Privacy policy

1. Data controller

Schéhérazade Ben Messaoud, [À COMPLÉTER], contact: contact@saynoora.com, is the controller of the data collected on saynoora.com, in accordance with Regulation (EU) 2016/679 (the “GDPR”) and the French Data Protection Act.

2. Data collected and purposes

• Customer account (name, e-mail, encrypted password) — management of your customer area. Legal basis: performance of the contract.
• Orders (addresses, purchase history) — preparation, delivery, invoicing. Legal basis: performance of the contract and legal obligations (accounting: 10 years).
• Payment — handled by Stripe; Saynoora stores no banking data.
• Newsletter (e-mail) — sending news. Legal basis: consent, which may be withdrawn at any time through the unsubscribe link.
• Cookies and audience measurement — operation of the site (basket, session) and anonymised statistics.

3. Recipients

The data is intended for Saynoora and its technical processors: Vercel (hosting), Neon (database), Stripe (payment), Brevo (e-mails), Sendcloud (shipping). Some providers may be located outside the European Union; such transfers are governed by standard contractual clauses.

4. Retention periods

• Customer account: until the account is deleted, then 3 years.
• Invoicing documents: 10 years (legal obligation).
• Newsletter: until consent is withdrawn.

5. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to set post-mortem instructions. To exercise them: contact@saynoora.com. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

6. Security

Passwords are hashed (bcrypt), communications are encrypted (TLS) and access to data is restricted to authorised staff.

7. Cookies and consent

No audience measurement cookie is placed before you accept. Your choice is stored in your browser and can be changed at any time by clearing the site data from your browser settings.