Privacy Policy
This policy describes how LISSEA collects, uses, and protects your personal data, in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller
The data controller is LISSEA. Contact: support@mylissea.fr
2. Data Collected
Data you provide to us: first name, last name, email address, delivery and billing postal address, phone number, order data, content of your messages, customer reviews.
Automatically collected data: IP address, browser type, pages viewed, visit duration, origin, cookies and trackers.
Payment data: your bank details are collected and processed directly by our secure payment provider. We never have access to your full credit card number and do not store it.
3. Purposes and Legal Bases
- Processing and shipping your order — contract performance
- Customer service and complaint management — contract performance
- Returns and refunds management — contract performance / legal obligation
- Invoicing and accounting — legal obligation
- Sending newsletters and commercial offers — consent
- Audience measurement and statistics — consent
- Targeted advertising and remarketing — consent
- Fraud prevention — legitimate interest
4. Data Recipients
Your data is transmitted to our subcontractors only to the extent necessary for their mission: Shopify International Ltd (hosting and order processing), our payment provider, our partner suppliers and carriers (name, address, and phone number, strictly necessary for delivery), our customer review solution, and our audience measurement tools subject to your consent.
Your data is never sold to third parties.
5. Transfers Outside the European Union
Some of our logistics partners and technical service providers are located outside the European Union. These transfers are governed by appropriate safeguards within the meaning of Articles 44 et seq. of the GDPR: standard contractual clauses of the European Commission, or an adequacy decision where one exists.
By placing an order, you are informed that your delivery data is transmitted to a supplier located outside the EU for the sole purpose of shipping your order.
6. Data Retention Periods
- Order and billing data: 10 years (legal accounting obligation)
- Customer account data: duration of the commercial relationship, then 3 years after the last contact
- Prospecting data: 3 years after the last contact or until consent withdrawal
- Cookies and trackers: maximum 13 months
- Customer service data: 3 years after closing the request
7. Your Rights
You have the rights of access, rectification, erasure, restriction, opposition, data portability, withdrawal of consent at any time, and to define directives concerning the fate of your data after your death.
To exercise these rights, please write to us at support@mylissea.fr. We will respond within one month, which may be extended by two months in the case of a complex request.
Complaint: if you believe that your rights are not respected, you can lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr
8. Cookies and Trackers
Our site uses strictly necessary cookies (site functionality, cart, session — no consent required), audience measurement cookies, and advertising cookies (subject to consent).
During your first visit, a banner allows you to accept, refuse, or customize your preferences. Refusing non-essential cookies does not prevent browsing or ordering on the site.
9. Security
We implement appropriate technical and organizational measures to protect your data: encrypted connection (HTTPS/SSL), secure hosting, restricted data access, PCI-DSS certified payment providers.
10. Minors
Our site is not intended for persons under 15 years of age. We do not knowingly collect data concerning minors without the consent of the parental authority holder.
11. Modifications
We may modify this policy to reflect legal changes or changes to our services. Any substantial modification will be indicated on the site.
12. Contact
For any questions regarding your personal data: support@mylissea.fr — response within 24 to 48 business hours.