Privacy policy

Last updated: 03/05/2026

The protection of your personal data is important to Millapoignées. We are committed to processing your data with care, transparency and in compliance with applicable regulations, in particular the General Data Protection Regulation, known as the GDPR.

This privacy policy aims to explain what data we collect, why we use it, how long we retain it, with whom it may be shared and what your rights are.

We do not sell or rent your personal data to third parties.

1. Data controller

The data controller for personal data collected on the site www.millapoignees.fr is:

SAS MILLA
13, avenue du Bois
94430 Chennevières-sur-Marne
France
E-mail: contact@millapoignees.fr

2. Personal data collected

When you use our site, create a customer account, place an order or contact our team, we may collect certain personal data necessary for the processing of your request.

This data may include in particular:

  • Your first and last name.
  • Your e-mail address.
  • Your telephone number, if you provide it.
  • Your billing address.
  • Your delivery address.
  • Information relating to your orders: products purchased, amount, date, delivery method, tracking, purchase history.
  • Exchanges with our customer service team: requests, complaints, photos or videos submitted in the context of an after-sales service request or a return.
  • Technical data related to your browsing: IP address, browser, device used, pages visited, cookies and trackers according to your choices.

Complete banking details, such as your card number, are never accessible to Millapoignées. Payments are processed by secure payment providers.

3. Why do we use your data?

We use your personal data only when necessary and justified. The main purposes are as follows:

  • Creating and managing your customer account.
  • Processing, preparing and dispatching your orders.
  • Managing invoicing and payments.
  • Tracking delivery.
  • Responding to your requests sent by e-mail, contact form or any other communication channel.
  • Processing returns, exchanges, complaints and after-sales service requests.
  • Managing statutory guarantees and any disputes.
  • Improving the performance of the site and the user experience.
  • Measuring site traffic and understanding visitor behaviour, in accordance with accepted cookies.
  • Sending you commercial communications, only where permitted by regulation or where you have given your consent.
  • Complying with our legal, accounting and tax obligations.

4. Legal bases for processing

Depending on the case, the processing of your data is based on one of the following legal bases:

  • Performance of the contract: for example, to process your order, arrange delivery or handle a return.
  • Compliance with a legal obligation: for example, to retain invoices or respond to a legal request.
  • Our legitimate interest: for example, to improve our site, secure our services, prevent fraud or handle certain customer requests.
  • Your consent: for example, for certain cookies, subscribing to a newsletter or certain marketing communications.

5. Secure payment

Payments made on our site are processed by recognised payment providers, including Lyra Collect and PayPal.

When you pay by credit card, the transaction is carried out on a secure page. Your banking details are encrypted and processed directly by the payment provider. Millapoignées never has access to your full credit card number.

Payment providers may process certain data necessary for the validation of the transaction, fraud prevention and compliance with their legal obligations. We invite you to consult their own privacy policies for more information.

6. Website hosting

The Millapoignées website operates on the PrestaShop e-commerce platform and is hosted by our technical provider.

The data required for the operation of the site, order management and customer relations is stored on secure servers. Reasonable technical and organisational measures are in place to protect data against loss, unauthorised access, modification or unauthorised disclosure.

7. Recipients of data

Your personal data may be shared only with the individuals and service providers who need it to deliver the requested service.

This may include in particular:

  • From our internal team, for order management, customer service and after-sales service.
  • From carriers, to ensure the delivery of your order.
  • From payment providers, to process transactions.
  • From our hosting provider and technical service providers, to ensure the proper functioning of the site.
  • From our management, analytics or communication tools, where their use is necessary.
  • From our accountant, advisors or competent authorities, where required by law.

Each provider only accesses the data necessary for their task and must process it in accordance with applicable regulations.

8. Transfer of data outside the European Union

Where possible, we give preference to providers located within the European Union or those ensuring a level of protection compliant with the GDPR.

However, certain tools or providers may involve a transfer of data outside the European Union. In such cases, we ensure that appropriate safeguards are in place, in accordance with applicable regulations.

9. Data retention period

We retain your personal data only for as long as is necessary for the purposes for which it was collected, and then in accordance with applicable legal, accounting and tax obligations.

By way of indication:

  • Data related to orders and invoices may be retained for the statutory period applicable to accounting and tax obligations.
  • Data related to your customer account is retained for as long as your account is active, unless a deletion request is made or a legal obligation requires otherwise.
  • Customer service exchanges may be retained for as long as is necessary to process the request, then archived if required as evidence.
  • Data related to cookies is retained for the periods indicated in the consent management tool.

