
Madagascar vanilla, in its purest form
1) Data collected
- Account/order: identity, addresses, email, telephone.
- Transaction: references, amounts (card data is processed by our payment processors, not stored by us).
- Navigation: cookies/tracers (page views, UTM, device), analytics.
- Support/Marketing: messages, preferences, subscriptions.
2) Purposes & legal bases
-
Execution of the contract : processing & delivery of orders, customer service.
- Legitimate interest : site improvement, fraud prevention, statistics.
- Legal obligation : invoicing & accounting.
- Consent : newsletters and marketing cookies.
3) Recipients / subcontractors
Hosting, payment service providers, logistics/transport, emailing/SMS, analytics. Contractual commitment to confidentiality and security.
4) International transfers
Possible transfers outside the EU/UK. We use standard contractual clauses (where applicable) and appropriate measures. UAE PDPL compliance for UAE; compliance with local obligations (GDPR/UK GDPR) for EU/UK customers

5) Conservation
- Customer files/orders: duration of the relationship + legal obligations.
- Marketing: until consent is withdrawn.
- Cookies: depending on the purpose (see consent banner).
6) Rights of individuals
Access, rectification, erasure, limitation, portability, opposition, withdrawal of consent. Complaint possible with the local authority (e.g. CNIL/ICO). Contact: privacy@vanillya.co .

7) Cookies
Management via the consent banner (granularity setting: essential/analytics/marketing). List and durations in the Cookies Policy (or dedicated section).
8) Security
Reasonable technical and organizational measures (encryption, access control). Incident notification in accordance with applicable laws.
9) Modifications
Possible updates; the date at the top indicates the current version.