Privacy Policy
1. Data Controller
Melissa Carron
Self-employed artist
133 Chemin des Abeilles Le Château 38380 Saint Pierre d'Entremont
art@melissecarron.com
SIRET 831 813 159 00025
2. Personal data collected
a) Data provided during an order:
First and last name
Billing address
Delivery address
E-mail address
Telephone number (if required by the carrier)
Information needed for the possible personalization of a work
b) Payment details
Payments are processed securely through our payment providers (e.g., Stripe, PayPal). We never have access to your full credit card numbers. Data collected automatically during browsing:
IP address
Device type and browser
Pages viewed
Connection country
Data via cookies
3. Purposes of the processing
Your data is used for:
Processing and shipping your art print orders
Managing customer relationships (after-sales service, delivery tracking)
Send transactional emails (order confirmation, invoice)
Send a newsletter (if you consent)
Improve the user experience
Prevent fraud and secure payments
Comply with our accounting and tax obligations
4. Legal basis
The treatment is based on:
The execution of the contract (ordering an art print)
Your consent (newsletter, marketing cookies)
Our legal obligations (invoicing, tax obligations)
Our legitimate interest (site security, fraud prevention)
5. International Sales and Data Transfers
In the context of international sales:
Your data may be transmitted to international carriers
Some technical service providers may be located outside the European Union
When transfers outside the EU take place, we ensure that appropriate safeguards are in place (standard contractual clauses or countries recognised as adequate).
6. Shelf life
Customer data: duration of the business relationship + legal obligations
Billing data: 10 years (accounting obligation)
Marketing data: 3 years after last contact
Cookies: maximum 13 months
7. Data Recipients
The data can be shared with:
Payment providers
Website hosting services
Professional printers (only for order fulfillment)
Carriers and logistics services
Email marketing providers
Administrative authorities if required by law
We do not sell or rent your personal data.
8. Security
We are implementing appropriate technical and organizational measures:
Secure connection (HTTPS) Restricted data access
Secure payment solutions
Regular backups
9. Your rights
In accordance with the GDPR, you have the following rights:
A right of access
A right of rectification
A right to erasure
From a right to limitation
A right to object
From a right to portability