Privacy policy

This translation is provided for information only. In the event of any discrepancy, the French version shall prevail. Last updated: 17 October 2026

This page explains what personal data we collect on cmaballe.com, why, how long we keep it and how you can exercise your rights. We only collect what is needed to process your orders and reply to you, and we never sell your data.

Data controller

C MA BALLE, a company with a share capital of €7,500, registered with the Nanterre Trade and Companies Register under number 512 569 708, 45 route de la Reine, 92100 Boulogne-Billancourt, France. Contact: contact@cmaballe.com – +33 1 46 05 82 03.

Data collected and purposes

  • Orders and delivery: first name, last name, delivery and billing addresses, e-mail, phone number, order contents. Legal basis: performance of the contract.
  • Personalisation: the text, designs and images you create or upload in the personalisation tool, used solely to make your product. Legal basis: performance of the contract.
  • Customer account (optional, you can order without one): title, first name, last name, e-mail, password (encrypted), date of birth if you choose to give it, order history, wishlist. Legal basis: performance of the contract.
  • Payment: processed directly by Stripe (card) or PayPal. We never see or store your card numbers. Legal basis: performance of the contract.
  • Contact and customer service: messages sent through the contact form or by e-mail. Legal basis: legitimate interest in replying to you.
  • Product reviews: the name or nickname and text of the review you publish. Legal basis: consent.
  • Newsletter and back-in-stock alerts: your e-mail address, only if you sign up. You can unsubscribe at any time using the link in every e-mail. Legal basis: consent.
  • Website security and operation: IP address, technical logs, protection against fraud and attacks. Legal basis: legitimate interest.
  • Accounting obligations: invoices and order records. Legal basis: legal obligation.

Recipients

Your data is intended for C MA BALLE. Only the part that is necessary is passed on to our service providers:

  • La Poste – Colissimo (home or pick-up point delivery);
  • Stripe and PayPal (payment and fraud prevention);
  • OVH (hosting of the website and data, in France).

Stripe and PayPal may process some data outside the European Union, in particular in the United States. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

We never sell, rent or exchange your data.

Retention periods

  • Order data and invoices: 10 years (accounting obligation).
  • Customer account: until it is deleted, or 3 years after your last order or login.
  • Personalisation files: as long as needed to make and deliver the order, then up to 3 years so that an identical order can be placed again.
  • Customer service messages: 3 years after the last exchange.
  • Newsletter and alerts: until you unsubscribe, or 3 years without any opening or order.
  • Technical security logs: 12 months maximum.

Cookies

The website only uses cookies that are necessary for it to work: session, basket, language, account login, and the security cookies set by Stripe to prevent payment fraud. These cookies do not require consent. The PayPal buttons in the basket and on the payment page are provided directly by PayPal, which may set its own cookies, needed for payment and fraud prevention, under its own privacy policy. We do not use any advertising or audience measurement cookies.

The Facebook, Instagram, LinkedIn and YouTube buttons on the website are simple links: they do not set any cookie unless you click on them.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, to withdraw your consent at any time and to give instructions on what happens to your data after your death. To exercise these rights, write to us at contact@cmaballe.com; we reply within one month. You can also view and update your information from your customer account.

If you believe your rights have not been respected, you can lodge a complaint with the French data protection authority (CNIL): www.cnil.fr/fr/plaintes, or with the data protection authority of your country.

Security

The whole website is served over HTTPS, passwords are encrypted and access to data is restricted to the people who need it to process your order.

Changes

This policy may change, in particular if we add a new service. The date of the last update is shown at the top of this page.