Privacy policy
Last updated: 17 September 2026. English translation provided for information purposes. In case of discrepancy, the French version prevails.
Data controller
Aboubakar Haidara, sole trader (EI), trading as MeltaMug, 8 rue Gandon, 75013 Paris, France. Email: m.haidara75@laposte.net.
Data we collect
- Identity and contact details: last name, first name, email address, delivery and billing address, phone number if provided.
- Order data: products purchased, amounts, history, exchanges with customer service.
- Payment data: processed by Shopify’s payment solution. MeltaMug does not have access to full card numbers.
- Browsing data: IP address, device, pages viewed, cookies according to your choices.
Purposes and legal bases
- Processing and delivering your order, handling customer service, returns and refunds. Legal basis: performance of the contract.
- Complying with our legal obligations, in particular accounting and tax obligations. Legal basis: legal obligation.
- Securing the website and preventing fraud. Legal basis: legitimate interest.
- Sending offers by email if you have agreed. Legal basis: consent, which you can withdraw at any time via the unsubscribe link.
- Audience measurement and advertising using non-essential cookies. Legal basis: consent given via the cookie banner.
Recipients
- Shopify, which hosts the store and provides the payment solution.
- Our partner supplier and carriers, only to prepare and deliver your order (name, delivery address, phone number if provided).
- Authorities, where required by law.
Shopify may also use information from your interactions with our store, with other merchants and with Shopify to provide enhanced features. Shopify is then the controller of that processing. See Shopify’s privacy policy.
Transfers outside the European Union
Some recipients may be located outside the European Union, including our partner supplier. These transfers are covered by the safeguards provided for by the GDPR, such as standard contractual clauses, or are necessary for the performance of the contract concluded at your request, such as sending your address for delivery.
Retention period
Order data is kept for as long as necessary to manage the order and the customer relationship, then archived for the periods required by law, in particular for accounting and tax purposes. Data used for email offers is kept until you unsubscribe or for 3 years after our last contact.
Cookies
Cookies strictly necessary for the website to work (cart, security, payment) are set without consent. Other cookies are only set with your agreement. On your first visit from the European Union, a banner lets you accept or refuse them. You can also delete cookies in your browser settings. Depending on where you live, you can object to your data being shared for targeted advertising on the Your privacy choices page.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time. To exercise these rights, write to m.haidara75@laposte.net. We reply within one month.
If you believe your rights have not been respected, you can lodge a complaint with the French data protection authority (CNIL): www.cnil.fr/fr/plaintes, or with the supervisory authority of your country of residence.
Mandatory data
The information needed to place an order (name, email, delivery address) is mandatory. Without it, we cannot process your order.
