Privacy policy
Last updated: 18 August 2026.
This policy explains how MAREVAKA collects and uses your personal data when you visit the website, create an account, place an order, contact the House or subscribe to its communications.
1. Data controller
Audrey RAMAMONJY, sole trader, trading as MAREVAKA
Address:
SIRET : 825 219 520 00046
Email:
Telephone:
2. Data we process
- Identity and contact details: first name, surname, postal address, email address and telephone number.
- Order data: products, order value, delivery and billing addresses, order history, returns and correspondence with customer service.
- Account data: login identifier, preferences and history associated with the customer account.
- Payment data: transaction status and reference. Full card details are processed by payment providers and are not retained by MAREVAKA.
- Browsing data: IP address, device, browser, pages viewed, interactions and cookie identifiers, depending on your choices.
- Communication data: messages, requests, reviews and consent records.
3. Purposes and legal bases
- Managing orders, payments, deliveries, returns and after-sales service: performance of a contract.
- Responding to enquiries before an order: steps taken before entering into a contract and our legitimate interest in providing customer service.
- Keeping accounts, issuing invoices and meeting tax obligations: compliance with a legal obligation.
- Preventing fraud, securing the website and defending MAREVAKA’s rights: legitimate interests.
- Sending newsletters and offers where consent is required: consent, which may be withdrawn at any time.
- Measuring website traffic and personalising advertising through non-essential cookies: consent.
4. Recipients
Data is accessible to MAREVAKA and, as needed, its providers of hosting and e-commerce, payment, delivery, messaging, customer service, accounting, fraud prevention, analytics and advertising services. Each provider receives only the data necessary to perform its role.
Public authorities may also receive certain information where required by law.
5. Retention periods
- Order and customer relationship data: for the duration of the contractual relationship, then archived for the applicable statutory evidential retention periods.
- Invoices and accounting records: 10 years.
- Prospect and newsletter data: until consent is withdrawn or, at the latest, 3 years after the last active contact, subject to applicable rules.
- Customer service requests: for the time needed to handle the request, then archived for the period necessary to defend legal rights.
- Cookie choices: retained for 6 months. Tracking technologies requiring consent have a maximum lifespan of 13 months, unless a shorter period applies.
6. Transfers outside the European Economic Area
Some providers, including Shopify and certain technical services, may process data from countries outside the European Economic Area. Where the country is not covered by an adequacy decision, the transfer is protected by a mechanism recognised under the GDPR, including the European Commission’s standard contractual clauses, together with additional measures where necessary.
7. Your rights
Depending on your circumstances, you may request access to your data, rectification, erasure, restriction of processing or data portability, or object to processing based on legitimate interests. You may withdraw your consent at any time without affecting the lawfulness of earlier processing.
To exercise your rights, please use the contact form, the email address available in the contact details above, or the postal address also available above. Proof of identity may be requested only where there is reasonable doubt about your identity.
You may also lodge a complaint with the French data protection authority, the CNIL.
8. Cookies
Information about the categories of tracking technologies, their purposes and how to manage your choices is provided in the cookie policy.
9. Security and updates
MAREVAKA and its providers implement appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration or disclosure. This policy may be updated to reflect changes in the law, technology or the services offered.