1. Data Controller

Solange PROTIN — Sole proprietorship
75 Chemin du Roule — 27700 Les Trois Lacs
SIRET: 492 366 505 00039
Contact : contact@ubedelyss.fr

2. Data collected

As part of using the site ubedelyss.fr, We are required to collect the following personal data:

When placing an order:

• Name, surname
• Delivery and billing address
• E-mail address
• Order history and purchased products
• Payment method (we do not store your bank details — they are processed directly by our secure payment provider)

When making contact (via the form):

• Name, surname
• E-mail address
• Content of your message

During navigation:

• Connection data (IP address, browser type, pages visited, visit duration)
• Cookie data (see section 7)

3. Purposes of the processing

Your data is collected for the following purposes:

Purpose	Legal basis
Order processing and tracking	Contract execution
Sending of order confirmation and delivery information	Contract execution
Handling contact requests and customer service	Legitimate interest
Sending the newsletter (if subscribed)	Consent
Website improvement and audience measurement	Legitimate interest / Consent
Compliance with legal obligations (accounting, taxation)	Legal obligation

---

4. Shelf life

Data	Shelf life
Order data	10 years (legal accounting obligation)
Contact details (form)	3 years from the date of last contact
Browsing data / cookies	13 months maximum
Newsletter data	Until you unsubscribe
Customer account data	3 years after the last activity

5. Data Recipients

Your personal data is intended exclusively for UbeDelyss and is never sold to third parties. However, it may be transmitted to the following service providers, strictly within the scope of their mission:

• Payment provider (Stripe / PayPal or equivalent) — for secure transaction processing
• Carriers (Colissimo, Mondial Relay or equivalent) — for shipping your orders
• Host (OVH) — for storing site data
• Emailing tool (if applicable) — for sending the newsletter

These service providers are subject to confidentiality obligations and may only use your data for the purposes for which it was transmitted to them.

6. Your rights

In accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French Data Protection Act, you have the following rights:

• Right of access — obtain a copy of your personal data
• Right of rectification — correct inaccurate or incomplete data
• Right to erasure — request the deletion of your data («right to be forgotten»)
• Right to limitation — restrict the processing of your data
• Right to object — to object to processing based on legitimate interest
• Right to portability — receive your data in a structured and readable format
• Right to withdraw your consent at any time, without calling into question the lawfulness of the processing carried out before the withdrawal

To exercise your rights: contact@ubedelyss.fr
We commit to responding within a certain timeframe.’one month from the date of receipt of your request.

If you believe your rights have not been respected, you can file a complaint with the CNIL cnil.fr

7. Cookies

A cookie is a small text file placed on your browser when you visit a website. The ubedelyss.fr website uses the following types of cookies:

Strictly necessary cookies (no consent required)

• WooCommerce Shopping Cart Management
• Login session to your account
• Site security

Performance/analytics cookies (consent required)

• Anonymized audience measurement (e.g., Google Analytics or equivalent)

Social media cookies (consent required)

• Instagram, TikTok, and Pinterest share buttons

You can configure your browser at any time to refuse cookies or to be notified when a cookie is placed. Please note that some website features may no longer function correctly if cookies are disabled.

8. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure. Payment transactions are secured by the SSL/TLS protocol (padlock icon in the address bar).

9. Transfers outside the European Union

Some of our service providers (e.g., email marketing or analytics tools) may be located outside the European Union. In this case, data transfers are governed by appropriate safeguards (standard contractual clauses of the European Commission or an adequacy decision).

10. Amendment to this policy

We reserve the right to modify this privacy policy at any time. The current version is the one published on this page, with the date of the last update indicated in the header. We encourage you to review it regularly.