Last updated: 18 October 2026

1. Data controller

The data controller for personal data collected on mellean.com is MELLE AN (sole trader: Carima Aribi), 1237 rue de Châteauneuf, 84100 Orange, France – SIRET 752 294 413 00022 – melle.an.store@gmail.com.

2. Data collected and purposes

  • Order and delivery management: name, billing and shipping addresses, email, phone, order details. Legal basis: performance of the contract.
  • Customer service (contact form, email, WhatsApp): name, contact details, content of messages. Legal basis: legitimate interest.
  • Newsletter: email address. Legal basis: your consent, which you can withdraw at any time via the unsubscribe link.
  • Accounting and legal obligations: invoices and transaction data. Legal basis: legal obligation.
  • Fraud prevention and website security: IP address, technical connection data. Legal basis: legitimate interest.

Bank details are entered directly with our payment providers (Stripe, PayPal); we never have access to them.

3. Recipients

Your data is intended for MELLE AN and, only as necessary for their tasks, our service providers: payment (Stripe, PayPal), shipping (Mondial Relay, La Poste – Colissimo), website hosting (Namecheap), newsletter (Mailchimp). It is never sold or rented.

4. Transfers outside the European Union

Some providers (notably Namecheap, Mailchimp, Stripe and PayPal) may process data in the United States. These transfers are covered by appropriate safeguards (EU–US Data Privacy Framework adequacy decision or the European Commission’s standard contractual clauses).

5. Retention periods

  • Customer data: for the duration of the business relationship, then 3 years from the last purchase for marketing purposes.
  • Invoices and accounting records: 10 years (legal obligation).
  • Contact requests without purchase: 3 years from the last exchange.
  • Newsletter: until you unsubscribe.
  • Cookies: 13 months maximum.

6. Cookies

The website uses cookies necessary for its operation (cart, account login, security, language choice), which do not require consent. Any audience measurement or social media cookies are only placed with your consent. You can set your browser to refuse cookies at any time.

7. Your rights

Under the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your data, to withdraw your consent at any time, and to give instructions regarding your data after your death. To exercise these rights, email us at melle.an.store@gmail.com; we will reply within one month. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

8. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure (HTTPS connection, restricted access to the website administration).

9. Changes

This policy may be updated; the date of the last update appears at the top of this page.