🔒 PRIVACY & DATA PROTECTION POLICY

Last updated: April 1, 2025

The Golden Rule: At Thalado, your privacy is our top priority.

This policy explains in total transparency how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. What data do we collect?

We only collect the absolute bare minimum needed to offer you the best thalassotherapy experience right at home:

👤 Identity Information: Last name, first name, email address, shipping address, and phone number.
💳 Payment Information: Your banking details are processed with 100% security by our certified payment providers. (Fun fact: we never actually see or store your credit card numbers!)
🌐 Browsing Data: IP address, cookies, browser type, and your browsing history on our website www.thalado.fr.
💬 Communication Data: Messages and questions sent via our contact forms or directly to our customer service team.

2. Why do we use your data? (Purposes & Legal Bases)

Why do we use your info?	On what legal basis?
Managing orders, secure payments, and shipping your marine treatments.	Performance of a contract
Replying to your questions via customer service.	Legitimate interest
Sending you private offers and inspiring newsletters.	Your consent (via voluntary opt-in)
Improving our website's performance and your user experience.	Legitimate interest
Handling accounting and ensuring regulatory compliance.	Legal obligation

3. Who do we share your data with?

🚫 Pinky Promise: We will NEVER sell or rent your personal data to third-party companies. Period.

To keep our online shop running smoothly, we only share your information with our trusted inner circle:

Secure Payment Services: (Stripe, PayPal, etc.).
Shipping & Logistics Partners: To get your packages of seaweed delivered straight to your door (La Poste, Colissimo, Chronopost, etc.).
Technical Support: Our website host and our audience detective tools (like Google Analytics, whose scripts keep us informed).

4. How long do we keep your data?

We don't hold onto your info forever. Here is the countdown:

Type of Data	Maximum Retention Period
Customer Data (Orders)	5 years after your last interaction or purchase.
Browsing Data & Cookies	13 months maximum after collection.
Marketing Data (Newsletters)	Until you choose to withdraw your consent (unsubscribing).

5. You are the boss (Your Rights)

In accordance with GDPR and CCPA regulations, you hold the remote control over your personal data. You have the right to:

Access and Correction: Take a look at or update your personal data at any time.
Deletion ("Right to be Forgotten"): Request the total erasure of your data (except what we are legally required to keep for billing purposes).
Objection and Limitation: Say "no thanks" to your data being used for marketing purposes.
Data Portability: Retrieve your data in a structured, readable format.
Withdrawal of Consent: Unsubscribe from our newsletter in a single click.

✉️ How to contact us?

To exercise any of these rights, simply send your request to our dedicated data protection team:

📧 By Email: bienvenue@thalado.fr

6. Security Shield & Cookies

🔒 Security

We put advanced security protocols in place (SSL/HTTPS encryption) to lock down and protect your data against any unauthorized access, alteration, disclosure, or destruction. Your data is safe in our harbor!

🍪 Cookie Management

We use cookies to analyze our traffic and remember what's inside your shopping cart. You can configure, accept, or refuse these cookies at any time via the consent banner that pops up when you browse, or directly in your browser's settings. We won't hold a grudge!

7. Policy Updates

This privacy policy might ride a new wave and change to keep up with updated laws. If a major change happens, we will let you know via email or put a clear notice right on our e-commerce site www.thalado.fr.

Thank you for your trust! Enjoy your marine treats with Thalado. 🌿🌊