Privacy Policy

1. Data controller

AIT SALAH Othmane, micro-entrepreneur
28 Rue Lassus, 59160 Lille, France
Email: contact@habbati.com

2. Data collected

• Order data: first name, last name, delivery address, email address
• Payment data: processed and stored exclusively by Mollie — Habbati does not store card details
• Browsing data: pages visited, anonymised IP address (Google Analytics GA4)
• Newsletter: email address (with your consent)

3. Purposes and legal bases

• Order processing — contract performance (Art. 6.1.b GDPR)
• Newsletter — consent (Art. 6.1.a GDPR)
• Audience analytics — legitimate interest (Art. 6.1.f GDPR), subject to your cookie consent via Axeptio

4. Sub-processors

• Mollie (mollie.com) — payment processing, Netherlands, PCI-DSS certified
• Mailjet (mailjet.com) — transactional emails and newsletters, France
• Supabase (supabase.com) — database and authentication, hosted in the EU
• Google Analytics GA4 — audience analytics, IP anonymisation enabled, subject to cookie consent
• Axeptio (axept.io) — cookie consent management
• IONOS SE — website hosting, Germany
• Mondial Relay / La Poste (Colissimo) — delivery address transmitted for order fulfilment

5. Cookies

Cookie preferences are managed via Axeptio (the banner displayed on your first visit). Functional cookies (cart, session) are strictly necessary and exempt from consent. Analytics cookies (Google Analytics GA4) require your consent.

You can change your preferences at any time by clicking the “Cookies” link in the footer.

6. Retention periods

• Customer data: 3 years after the last order
• Accounting data: 10 years (legal obligation)
• Newsletter: until you unsubscribe

7. Your rights (GDPR)

Under Articles 15 to 21 of the GDPR, you have the right to access, rectify, erase, restrict, and port your personal data, as well as the right to object to processing.

To exercise these rights, contact: contact@habbati.com

You may also lodge a complaint with the CNIL (French data protection authority): www.cnil.fr