Last updated: August 31, 2026 – Version 1.1
1. Data Controller
The data controller is:
Mohamed Sakho, a sole trader operating under the trade name 3H13, located at 24 Avenue de la Marche pour l’égalité et contre le racisme, 14th arrondissement of Marseille, registered under number 801 392 317 00039 with the Marseille Trade and Companies Register (RCS).
Contactable at the following details: e-mail: contact@maeyra.com – telephone: +33 (6) 52 56 73 22.
2. Data Processed
Depending on the services used, Maeyra may process, in particular:
- first name and surname;
- e-mail address;
- telephone number;
- billing and delivery addresses;
- account information;
- order history and content;
- products, variants, prices, discounts and charges;
- information relating to payment and its status;
- information relating to deliveries;
- communications with customer service;
- returns, refunds and complaints;
- wishlist and product reviews;
- newsletter subscription;
- technical data, security logs, IP address and information relating to cookies, where applicable.
Maeyra does not directly retain full bank card numbers or their security codes where these are processed by payment providers.
3. Order Management
The necessary data is used to record, fulfil and track orders, manage payments, prepare shipments, communicate with the Customer and provide after-sales service.
Legal basis: performance of the contract and steps taken prior to entering into a contract.
Certain data is subsequently retained in order to comply with legal obligations, in particular accounting and tax obligations.
4. Payments
Depending on the method chosen, data necessary for the transaction is communicated, in particular, to:
- Stripe;
- PayPal;
- Klarna;
- Apple Pay;
- Google Pay.
These providers may act as processors or as controllers in respect of their own processing activities, depending on the operations concerned.
5. Delivery
Data necessary for shipment may be communicated to Boxtal and then to the selected carrier, including:
- La Poste;
- Chronopost;
- Mondial Relay.
This information is used to prepare, transport and track the order and to manage delivery incidents.
Legal basis: performance of the contract.
6. Invoicing and Legal Obligations
Information necessary for invoicing, accounting and compliance with tax and social obligations is processed on the basis of a legal obligation.
This information may be retained even after an account has been deleted where the law requires its retention.
7. Returns, After-Sales Service and Disputes
Necessary data may be used to manage withdrawals, returns, guarantees, defective or non-conforming products, refunds, complaints and disputes.
Depending on the situation, the legal bases are:
- performance of the contract;
- a legal obligation;
- the legitimate interest in establishing, exercising or defending legal rights.
Where the consumer refers a matter to the CM2C, information necessary for handling the mediation may be communicated to it.
8. Customer Account
Creating an account is optional.
The account enables, in particular, authentication, management of contact details and addresses, access to order history and access to associated features.
The Customer may request deletion of their account at:
Such deletion does not result in the deletion of data which Maeyra must continue to retain on another legal basis.
9. Wishlist and Reviews
Users with an account may save products to their wishlist.
Maeyra does not automatically use this list for personalised marketing purposes.
Product reviews are restricted to logged-in users who have purchased the product concerned.
The necessary information may be used to verify the purchase, publish the review, administer the service and prevent abuse.
10. Contact Form
Messages sent using the contact form are forwarded to Maeyra’s e-mail inbox and are not currently stored in a dedicated WordPress database.
Depending on the request, the processing is based on steps taken prior to entering into a contract, performance of the contract or Maeyra’s legitimate interest in responding to correspondence received.
Using the contact form does not result in automatic subscription to the newsletter.
11. Brevo and Electronic Communications
Maeyra uses Brevo:
- for the delivery of its transactional e-mails;
- for the management of its newsletter.
Brevo behavioural tracking on the Site is not currently enabled.
Communications necessary for the performance of an order do not constitute marketing communications and are not based on consent to the newsletter.
12. Newsletter
Subscription to the newsletter may, in particular, be completed through the dedicated form on the Site or voluntarily during checkout.
The checkbox offered at checkout is not pre-ticked.
Purpose: sending Maeyra news, new products, offers and commercial communications.
Legal basis relied upon by Maeyra: consent.
Consent may be withdrawn at any time using the unsubscribe link contained in the communications.
Maeyra retains the information necessary to manage and, where necessary, demonstrate the subscription or to ensure that an objection is respected on an ongoing basis.
13. Cookies and Consent
Maeyra uses Elementor Cookie Consent to manage choices relating to cookies and other trackers.
