Privacy Policy

Overview

This Privacy Policy explains how Machikoulidana (Thai Willy EI), the data controller, collects, uses, and protects your personal data when you visit or make a purchase on machikoulidana.com.

Data We Collect

Order details: name, email address, shipping address, phone number, and order history
Account details: name, email address, and password (stored securely in hashed form), or your Google account details if you sign in with Google
Payment: handled directly by Stripe. We never see or store your full card details
Browsing data: analytics cookies, only if you accept them

How We Use Your Data

Process, produce, and deliver your orders (performance of the contract)
Send order confirmations, invoices, and shipping updates (performance of the contract)
Manage your account and provide customer support (performance of the contract)
Send news and offers by email, only if you ticked the box to subscribe (consent)
Measure website traffic, only if you accepted cookies (consent)
Keep accounting records required by law (legal obligation)

Your phone number is only shared with the carrier to help deliver your parcel.

Service Providers

We only share the data needed with the following providers, who process it on our behalf:

Stripe: payment processing
Printful: production and shipping of your order
Brevo and Google: sending emails
Google: sign-in with Google and website analytics (Google Analytics)
Vercel: website hosting
MongoDB Atlas: database hosting

Some of these providers are located outside the European Union (mainly in the United States). These transfers are protected by appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

Cookies

Essential cookies keep your cart and your login working. They do not require your consent.

With your consent, we also use Google Analytics cookies to understand how visitors use the website. You can accept or decline them in the cookie banner, and you can delete cookies at any time in your browser settings.

Data Retention

Account data: until you ask us to delete your account
Orders and invoices: 10 years, as required by French accounting law
Email subscription: until you unsubscribe (a link is included in every email), or 3 years after our last contact with you
Analytics cookies: 13 months maximum

Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the right to:

Access your personal data
Correct or delete it
Receive it in a portable format
Object to or restrict its use
Withdraw your consent at any time (for example by unsubscribing from emails)

To exercise these rights, email us at contact@machikoulidana.com. If you think your rights are not respected, you can file a complaint with the CNIL (www.cnil.fr), the French data protection authority.

Contact

For any privacy-related request, contact us at contact@machikoulidana.com.