Privacy Policy

Last updated: 20/06/2026

The protection of your personal data is important to Millapoignées. We are committed to processing your data with care, transparency and in compliance with the applicable regulations, in particular the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

This privacy policy aims to explain what data we collect, why we use it, how long we retain it, with whom it may be shared and what your rights are.

We do not sell or rent your personal data to third parties.

1. Data controller

The data controller for personal data collected on the site www.millapoignees.fr is:

SAS MILLA
13, avenue du Bois
94430 Chennevières-sur-Marne
France
E-mail: contact@millapoignees.fr

For any questions regarding the processing of your personal data, you may contact us at the following address: contact@millapoignees.fr.

2. Personal data collected

When you use our site, create a customer account, place an order or contact our team, we may collect certain personal data necessary to process your request.

These data may include in particular:

your first and last name;
your email address;
your phone number, if you provide it;
your billing address;
your delivery address;
information relating to your orders: products purchased, amount, date, delivery method, tracking, purchase history;
exchanges with our customer service team: requests, complaints, photos or videos submitted in the context of an after-sales service request, a return or a request for advice;
technical data relating to your browsing: IP address, browser, device used, operating system, pages visited, cookies and trackers depending on your choices;
information relating to your communication preferences, including subscription to or unsubscription from our commercial communications.

Full banking details, such as your complete card number, are never accessible to Millapoignées. Payments are processed by secure payment providers.

3. Why do we use your data?

We use your personal data only when this is necessary and justified. The main purposes are as follows:

create and manage your customer account;
process, prepare and dispatch your orders;
manage invoicing and payments;
monitor delivery tracking;
respond to your requests sent by email, contact form, telephone or any other communication channel;
process returns, exchanges, complaints and after-sales service requests;
manage legal guarantees and any disputes;
improve the functioning of the site, our products, our content and the user experience;
measure site audience and understand visitor navigation, depending on accepted cookies;
prevent fraud, secure the site and protect our legitimate interests;
send you commercial communications, only where regulations permit or where you have consented;
comply with our legal, accounting and tax obligations.

4. Legal bases for processing

Depending on the case, the processing of your data is based on one of the following legal bases:

Performance of the contract: for example to process your order, arrange delivery, manage a return or respond to a request related to an order.
Compliance with a legal obligation: for example to retain invoices, comply with our accounting and tax obligations or respond to a request from a competent authority.
Our legitimate interest: for example to improve our site, secure our services, prevent fraud, process certain customer requests, retain evidence in the event of a dispute or send certain communications to our existing customers within the limits permitted by the applicable regulations.
Your consent: for example for certain cookies, subscription to a newsletter or certain marketing communications.

5. Secure payment

Payments made on our site are processed by recognised payment providers, including Lyra Collect and PayPal.

When you pay by bank card, the transaction is carried out on a secure page. Banking data is encrypted and processed directly by the payment provider. Millapoignées never has access to your full bank card number.

Payment providers may process certain data necessary for the validation of the transaction, fraud prevention and compliance with their legal obligations.

We invite you to consult their own privacy policies for more information on the processing they carry out under their own responsibility.

6. Site hosting

The Millapoignées site operates with the PrestaShop e-commerce solution.

The site is hosted by:

OVH SAS
2 rue Kellermann
59100 Roubaix
France

The data required for the functioning of the site, order management and customer relations is stored on secure servers. Reasonable technical and organisational measures are implemented to protect data against loss, unauthorised access, modification or unauthorised disclosure.

7. Recipients of data

Your personal data may be transmitted only to the individuals and providers who need it to provide the requested service or to comply with our legal obligations.

These may include in particular:

from our internal team, for order management, customer service, returns and after-sales service;
from carriers, to ensure the delivery of your order;
from payment providers, to process transactions;
from our hosting provider and technical service providers, to ensure the proper functioning of the site;
from our PrestaShop e-commerce solution and the modules required for the shop to function;
from our cookie consent management platform, including CookieFirst;
from our management, audience analysis, communication, emailing, customer relationship or support tools, where their use is necessary;
from our accountant, advisers, insurers or competent authorities, where required by law or necessary to defend our rights.

Each provider only accesses the data necessary for its task and must process it in accordance with the applicable regulations.

Where certain providers act as independent data controllers, in particular certain payment providers, carriers or third-party services, their own privacy policies also apply.

8. Transfer of data outside the European Union

Where possible, we favour providers located within the European Union or ensuring a level of protection compliant with the GDPR.

However, certain tools or providers may involve a transfer of data outside the European Union, in particular certain technical services, analytics tools, advertising tools, communication tools or third-party services.

In such cases, we ensure that appropriate safeguards are put in place, in accordance with the applicable regulations. These safeguards may include in particular a European Commission adequacy decision, standard contractual clauses or any other mechanism recognised by the applicable regulations.

9. Data retention period

We retain your personal data only for as long as necessary for the purposes for which it was collected, and thereafter in accordance with the applicable legal, accounting and tax obligations.

By way of indication:

data relating to orders, invoices and payments is retained for as long as necessary for order management, then archived for the applicable legal accounting and tax periods;
data relating to your customer account is retained for as long as your account is active, unless you request its deletion or a contrary legal obligation applies;
exchanges with the customer service team, after-sales service requests, and photos or videos submitted may be retained for as long as necessary to process the request, then archived for as long as necessary as evidence in the event of a dispute;
data used for commercial prospecting purposes is retained until you withdraw your consent, unsubscribe or object, and within the limits set by the applicable regulations;
technical security data may be retained for as long as necessary to protect the site and prevent fraud;
data relating to cookies and trackers is retained in accordance with the periods indicated in our consent management tool.

