enquiries and take requested pre-contractual steps;
- create and secure accounts and prevent fraud, based on contract performance and legitimate interests;
- process, deliver and support orders, based on contract performance;
- keep invoices and accounting records, based on legal obligations;
- send optional communications or use non-essential trackers only with consent;
- maintain and improve the website, based on legitimate interests, after balancing users’ rights.
Required fields are identified. Without them, the relevant request or order cannot be processed.
4. Recipients and international transfers
Access is limited to Maryse Froment and authorised service providers strictly needing the data: hosting, technical maintenance, email, delivery and payment providers, and public authorities where legally required. Providers act under contractual safeguards. Data is primarily hosted in the EU. If a provider transfers data outside the EEA, an adequacy decision, EU standard contractual clauses or another lawful safeguard is used; details may be requested.
5. Retention
Contact requests are normally kept for up to 3 years after the last exchange; inactive account data for 3 years, subject to earlier deletion; abandoned baskets for a short operational period; order, invoice and accounting data for the statutory period (generally 10 years); security logs for the period necessary to investigate and protect the service; consent evidence for the required limitation period. Data may be retained longer only for legal claims or obligations.
6. Security and cookies
Proportionate technical and organisational measures include HTTPS, password hashing, access restrictions, protected forms, backups, logging and updates. No system is completely risk-free. Necessary cookies maintain sessions, authentication, baskets, language/currency preferences and security. Non-essential cookies require prior consent. See the Cookie Policy.
7. Your rights
Subject to legal conditions, you may request access, rectification, erasure, restriction, portability and objection; withdraw consent at any time without affecting earlier processing; and give post-mortem instructions under French law. Send your request to lepagemaryse@hotmail.com. Proof of identity may be requested only where reasonably necessary. We normally answer within one month.
8. Complaint, minors and changes
You may complain to the CNIL, cnil.fr, or your local EEA supervisory authority. The website is not intended to knowingly collect children’s data without appropriate authorisation. This policy may change; the current dated version is published here.