Politique de confidentialité

Last update : 07/26/2026

This Privacy Policy applies to this website and any subdomains thereof, unless a specific privacy policy is posted on those subdomains.

1. Data controller

The entity responsible for processing the personal data collected on the website amehir.com is:
Compagny: Amehir

Legal form: Micro-entreprise

Legal representative: MEHIR Alyssa

SIREN: 898 961 008
9 rue Pierre Blanc
69001 Lyon
France

No data protection officer (DPO) has been appointed.

2. Data collected

We only collect data that is necessary for the functioning of the website, the processing of orders, and communication with you. No customer accounts are created.

2.1. Automatically collected data (Technical)

Collected automatically while browsing:
• IP address,
• browser type and device used,
• connection data (date, time, pages viewed),
• information necessary for the operation, security, and maintenance of the site, as well as for fraud prevention.
This data may be processed by our hosting provider, Hostinger, as well as by certain technical service providers essential to the operation of the website, including Stripe when its payment services are used.

Hostinger may also collect anonymous data regarding the site's performance and traffic (such as country, device type, or date of visit), without allowing visitors to be directly identified.

2.2. Data provided voluntarily

Personal data is either provided directly by the user (through forms, orders, or newsletter sign-ups) or collected automatically when necessary for the operation or security of the website or to prevent fraud.

Contact form / email:
• name,
• email address,
• information provided in the message.

Order : (all fields are required to process your order)
• first and last name,
• mailing address,
• email address,
• phone number,
• information about the products ordered.

We never store credit card information.
Payments are processed directly by Stripe or PayPal (see Section 6).

Newsletter :
• email address.

3. Purposes of data processing

The data is processed for the following purposes:
• process and ship your orders,
• to keep you informed about the status of your order,
• respond to your inquiries via the contact form,
• manage your newsletter subscription,

• send the newsletter only based on your explicit consent,
• ensure the security and proper operation of the site,
• comply with our legal obligations (billing, accounting),
• prevent payment fraud,

• handle any disputes, unpaid balances, or claims related to your order.

Communications related to tracking your order (confirmation, shipment) are necessary for the performance of the contract.

4. Legal basis (GDPR)

• Performance of a contract: processing orders, delivery, and sending emails related to the performance of the contract (confirmation, order tracking).
• Consent: voluntary subscription to the newsletter; placement of an audience measurement cookie used for website statistics.
• Legitimate interest: responding to requests submitted via the contact form, ensuring the security of the website, preventing fraud (particularly when using payment services), and ensuring the proper technical functioning of the website.
• Legal requirement: retention of accounting records.

5. Cookies

The website uses various types of cookies and trackers.

5.1. Strictly necessary cookies
These cookies are essential for the website to function and cannot be disabled without affecting certain features.
These include:
• cookies necessary for the shopping cart and online store to function,
• session cookies,
• security cookies,

• the available-express-cart-ids cookie, used to ensure that certain ordering features work properly,
• the cc_cookie cookie, which is used to save your preference regarding the placement of cookies that require your consent,
• certain technical cookies may be generated automatically by Hostinger's hosting infrastructure, CDN, or security mechanisms. These cookies are strictly necessary for the website's operation, stability, and security.

5.2. Payment-related cookies
When Stripe payment services are automatically loaded by the e-commerce platform, Stripe may set the following technical cookies:
• __stripe_mid;
• __stripe_sid.
These cookies are used to ensure payment security, prevent fraud, and protect against misuse of payment services.

5.3. Audience measurement cookies
After you give your consent, the site uses the following cookie:
• AMP_0c48a381e1.
This cookie is set only after you have given your consent and is used to generate traffic statistics intended to improve the site’s functionality and performance.
No advertising cookies or cookies used for marketing profiling are used.
You can accept, reject, or change your preferences regarding audience measurement cookies at any time via the consent banner.
You can also configure your browser to block cookies; in which case, certain essential features of the site may no longer function properly.
The list of cookies mentioned in this policy is provided for informational purposes only. The names, retention periods, and technical characteristics of certain cookies may change as a result of updates by our service providers (including Hostinger, Stripe, or audience measurement tools), without any change to their purpose or nature.

6. Subcontractors and recipients

6.1. Hostinger (hosting)

Hostinger International Ltd.
Role: hosting, security, maintenance.
Data is primarily hosted in the EU (Lithuania / the Netherlands).
Certain technical support services may involve transfers outside the European Union (notably to the United States). These transfers are protected by the Standard Contractual Clauses (SCCs).

6.2. Stripe (payment)

Data transmitted:
• name, email, billing address,
• order amount,
• last 4 digits of the card,
• IP address and browser data (fraud prevention).
Stripe may also set technical cookies designed to prevent fraud and secure payments—including __stripe_mid and __stripe_sid—when its payment services are loaded by the e-commerce platform.

Data may be transferred outside the European Union (in particular to the United States). These transfers are governed by the Standard Contractual Clauses (SCCs).

6.3. PayPal (payment)

Data transmitted:
• name, email, billing address,
• order amount,
• technical data (device, IP).

Transfers outside the EU are possible—particularly to the United States—and are governed by appropriate legal safeguards, including the Standard Contractual Clauses.

6.4. Carriers

To deliver your order: La Poste, Mondial Relay, or another carrier of your choice.

We never sell, rent, or share your personal information.

7. Retention periods

• Order and billing information: 10 years (legal requirement—Article L123-22 of the Commercial Code).
• Contact information: 12 months after the last exchange.
• Newsletter: until you unsubscribe.
• available-express-cart-ids cookie: 30 days.
• cc_cookie cookie (storing your consent selection) : 6 months.
• AMP_0c48a381e1 cookie (mesure d'audience) : 1 year.
• __stripe_mid cookie (fraud prevention and payment security) : 1 year.
• __stripe_sid cookie (fraud prevention and payment security) : 30 minutes.
• Other technical and essential cookies: retained for the time strictly necessary to fulfill their purpose.
• Technical logs: retained for up to 30 days, in accordance with Hostinger's practices.

8. Your rights (GDPR)

You have the following rights:
• right of access,
• right to rectification,
• right to erasure,
• right to object (including to marketing),
• right to restrict,
• right to data portability.

Withdrawal of consent / unsubscribe:
You can unsubscribe from the newsletter or withdraw your consent at any time by simply sending a request to the following address:
📩 contact@amehir.com

You also have the right to establish guidelines regarding the handling of your personal data after your death, in accordance with Article 85 of the French Data Protection Act. These guidelines may be general or specific and may be modified or revoked at any time.

Your requests regarding the exercise of your rights will be processed within one month of receipt.

You also have the right to file a complaint with the CNIL (www.cnil.fr).

9. Security

We implement technical and organizational measures designed to protect your data:
• HTTPS,
• Hostinger firewalls and security features,
• restricted access,
• secure payments (Stripe / PayPal), including fraud detection and prevention mechanisms.

We do not engage in any marketing activities without your consent, nor do we make any automated decisions that have legal or similar effects on you.

10. Modifications

This Privacy Policy may be updated to reflect changes in laws, regulations, or technology, as well as changes to the website's operation. The date of the last update is indicated at the top of the document.