10. Your rights

In accordance with applicable regulations, you have several rights regarding your personal data:

  • The right to access the data we hold about you.
  • The right to request the correction of inaccurate or incomplete data.
  • The right to request the erasure of your data, where this is possible.
  • The right to request the restriction of the processing of your data.
  • The right to object to certain processing activities.
  • The right to withdraw your consent at any time, where processing is based on your consent.
  • The right to data portability, where this right is applicable.

To exercise your rights, you can contact us at the following address: contact@millapoignees.fr.

For security reasons, we may ask you to provide proof of identity if this is necessary to process your request.

You also have the right to lodge a complaint with the CNIL if you believe your rights are not being respected.

11. Data security

We implement reasonable measures to protect your personal data against loss, misuse, unauthorised access, modification or unauthorised disclosure.

The site uses appropriate security protocols to protect data exchanges. Payments are processed by specialist providers via secure environments.

Despite our efforts, no method of electronic transmission or storage is 100% completely secure. However, we take all necessary steps to minimise risks and protect your information.

12. Cookies and trackers

Our site uses cookies and other trackers to ensure its proper functioning, improve your experience, measure traffic and, depending on your choices, offer certain personalised content or services.

A cookie is a small file saved on your device when you visit a website. Some cookies are necessary for the site to function, while others require your consent.

Strictly necessary cookies

These cookies are essential for the site to function. They enable, for example:

  • Retaining the products added to your basket.
  • Securing your session.
  • Enabling you to log in to your customer account.
  • Remembering your cookie preferences.

These cookies cannot be disabled via our consent management tool, as they are necessary for the proper functioning of the site.

Consent-based cookies

Other cookies may be used only if you accept them. These may include in particular audience measurement, personalisation, advertising or third-party service cookies.

You can accept, refuse or change your choices at any time via the cookie management tool available on the site.

13. Consent management with CookieFirst

To manage your consent to the use of cookies, we use a consent management platform: CookieFirst.

CookieFirst is a solution provided by:

Digital Data Solutions BV
Plantage Middenlaan 42a
1018 DH Amsterdam
Netherlands

When you access our site, a connection may be established with CookieFirst's servers in order to collect, record and document your choices regarding cookies.

CookieFirst may store a cookie in your browser to remember your preferences and to activate only the cookies to which you have consented.

The data processed in this context may include:

  • Your consent or refusal status.
  • The date and time of your choice.
  • An anonymised IP address.
  • Information about your browser.
  • Information about your device.
  • The URL of the page on which you saved or changed your preferences.
  • Your approximate location.
  • A unique consent identifier.

CookieFirst is used to fulfil our legal obligations regarding cookie consent. The legal basis for this processing is compliance with a legal obligation, in accordance with Article 6(1)(c) of the GDPR.

14. Data processing agreement with CookieFirst

We have entered into a data processing agreement with CookieFirst. This agreement governs the processing of data carried out on our behalf and ensures that data is processed in accordance with our instructions and in compliance with the GDPR.

15. Cookie settings in your browser

You can also configure your browser to accept, refuse or delete cookies. The steps vary depending on the browser you use.

You can generally manage cookies from the privacy settings of your browser:

  • Google Chrome: privacy and security settings.
  • Mozilla Firefox: privacy and security settings.
  • Safari: privacy settings.
  • Microsoft Edge: cookie settings and site permissions.

Please note: disabling certain cookies may prevent the site from functioning properly, including adding items to the basket, logging in to your customer account or completing an order.

16. Links to third-party websites

Our site may contain links to third-party websites, such as payment providers, carriers, social networks or partners.

When you click on an external link, you leave the Millapoignées site. We are not responsible for the privacy practices of these third-party sites. We invite you to consult their own privacy policies.

17. Commercial communications

If you have given your consent or where permitted by regulation, we may send you e-mails about our products, new arrivals, advice or commercial offers.

You can unsubscribe at any time by clicking the unsubscribe link in our e-mails or by contacting us at: contact@millapoignees.fr.

18. Minors' data

The Millapoignées website is primarily intended for adults who are capable of placing orders. We do not knowingly collect personal data relating to minors without the consent of their legal guardian.

19. Changes to the privacy policy

We may update this privacy policy to reflect legal, technical or commercial developments.

The applicable version is the one published on the site at the time of your visit. In the event of a significant change, we may inform you by any appropriate means.

20. Contact

For any questions regarding this privacy policy or the processing of your personal data, you can contact us:

SAS MILLA
13, avenue du Bois
94430 Chennevières-sur-Marne
France
E-mail: contact@millapoignees.fr