Privacy policy

The controller is Carole Chessa, sole trader, 330 route des Collines, 26350 Le Chalon, France. Privacy contact: privacy@opaleia.fr.

Opaléia processes the information required for accounts, baskets, orders, payments, delivery, customer support and security: identity, contact details, addresses, commercial history and transaction information. Card data is sent directly to the payment provider and is not stored in plain text by Opaléia.

Processing relies, as applicable, on performance of the contract, legal obligations, the legitimate interest in securing the service, or consent where required.

Only providers needed for hosting, payments, messages, delivery and maintenance receive the data necessary for their role. They must not use it for their own commercial purposes.

Data is retained for the customer relationship and then archived for the applicable statutory periods. Accounting records are retained for ten years. Prospecting data is retained for no more than three years after the end of the commercial relationship or the last contact.

You may request access, correction, deletion, restriction, portability or object where permitted by law by writing to privacy@opaleia.fr. You may also complain to the competent supervisory authority.