Privacy Policy

Protection of your personal data (GDPR)

1. Introduction

Mirchi Masala is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This policy describes how we collect, use, and protect your data.

2. Data Controller

Mirchi Masala is the controller of your personal data.
Contact: contact@mirchimasala.fr

3. Personal Data Collected

We collect the following data:

Identification data: Name, first name, email, phone
Address data: Delivery and billing address
Payment data: Transaction information (not banking details)
Usage data: Pages visited, clicks, visit duration
Cookie data: Session ID, preferences
Communication data: Messages sent via the contact form

4. Legal Basis for Processing

Your data is processed on the basis of:

Performance of a contract: Order processing
Consent: Marketing and newsletters (optional)
Legal obligation: Invoicing, taxes
Legitimate interest: Fraud prevention, service improvement

5. Purposes of Processing

Your data is used to:

Process and deliver your order
Communicate with you (orders, support)
Send newsletters and promotional offers (with consent)
Improve our services and user experience
Comply with our legal and tax obligations
Prevent fraud and abuse

6. Data Retention Period

Your data is kept for:

Customer data: 3 years after the last order
Payment data: 13 months (tax compliance)
Cookies: According to the cookie's lifespan
Connection logs: 1 year

7. Your Rights (GDPR)

You have the following rights:

Right of access: Access your personal data
Right to rectification: Correct inaccurate data
Right to erasure: Request deletion of your data
Right to portability: Obtain your data in a readable format
Right to object: Object to the processing of your data
Right to restriction: Restrict the processing of your data
Right to withdraw consent: Unsubscribe at any time

To exercise these rights, contact us at contact@mirchimasala.fr with proof of identity.

8. Data Security

We implement the following security measures:

SSL/TLS encryption for connections
Optional multi-factor authentication
Regular backups and redundancy
Access control to sensitive data
Regular security audits

9. Data Sharing

Your data may be shared with:

Payment providers: To process payments
Carriers: To deliver your order
Hosting provider: To host the website
Legal authorities: If required by law

Your data is NEVER sold to third parties.

10. Cookies

See our Cookie Policy for more information.

11. Contact Us

For any questions regarding this policy, you can contact us at:

Email: contact@mirchimasala.fr
Address: 123 Rue des Épices, 75001 Paris, France