Privacy policy

This Privacy Policy describes how Blaspo, operated by Monsouhait Samba, collects, uses and protects your personal data when you use blaspo1990.com.

0. Data controller

Monsouhait Samba, sole trader operating Blaspo
2 rue de l’Église, 95130 Franconville, France
SIRET: 883 827 727 00016
Email: contact@blaspo1990.com
Telephone: +33 6 26 49 92 92

1. Collection of personal data

We collect certain personal data when you use our website, particularly when you place an order, create an account or contact us.

1.1 Data provided directly by users

  • First and last name
  • Postal address
  • Email address
  • Telephone number
  • Order information
  • Messages sent through the contact form or by email

Payment information is processed securely by our payment providers and is never stored directly by Blaspo.

1.2 Automatically collected data

  • IP address
  • Device and browser type
  • Pages viewed
  • Browsing and website usage data
  • Technical and statistical cookies

1.3 Data collected through third-party services

We use third-party services to analyse and improve user experience, including Google Analytics (traffic analysis), Google Ads (advertising and performance) and integrated Shopify tools.

2. Use of personal data

Collected data is used to:

  • Process and ship your orders
  • Manage your customer account
  • Respond to your enquiries (after-sales service, returns, contact)
  • Improve website operation and performance
  • Prevent fraud and secure transactions
  • Comply with our legal obligations

3. Legal bases for processing

Depending on the purpose, we process your data on the following legal bases:

  • Performance of a contract: processing, payment, preparation, delivery, returns and after-sales service;
  • Legal obligation: invoice retention, tax and accounting obligations;
  • Legitimate interest: website security, fraud prevention, service improvement and defence of our rights;
  • Consent: non-essential cookies, personalised advertising, audience measurement where consent is required, marketing emails and SMS.

You may withdraw consent at any time without affecting processing carried out before its withdrawal.

4. Data sharing with third parties

Your personal data may be shared only when necessary with:

  • Shopify (website hosting and infrastructure)
  • Shopify Payments, PayPal and other payment providers offered at checkout
  • Google Analytics / Google Ads (analysis and advertising)
  • Carriers (La Poste, Mondial Relay, Relais Colis, etc., solely for delivery)
  • Suppliers and partners preparing or shipping an order, only when sharing is necessary to fulfil it
  • Messaging, email or SMS providers when customers use or consent to these services
  • Administrative or judicial authorities where required by law

We never sell your personal data.

5. International data transfers

Some providers, particularly Shopify and Google, may process or host data outside the European Economic Area. Where this occurs, we ensure that the transfer relies on a mechanism recognised by the GDPR, including an adequacy decision or standard contractual clauses approved by the European Commission, together with appropriate safeguards.

6. Data security

  • Secure SSL / HTTPS connection
  • Secure Shopify hosting (PCI-DSS standards)
  • Data access limited to authorised persons
  • Integrated fraud prevention tools

No method is 100% secure, but we make every effort to ensure a high level of protection.

7. Data retention periods

We retain data only for the periods needed for the purposes described in this policy and to meet our legal obligations:

  • Orders, invoices and accounting records: 10 years from the end of the relevant financial year;
  • Customer account: while the account is used, then up to 3 years after the last activity;
  • Customer service enquiries: up to 3 years after the enquiry is closed;
  • Marketing: until consent is withdrawn or 3 years after the last active contact;
  • Fraud prevention and security: for the period necessary to handle the incident;
  • Cookie choices: 6 months before a new choice may be requested;
  • Cookies and audience measurement: within the periods allowed by applicable regulations.

After these periods, data is deleted, anonymised or archived where a legal obligation requires it.

8. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights:

  • Access to your data
  • Rectification
  • Objection
  • Erasure (right to be forgotten)
  • Restriction of processing
  • Data portability
  • Withdrawal of consent at any time

Exercising your rights

To exercise your rights, contact contact@blaspo1990.com.

We generally acknowledge your request within two business days and respond as soon as possible, no later than one month. This period may be extended by two months if the request is complex or numerous requests are received. In this case, you will be informed within the first month.

You also have the right to lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), particularly at cnil.fr.

9. Use of cookies

We use cookies to ensure website operation, remember your cart, analyse visits through Google Analytics, improve user experience and display personalised advertising through Google Ads.

On your first visit, the cookie banner lets you accept or refuse non-essential cookies. You can withdraw or change your choice at any time through the “Your privacy choices” link in the footer. You can also manage certain cookies in your browser settings.

Google Analytics, Google Ads and personalised advertising are activated only after obtaining your consent where legally required.

10. Changes to this policy

This policy may be updated at any time to remain compliant with current legislation. The online version is authoritative.

11. Contact

contact@blaspo1990.com
+33 6 26 49 92 92
Blaspo – operated by Monsouhait Samba
2 rue de l’Église, 95130 Franconville, France