The visitor may:
- accept;
- refuse;
- customise their choices.
Optional technologies subject to consent are managed in accordance with the choices expressed.
The visitor may subsequently modify or withdraw their choices using the “Manage my cookies” function.
14. Google Analytics
Maeyra uses Google Analytics 4 (GA4) to measure audience and analyse use of the Site.
In Maeyra’s configuration, the corresponding trackers are classified in the Analytics category and are subject to consent.
15. Google Ads
Maeyra uses Google Ads to measure conversions relating to its advertising campaigns.
Advertising technologies subject to consent are only enabled according to the choices expressed by the visitor.
Google Tag Manager and GTM4WP may be used to technically organise the triggering of WooCommerce tags and events.
16. Google Search Console
Google Search Console is used, in particular, to monitor the Site’s presence in the Google search engine.
Ownership verification is based on a dedicated tag and is not regarded by Maeyra as an advertising tracking mechanism for visitors.
17. Hosting and Security
The Site is hosted by:
HOSTINGER INTERNATIONAL LIMITED
61 Lordou Vironos str.
6023 Larnaca
Cyprus.
The hosting infrastructure selected for Maeyra is located in Paris.
Technical data, including certain IP addresses and logs, may be processed in order to ensure the availability and security of the Site, prevent abusive access and diagnose incidents.
18. Recipients
Depending on the processing concerned, data may, in particular, be accessible:
- to Maeyra;
- to Hostinger;
- to components necessary for the operation of WooCommerce;
- to Brevo;
- to payment providers;
- to Boxtal and the carriers;
- to Elementor for the services actually concerned;
- to Google for the services actually used and authorised;
- to the CM2C where mediation requires it;
- to legally authorised authorities.
Maeyra does not sell the personal data of its customers or visitors.
19. International Transfers
Certain international providers may process data outside the European Economic Area.
Where an international transfer is subject to the GDPR, it is governed by a mechanism recognised by the applicable regulations, which may include, in particular:
- an adequacy decision;
- standard contractual clauses;
- binding corporate rules;
- or any other legally applicable mechanism.
You may contact Maeyra to obtain further information about transfers concerning you and, where provided for by the applicable regulations, about the appropriate safeguards implemented.
20. Retention
Data is retained only for the period justified by its purpose and the applicable obligations.
Invoices and accounting records subject to the corresponding retention obligation are retained for 10 years.
Information necessary for after-sales service, guarantees and disputes is retained for the period necessary to handle the matter and, where necessary, to establish or defend legal rights.
Data used for marketing purposes is retained for a limited period. For prospective customers, a reference period of three years from collection or the last positive contact is applied.
Information strictly necessary to record and respect an objection may be retained separately.
Customer account data is retained while the account is in use and then deleted or anonymised after the period of inactivity defined by Maeyra, subject to information that must be retained for another legitimate or mandatory purpose.
21. Security
Maeyra implements technical and organisational measures appropriate to the risks in order to protect data against, in particular, unauthorised access, loss, alteration or disclosure.
As no IT system can guarantee absolute security, the measures are adapted according to the risks and changes in the technical environment.
22. Your Rights
Depending on the processing and its legal basis, you may have, in particular:
- a right of access;
- a right to rectification;
- a right to erasure;
- a right to restriction;
- a right to object;
- a right to data portability where the applicable conditions are met;
- the right to withdraw your consent where processing is based on consent.
Withdrawal of consent does not allow the deletion of data which Maeyra must retain on another legal basis.
Requests may be sent to:
Maeyra may request additional information in order to verify identity where this is necessary and proportionate.
23. Complaint
A person who considers that their data is being processed in breach of the applicable regulations may lodge a complaint with the competent data protection authority.
In France, this authority is the Commission nationale de l’informatique et des libertés (CNIL).
24. United Kingdom
Where UK data protection legislation applies, the processing concerned is also subject to the relevant provisions of the UK GDPR and the Data Protection Act 2018.
Data subjects may, in particular, exercise the rights recognised by that legislation and lodge a complaint with the Information Commissioner’s Office (ICO).
25. Changes to Processing Activities
Maeyra may update this policy when its services, providers or processing activities change.
Future tools such as Meta, TikTok or Snapchat pixels or a chatbot will only be considered active processing activities once they have actually been implemented and after the necessary adaptations have been made.