Privacy policy

Data controller Personal data collected on the Ma Bulle website is processed by Octavie d'Hauthuille, 5 rue Jaubert, 13100 Aix-en-Provence, who can be contacted at octavieh@hotmail.com. Data collected Depending on how you use the website, the following data may be collected: - through the contact form: name, email address, phone number and message content; - when purchasing a gift voucher: purchaser email address, beneficiary name, beneficiary email address if provided, postal address if provided, personal message, selected service, amount, language, technical payment identifiers and gift voucher code; - for website administration: administrator session cookie and technical security logs. Purposes This data is used to: - respond to contact requests; - manage the purchase, payment and delivery of gift vouchers; - provide customer follow-up and after-sales service; - secure access to the website administration area; - comply with legal, accounting and tax obligations. Legal bases Processing is based, depending on the case, on your pre-contractual request or consent, on the performance of the contract when you purchase a gift voucher, on compliance with applicable legal obligations and on the legitimate interest in securing and administering the website. Recipients Data is only accessible to Ma Bulle and, where necessary, to its technical processors: hosting and infrastructure providers, database provider, Resend for email delivery, Stripe for payment processing and Google services used for review display or map links. Payment Payments are processed by Stripe. Card payment details are not collected or stored by Ma Bulle on this website. Retention period Data is kept only for as long as necessary for the purposes described above and may then be archived where required to comply with legal obligations. As an indication: - contact requests may be kept for up to 12 months after the last exchange; - gift voucher and transaction data may be kept for the time needed to manage the order and then archived for the legal retention periods that apply, especially for accounting and tax purposes; - the administrator session cookie lasts for a maximum of 7 days. Transfers outside the European Union Some technical providers may be located outside the European Union. In such cases, any transfer of personal data is governed by the appropriate legal safeguards required by applicable regulations. Your rights Under the applicable regulations, you have the right to access, rectify, erase, restrict or object to the processing of your data and, where applicable, the right to data portability. You may also withdraw your consent at any time when processing is based on consent. To exercise your rights, please write to octavieh@hotmail.com. You also have the right to lodge a complaint with the competent supervisory authority, including the CNIL in France. Cookies In this version, the website does not use advertising cookies or any declared audience measurement tool. A strictly necessary cookie may be set for access to the administration area.