Privacy Policy

Last update: 01/12/2025

1. Data controller

The data controller for personal data collected on the amehir.com website is:
Compagny: Amehir

Legal form: Micro-entreprise

Legal representative: MEHIR Alyssa

SIREN: 898 961 008
9 rue Pierre Blanc
69001 Lyon
France

No data protection officer (DPO) has been appointed.

2. Data collected

We only collect data that is necessary for the functioning of the website, the processing of orders, and communication with you. No customer accounts are created.

2.1. Data collected automatically (technical)

Collected by the host Hostinger:
• IP address (anonymized/pseudonymized where possible),
• type of browser and device used,
• connection data (date, time, pages viewed),
• information necessary for the security, operation, and maintenance of the site.

Hostinger may collect anonymous data relating to the performance and traffic of the site (e.g., country, device type, date of visit), without allowing the direct identification of visitors.

2.2. Data provided voluntarily

All data collected is provided directly by the user via forms, orders, or registrations.

Contact form/email:
• name,
• email address,
• information provided in the message.

Order: (all fields are required to process your order)
• first and last name,
• postal address,
• email address,
• phone number,
• information about the products ordered.

We never store credit card details.

Payments are processed directly by Stripe or PayPal (see section 6).

Newsletter:
• email address.

3. Legal bases (GDPR)

Data is processed for the following purposes:
• to process and deliver your orders,
• to inform you of the progress of your order,
• to respond to your requests via the contact form,
• to manage your newsletter subscription,

• send the newsletter only with your explicit consent,
• ensure the security and proper functioning of the site,
• comply with our legal obligations (invoicing, accounting),
• prevent payment fraud,

• manage any disputes, unpaid bills, or complaints related to your order.

Communications related to the tracking of your order (confirmation, shipping) are necessary for the performance of the contract.

4. Legal bases (GDPR)

• Performance of a contract: processing of orders, delivery and sending of emails related to the performance of the contract (confirmation, order tracking).
• Consent: voluntary subscription to the newsletter, forms.
• Consent: for sending the newsletter.
• Legitimate interest: ensuring the security of the site, preventing fraud (accuracy), guaranteeing technical maintenance.
• Legal obligation: retention of accounting documents.

5. Cookies

The site only uses:
• cookies essential to the functioning of the shopping cart,
• session cookies,
• security cookies,
• and possibly anonymous technical cookies provided by Hostinger for stability or non-identifying statistics. Some additional technical cookies may be generated automatically by the hosting infrastructure (e.g., via CDN or security tools). These cookies are strictly necessary for the security and functioning of the website and do not allow visitors to be directly identified.

No advertising cookies are used. The website does not use cookies that require consent. Therefore, no consent banner is necessary.

You can configure your browser to block cookies; in this case, some essential features of the website may no longer function properly.

6. Subcontractors and recipients

6.1. Hostinger (hosting)

Hostinger International Ltd.
Role: hosting, security, maintenance.
Data hosted mainly in the EU (Lithuania/Netherlands).
Some technical support may involve transfers outside the European Union (particularly to the United States). These transfers are protected by Standard Contractual Clauses (SCCs).

6.2. Stripe (payment)

Data transmitted:
• name, email, billing address,
• order amount,
• last 4 digits of the card,
• IP address and browser data (anti-fraud).

The data may be transferred outside the European Union (particularly to the United States). These transfers are governed by Standard Contractual Clauses (SCCs).

6.3. PayPal (payment)

Data transmitted:
• last name, first name, address, email address,
• transaction amount,
• technical data (device, IP address).

Transfers outside the EU are possible, particularly to the United States, and are governed by adequate legal safeguards, including Standard Contractual Clauses.

6.4. Carriers

To deliver your order: La Poste, Mondial Relay, or another carrier of your choice.

We never sell, rent, or exchange your personal data.

7. Retention periods

• Order and billing data: 10 years (legal obligation — Article L123-22 of the French Commercial Code)
• Contact details: 12 months after the last exchange.
• Newsletter : until unsubscribed.
• Essential cookies: for the time strictly necessary for operation.
• Technical logs: stored for a maximum of 30 days, in accordance with Hostinger's practices.

8. Your rights (GDPR)

You have the following rights:
• right of access,
• right of rectification,
• right of erasure,
• right to object (including to prospecting),
• right to restriction,
• right to portability.
Withdrawal of consent/unsubscription:
You can unsubscribe from the newsletter or withdraw your consent at any time by simply sending a request to the following address:
📩 contact@amehir.com
You also have the right to define guidelines regarding the fate of your personal data after your death, in accordance with Article 85 of the French Data Protection Act. These guidelines may be general or specific and may be modified or revoked at any timent.
Your requests regarding the exercise of your rights will be processed within a maximum of one month from receipt.
You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

9. Security

We implement technical and organizational measures to protect your data:
• HTTPS,
• Hostinger firewalls and protections,
• restricted access,
• secure payments (Stripe/PayPal).

We do not conduct any commercial prospecting without your consent and do not make any automated decisions that have a legal or similar effect on you.

10. Changes
This policy may be updated. The date of the last modification is indicated at the top of the document.