Last updated: 14 September 2026
This policy explains what personal information Moelly collects when you visit or buy from this store, why we collect it, who we share it with, and what you can do about it. Moelly is operated from France, and this policy is written to meet both the EU General Data Protection Regulation (GDPR) and United States privacy laws including the California Consumer Privacy Act as amended (CCPA/CPRA).
Who is responsible for your data
The data controller for this store is Moelly, established in France.
Contact for all privacy matters: rcamus.pro@gmail.com
What we collect
Information you give us
- Name, shipping address and billing address
- Email address and, if you provide it, phone number
- Order contents and order history
- Any message you send us by email or through a contact form
- A product review, if you choose to leave one
Payment information. We do not see, receive or store your full card number. Payments are processed directly by our payment providers. We receive only a confirmation that payment succeeded, the payment method type, and the last four digits of the card.
Information collected automatically
- Device and browser type, operating system, language
- IP address and approximate location derived from it
- Pages viewed, products viewed, time on site, referring website
- Cookie and similar identifiers — see the Cookies section below
Why we use it, and on what legal basis
- To process and deliver your order, send confirmations and tracking, and handle returns and refunds. Legal basis: performance of our contract with you.
- To provide customer service and answer your messages. Legal basis: performance of our contract, and our legitimate interest in supporting our customers.
- To detect and prevent fraud and protect the store. Legal basis: our legitimate interest, and our legal obligations.
- To meet accounting, tax and consumer-law obligations. Legal basis: legal obligation.
- To understand how the store is used and improve it. Legal basis: our legitimate interest, or your consent where the law requires it.
- To send you marketing emails, only if you have signed up. Legal basis: your consent. You can withdraw it at any time using the unsubscribe link in any email.
Who we share it with
We do not sell your personal information for money. We share it only with the service providers we need to run the store, and only with what they need:
- Shopify — hosts the store, processes orders and provides store analytics.
- Payment providers — process your payment and run fraud checks.
- Fulfilment and logistics partners, and the carriers they use — receive your name, address and order contents in order to produce and deliver your parcel. Some of these partners are located outside the European Economic Area.
- Judge.me — collects and displays product reviews.
- Applications installed on the store that support features such as product bundles.
We may also disclose personal information where we are legally required to, or to establish, exercise or defend legal claims.
Transfers outside the European Economic Area
Some of our providers and fulfilment partners are located outside the EEA, including in the United States and in Asia. Where personal data is transferred outside the EEA, we rely on the safeguards permitted by the GDPR, in particular the European Commission Standard Contractual Clauses or an adequacy decision covering the destination country.
How long we keep it
- Order and transaction records: retained for the period required by French commercial and tax law, which is 10 years.
- Customer service correspondence: up to 3 years after our last contact with you.
- Marketing contacts: until you unsubscribe, and in any case no more than 3 years after your last interaction with us.
- Analytics and cookie data: according to the retention periods described in the Cookies section.
Cookies and similar technologies
This store uses cookies. Some are strictly necessary — they keep your cart working, keep you logged in and secure the checkout, and cannot be switched off. Others are used for analytics and, where applicable, marketing.
If you are in a region where consent is required, you will be asked before any non-essential cookie is placed, and you can change your choice at any time. You can also block or delete cookies in your browser settings, though the store may not work correctly without the essential ones.
Your rights if the GDPR applies to you
You have the right to:
- Access the personal data we hold about you and receive a copy
- Have inaccurate data corrected
- Have your data erased, where the law allows
- Restrict or object to how we process it, including objecting to processing based on legitimate interests
- Receive your data in a portable format
- Withdraw your consent at any time, where processing is based on consent
To exercise any of these, email rcamus.pro@gmail.com. We reply within one month.
You also have the right to lodge a complaint with a supervisory authority. In France this is the Commission Nationale de l Informatique et des Libertes (CNIL), 3 place de Fontenoy, 75007 Paris.
Your rights if you are a United States resident
Depending on your state, you may have the right to:
- Know what personal information we have collected about you, where it came from, why we collected it and who we disclosed it to
- Delete the personal information we hold about you
- Correct inaccurate personal information
- Opt out of the sale or sharing of your personal information, and of targeted advertising
- Not be discriminated against for exercising any of these rights — we will not refuse you service, change your price or give you a lower level of service
We do not sell personal information for money. Some advertising and analytics technologies may nonetheless count as sharing or as a sale under some state laws. You can opt out through our Your Privacy Choices page, or by emailing us.
To make a request, email rcamus.pro@gmail.com with the subject line Privacy Request. We will verify your identity by matching the details you give us against our records, and we will respond within the time your state law allows, normally 45 days. You may use an authorised agent; we may ask for proof of their authority.
Children
This store is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email us and we will delete it.
Security
The store runs over an encrypted connection and payment data is handled by PCI-compliant providers. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information, and we limit access to it to what is necessary to run the store.
Changes to this policy
We may update this policy to reflect changes in how we operate or in the law. The date at the top shows when it was last changed. If a change materially affects your rights, we will make that clear.
Contact
Questions about this policy or about your data: rcamus.pro@gmail.com