When data is no longer needed, it is deleted, anonymised or securely archived where its retention remains necessary to comply with a legal obligation or to defend our rights.

10. Your rights

In accordance with the applicable regulations, you have several rights regarding your personal data:

the right to access the data we hold about you;
the right to request the rectification of inaccurate or incomplete data;
the right to request the erasure of your data, where this is possible;
the right to request restriction of the processing of your data;
the right to object to certain processing activities;
the right to withdraw your consent at any time, where processing is based on your consent;
the right to data portability, where this right is applicable;
the right to set out instructions regarding the fate of your data after your death, where this right is applicable.

To exercise your rights, you can contact us at the following address: contact@millapoignees.fr.

For security reasons, we may ask you for proof of identity if this is necessary to process your request.

We endeavour to respond to your requests as promptly as possible and, in any event, within the timeframes set by the applicable regulations.

You also have the right to lodge a complaint with the CNIL if you consider that your rights are not being respected:

CNIL
Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France
Website: www.cnil.fr

11. Data security

We implement reasonable measures to protect your personal data against loss, misuse, unauthorised access, modification or unauthorised disclosure.

The site uses appropriate security protocols to protect data exchanges. Payments are processed by specialist providers via secure environments.

Despite our efforts, no method of electronic transmission or storage is 100% completely secure. We nevertheless take all necessary steps to limit risks and protect your information.

12. Cookies and trackers

Our site uses cookies and other trackers to ensure its proper functioning, improve your experience, measure audience, and, depending on your choices, offer certain content, personalised services or tailored advertising.

A cookie is a small file saved on your device when you visit a website. Some cookies are necessary for the site to function, while others require your consent.

Strictly necessary cookies

These cookies are essential for the site to function. They enable, for example:

to keep the products added to your basket;
to secure your session;
to allow you to log in to your customer account;
to remember your cookie choices;
to ensure the proper technical functioning of the site.

These cookies cannot be disabled from our consent management tool, as they are necessary for the proper functioning of the site.

Cookies subject to consent

Other cookies may be used only if you accept them. These may include in particular audience measurement, personalisation, advertising, social network or third-party service cookies.

You can accept, refuse or modify your choices at any time via the cookie management module available on the site.

13. Consent management with CookieFirst

To manage your consent to the use of cookies, we use a consent management platform: CookieFirst.

CookieFirst is a solution provided by:

Digital Data Solutions BV
Plantage Middenlaan 42a
1018 DH Amsterdam
Netherlands

When you access our site, a connection may be established with CookieFirst's servers in order to collect, record and document your cookie choices.

CookieFirst may store a cookie in your browser in order to remember your preferences and to activate only the cookies to which you have consented.

The data processed in this context may include:

your consent or refusal status;
the date and time of your choice;
an anonymised IP address;
information about your browser;
information about your device;
the URL of the page on which you saved or modified your preferences;
your approximate location;
a unique identifier linked to consent.

CookieFirst is used to comply with our legal obligations regarding cookie consent. The legal basis for this processing is compliance with a legal obligation, in accordance with Article 6(1)(c) of the GDPR.

14. Data processing agreement with CookieFirst

We have entered into a data processing agreement with CookieFirst. This agreement governs the processing of data carried out on our behalf and ensures that data is processed in accordance with our instructions and in compliance with the GDPR.

15. Cookie settings from your browser

You can also configure your browser to accept, refuse or delete cookies. The procedure varies depending on the browser used.

You can generally manage cookies from the privacy settings of your browser:

Google Chrome: privacy and security settings;
Mozilla Firefox: privacy and security settings;
Safari: privacy settings;
Microsoft Edge: cookies and site permissions settings.

Please note: disabling certain cookies may prevent the site from functioning properly, including adding items to the basket, logging into your customer account or completing an order.

16. Links to third-party sites

Our site may contain links to third-party sites, such as payment providers, carriers, social networks, manufacturers or partners.

When you click on an external link, you leave the Millapoignées site. We are not responsible for the privacy practices of these third-party sites. We invite you to consult their own privacy policies.

17. Commercial communications

If you have consented or where regulations permit, we may send you emails about our products, new arrivals, advice, commercial offers or content related to interior design, renovation, decoration and decorative hardware.

If you are already a customer, we may send you commercial communications relating to products or services similar to those you have already ordered, unless you object.

For other commercial communications requiring your consent, these will only be sent to you if you have accepted them.

In all cases, you may unsubscribe at any time by clicking on the unsubscribe link in our emails or by contacting us at the following address: contact@millapoignees.fr.

18. Minors' data

The Millapoignées site is primarily aimed at adults who are able to place orders.

We do not knowingly collect personal data relating to minors without the consent of their legal representative.

19. Modification of the privacy policy

We may modify this privacy policy to take account of legal, technical or commercial developments.

The applicable version is the one published on the site at the time of your visit. In the event of a significant change, we may inform you by any appropriate means.

20. Contact

For any questions regarding this privacy policy or the processing of your personal data, you may contact us:

SAS MILLA
13, avenue du Bois
94430 Chennevières-sur-Marne
France
E-mail: contact@millapoignees.fr