Who handles your data

The data controller is SAS 3M TEXTILE PARIS, 158 rue Diderot, 93500 Pantin, France. Data protection officer: Charrad Montacer — montacer.charrad@gmail.com.

This policy explains what data we collect when you buy our clothes or our fragrances, why we collect it, and what you can require of us.

The data we collect

• Identity and contact: surname, first name, email address, phone number.
• Order and delivery: delivery and billing address, pieces ordered, sizes, amounts, order history.
• Payment: card details are entered and processed directly by Shopify Payments. We never see your full card number and we do not store it. We keep only the last four digits and the status of the transaction.
• Browsing: pages viewed, pieces looked at, basket contents, IP address, device and browser type.
• Correspondence: the messages you send us through the contact form or by email.

We collect no sensitive data within the meaning of the GDPR.

Why we collect it, and on what basis

Purpose	Legal basis
Processing and shipping your order, handling returns and size exchanges	Performance of the contract
Answering your messages and handling after-sales service	Performance of the contract
Sending you our newsletter	Your consent
Placing non-essential cookies	Your consent
Preventing payment fraud	Legitimate interest
Measuring site traffic and improving our collections	Your consent
Keeping accounting records	Legal obligation

We do not sell your data and we do not rent it to anyone.

Who has access to it

• Shopify, which hosts the shop and processes payments.
• The carrier handling your delivery, which receives your name, address and phone number.
• Our team, at the Pantin showroom, to pack orders and answer you.
• The apps installed on the shop, for only the data they need to work (preparing and tracking orders in particular).
• Google, when you view the map of our showroom on the Contact page: the map is provided by Google Maps, so Google receives your IP address and may place its own cookies.

These providers only have access to the data they need for their task, and cannot use it for anything else.

Transfers outside the European Union

Shopify is a Canadian company whose infrastructure relies in part on servers located outside the European Union. Your data may therefore be transferred outside the EU, under the European Commission standard contractual clauses and the contractual safeguards Shopify applies for its merchants.

How long we keep it

• Customer account: for as long as the account exists, then three years after your last order or last contact.
• Orders and invoices: ten years, under accounting obligations.
• Newsletter: until you unsubscribe, then three years.
• Cookies: thirteen months at most, in line with CNIL guidance.
• Messages: three years after the last exchange.

Cookies

The site uses cookies. Some are essential: they remember your basket, your language and your session. The shop does not work without them, and they do not require your consent.

Others are used to measure traffic, using the statistics provided by Shopify. These are only placed with your agreement, which you can withdraw at any time through your browser settings.

At present, the shop uses neither Google Analytics nor any advertising pixel (Meta, TikTok, Snapchat and so on). Should that change, this policy will be updated before they are switched on.

Your rights

At any time you can ask for access to your data, for it to be corrected or erased, for its processing to be restricted, you can object to its processing, ask for it to be ported, withdraw consent you have already given, and set instructions for what happens to it after your death.

Write to montacer.charrad@gmail.com or to 3M TEXTILE PARIS — DPO, 158 rue Diderot, 93500 Pantin, France. We reply within one month. We may ask for proof of identity if there is any doubt about where the request came from.

If our answer does not satisfy you, you can complain to the French data protection authority: https://www.cnil.fr/fr/plaintes

Security

The site is served over HTTPS. Access to the shop admin is named and protected. No system is infallible: if an incident were to compromise your data, we would inform both you and the CNIL within the time limits set by the GDPR.

Minors

Our products are intended for adults. A minor should only order with the agreement of their legal guardian.

Changes

We may update this policy. If something important changes, we will tell you before it takes effect.