Privacy Policy

Our Privacy Policy
I, Sue Williams, am the data controller of your personal information for my business Magikalmoon, based in Brux, Nouvelle‑Aquitaine, France. This Privacy Policy explains what information I collect, how I use it, and your rights under the GDPR (EU Regulation 2016/679) and French data protection law.

I collect and process the following information when you place an order or contact me:

• Name

• Postal address

• Email address

• Order details (items purchased, custom requests)

• Payment information (processed securely by third‑party platforms)

• Any additional information you choose to provide for custom embroidery

If you order through a marketplace (e.g., Etsy), that platform shares your information with me as authorised by you.

I rely on the following legal bases under GDPR:

• Contractual necessity — to create, prepare, and deliver your order

• Legal obligation — to comply with French tax and accounting laws

• Legitimate interest — to provide customer service and protect my business

• Consent — for optional communication such as newsletters (if applicable)

• ✨ 3. How Your Information Is Used

  I use your information to:

  • Process and fulfil your order

  • Communicate with you about your purchase or custom request

  • Provide customer support

  • Keep legally required business records

  • Improve my services and product offerings

  I do not sell or rent your data.

• ✨ 4. Information Sharing & Disclosure

  I share your information only when necessary:

  Service Providers

  • Etsy (if you order through Etsy)

  • Payment processors (they handle your payment securely; I never see full card details)

  • Delivery services such as La Poste, Colissimo, Mondial Relay

  Legal & Administrative Obligations

  As a French micro‑entreprise, I may share information with:

  • French tax authorities

  • Accounting or administrative tools used for legally required record‑keeping

  Legal Compliance

  I may disclose information if required by law, such as responding to a legal request or audit.

  ✨ 5. Data Retention

  I keep your personal information only as long as necessary:

  • Order and invoice records: kept for 6 years (French tax law)

  • Messages and custom order details: kept only as long as needed to complete your order

  • Email correspondence: kept for customer service purposes

  After these periods, your data is securely deleted or anonymised.

  ✨ 6. Transfers of Personal Data Outside the EU

  Some service providers (e.g., Etsy, email providers, cloud storage) may store or process data outside the EU. When this happens, they rely on GDPR‑approved safeguards, such as Standard Contractual Clauses.

  ✨ 7. Your Rights Under GDPR

  You have the right to:

  • Access the personal data I hold about you

  • Request corrections

  • Request deletion (in certain cases)

  • Restrict or object to processing

  • Request a copy of your data (data portability)

  • Withdraw consent (for optional communications)

  To exercise these rights, contact me at the email below. I will respond within 30 days, as required by GDPR.

  ✨ 8. How to Contact Me

  For GDPR purposes, I, Sue [Surname], am the data controller of your personal information.

  Email: [email protected] Postal Address: 12 Memageon, Brux,86510 ,France Business Structure: Micro‑entreprise (France) SIRET:10035023000015

  If you have concerns about how your data is handled, you may also contact the CNIL (Commission Nationale de l’Informatique et des Libertés), the French data protection authority.