Privacy Policy

Article 1Data controller

1.1 The data controller for your personal data is TECH M.B, a SASU with share capital of €5,000, which operates the wellness-healthy.com website under the trade name WELLNESS HEALTHY. Its registered office is at 66 Rue du Moulin, 62130 Pierremont, France, and it is registered with the Arras Trade and Companies Register (RCS) under number 899 477 608 (hereinafter “we”).

1.2 If you have any questions about your personal data, please write to us at contact@wellness-healthy.com or via our contact form. TECH M.B has not appointed a data protection officer, as such an appointment is not mandatory for its business.

1.3 The site’s legal notice (publisher, hosting provider) is set out in our Terms and Conditions of Sale.

Article 2Data we collect

2.1 When you place an order or create an account: your surname, first name, delivery and billing addresses, email address, telephone number, the products ordered, your order history and related correspondence (delivery, returns, refunds).

2.2 When you pay: your bank details are provided directly to our payment providers (Stripe, PayPal, Scalapay). We never see or store your full card number: we only receive confirmation of payment and limited information (the payment method used and, where applicable, the card brand and last four digits).

2.3 When you contact us: your name, your email address, your order number where applicable, and the content of your message.

2.4 When you subscribe to our newsletter: your email address, your language, your delivery country and proof of your consent (date and method of subscription).

2.5 When you leave a review: your first name or pseudonym, your rating, your comment and, where applicable, any photos you add.

2.6 When you browse the site: technical data (IP address, device and browser type, pages viewed, country determined from your IP address in order to display prices and delivery charges for your country) and, with your consent, data collected by audience measurement and advertising cookies (Article 8).

Article 3Why we use your data

3.1 We use your data solely for the following purposes, each of which relies on a legal basis provided for in the General Data Protection Regulation (GDPR):

• processing and delivering your orders, managing your customer account, returns, refunds and customer service: performance of the contract of sale;
• issuing invoices and keeping our accounts: compliance with our legal, accounting and tax obligations;
• securing the site and payments, preventing fraud and displaying prices and delivery charges for your country: our legitimate interest in ensuring that the shop operates properly and securely;
• responding to your requests sent by email or via the contact form: our legitimate interest in replying to you, or the performance of the contract if your request relates to an order;
• inviting you to leave a review of the products you have purchased: our legitimate interest in gathering feedback from our customers; you may object to this at any time using the link included in every email;
• sending you our newsletter and our offers: your consent, which you may withdraw at any time using the unsubscribe link included in every email;
• measuring site traffic and the effectiveness of our advertising: your consent, obtained through the cookie banner.

3.2 We do not make any automated decisions that produce legal effects concerning you, and we never sell your data.

Article 4Recipients of your data

4.1 Your data is processed by TECH M.B and shared, only to the extent necessary, with the following recipients:

• Partner.Co, the product supplier, its logistics warehouse (Green Logistics, Netherlands) and the carriers (DHL, DHL Express, DPD/Chronopost, GLS), to prepare and deliver your order;
• our payment providers: Stripe (bank card, Bancontact, iDEAL, Klarna), PayPal and Scalapay;
• Kinsta, the site’s hosting provider, whose servers are located in Belgium;
• Brevo, for sending emails relating to your orders and the newsletter;
• TrackShip, for tracking your parcels and sending delivery notifications;
• Customer Reviews for WooCommerce (CusRev), for review invitations and the publication of reviews;
• OptinMonster, for the sign-up forms displayed on the site;
• CookieYes, for managing your cookie consent;
• Google services: reCAPTCHA, to protect forms against bots, and, only if you have agreed to this, Google Analytics, Google Ads and YouTube (embedded videos);
• our chartered accountant and our accounting and tax service providers, for keeping our accounts and filing our tax returns;
• administrative or judicial authorities, where required by law.

4.2 Our service providers act on our instructions or, for certain services (payment, delivery), as data controllers in their own right. All of them are required to protect your data.

Article 5Transfers outside the European Union

5.1 We favour service providers that host your data within the European Union. However, some of them, notably Google, Stripe, PayPal and OptinMonster, may process data in the United States or in other countries outside the European Union.

5.2 These transfers are covered by the safeguards provided for in the GDPR: an adequacy decision of the European Commission, notably the EU–US Data Privacy Framework, or standard contractual clauses adopted by the European Commission.

Article 6Retention periods

6.1 We keep your data for as long as necessary for the purposes described above, after which we delete or anonymise it:

• orders and correspondence with customer service: 5 years from the date of the order, to handle any claims;
• invoices and accounting records: 10 years, in accordance with our legal obligations;
• customer account: until it is deleted at your request, or after 3 years without any login or order;
• newsletter: until you unsubscribe, or 3 years after your last contact with us;
• contact requests: for the time needed to handle your request, then for a maximum of 3 years;
• customer reviews: for as long as the product concerned is on sale, unless you ask us to delete them;
• cookies: the period stated for each cookie in our Cookie Policy.

Article 7Your rights

7.1 You have the rights of access, rectification and erasure in respect of your data, the right to restriction of processing, the right to object (in particular to direct marketing, at any time and without having to give a reason) and the right to data portability. You may withdraw your consent at any time and give instructions regarding what happens to your data after your death.

7.2 To exercise your rights, write to us at contact@wellness-healthy.com or by post to TECH M.B, 66 Rue du Moulin, 62130 Pierremont, France. We will reply within one month; this period may be extended by two months for complex requests, in which case we will let you know. If we have reasonable doubts about your identity, we may ask you for proof of identity.

7.3 If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr, or with the data protection authority in your country of residence.

Article 8Cookies

8.1 We use cookies that are necessary for the site to function (basket, login, security, payment) and, only with your consent, audience measurement and advertising cookies. On your first visit, a banner allows you to accept, reject or select categories of cookies: rejecting is as easy as accepting.

8.2 You can change your choices at any time: change my cookie preferences. A detailed list of cookies is available in our Cookie Policy.

Article 9Security

9.1 We implement appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS) across the entire site, secure hosting, access to data restricted to those who need it, and payments processed by PCI DSS-certified providers.

9.2 In the event of a data breach likely to result in a risk to your rights, we will notify the French data protection authority (CNIL) and, where applicable, the individuals concerned, under the conditions laid down by the GDPR.

Article 10Changes to this policy

10.1 We may amend this policy to reflect changes in our services or in the applicable regulations. The date of the last update is shown at the top of the page. In the event of a significant change, we will inform you by appropriate means.