Privacy Policy
Privacy Policy
1. Data Controller
Moskera SAS
73 allée Kleber, 34000 Montpellier, France
SIRET : 941 329 302 00017
Email : contact@moskera.com
Tel. : +33 4 11 93 43 11
Data Protection Officer (DPO) :
For any query relating to the protection of your personal data, you may contact our DPO directly at : dpo@moskera.com
2. Personal data collected
2.1 Data collected directly
When you browse and purchase on our website, we collect the following data :
- Identification data : first name, last name, postal address, email address, phone number
- Order data : items ordered, amount, purchase history, tracking number, payment method, last 4 digits of your payment card
- Customer account data : login credentials, account creation and deletion dates, recorded consents
- Communication data : correspondence with customer support, content of emails and messages
2.2 Automatically collected data
When you visit our website, we automatically collect :
- Technical data : IP address, browser type, operating system, time zone
- Browsing data : pages visited, session duration, links clicked, traffic source
- Cookies and trackers : see Section 5 below
These collections occur via cookies, activity log files and web beacons (conversion pixels).
3. Legal bases and purposes of processing
In accordance with the GDPR, every processing activity involving your data relies on an explicit legal basis :
| Purpose of processing | Data concerned | Legal basis (GDPR) | Retention period |
|---|---|---|---|
| Order management, payments and delivery | Name, email, address, phone, order details, tracking number, payment method, last 4 card digits | Contract performance (Art. 6(1)(b)) | 10 years (accounting records) – 13 months (banking data) |
| Customer account creation and management | Name, email, address, phone, account creation/deletion date, consents | Contract performance (Art. 6(1)(b)) | Until account deletion + 1 year |
| Customer service and complaint handling | Name, email, phone, communication history | Legitimate interest (Art. 6(1)(f)) | 3 years from last contact |
| Fraud prevention and security | IP address, order data, browsing data | Legitimate interest (Art. 6(1)(f)) | 13 months |
| Website improvement and audience analytics | IP address, browsing data (anonymised) | Legitimate interest (Art. 6(1)(f)) or Consent (Art. 6(1)(a)) depending on tool | 13 months |
| Direct marketing and newsletter | Name, email, phone, order history, consent | Consent (Art. 6(1)(a)) or Legitimate interest (Art. 6(1)(f)) for existing customers | 39 months from last purchase or consent |
| Targeted advertising and remarketing | IP address, browsing data, advertising identifiers, consent | Consent (Art. 6(1)(a)) | 13 months |
| Customer reviews and ratings management | Name, email, associated order, review content | Legitimate interest (Art. 6(1)(f)) or Consent (Art. 6(1)(a)) | 5 years |
| Legal and accounting obligations | Billing and order data | Legal obligation (Art. 6(1)(c)) | 10 years (commercial law) |
4. Recipients and data processors
Moskera SAS never sells your personal data. Your data may be shared with the following categories of recipients, solely within the scope of their respective duties :
4.1 E-commerce platform and hosting
| Provider | Role | Country |
|---|---|---|
| Shopify Inc. Floor 1-2 Victoria Building, Dublin 4, Ireland |
Online store hosting, order management and payment processing | 🇮🇪 EU / 🇺🇸 USA (Standard Contractual Clauses) |
4.2 Payment service providers
| Provider | Role | Country |
|---|---|---|
| Stripe Inc. 354 Oyster Point Blvd, South San Francisco, CA, USA |
Secure card payment processing | 🇺🇸 USA (Standard Contractual Clauses) |
| PayPal Holdings Inc. 2211 North First Street, San Jose, CA, USA |
Secure PayPal payment processing | 🇺🇸 USA (Standard Contractual Clauses) |
| Klarna Bank AB Sveavägen 46, 111 34 Stockholm, Sweden |
Buy now pay later and consumer financing | 🇸🇪 EU |
4.3 Logistics and delivery
| Provider | Role | Country |
|---|---|---|
| Australian Postal Corporation (Australia Post) 111 Bourke Street, Melbourne VIC 3000, Australia ABN: 28 864 970 579 – Government Business Enterprise |
Parcel and letter delivery across Australia | 🇦🇺 Australia |
| Aramex New Zealand 118 Hugo Johnston Drive, Auckland 1010, New Zealand (formerly Fastway Couriers NZ – part of Aramex PJSC group) |
Courier and parcel delivery across New Zealand | 🇳🇿 New Zealand |
| Evri Limited Capitol House, 1 Capitol Close, Morley, Leeds, West Yorkshire, LS27 0WH, United Kingdom Companies House number: 03900782 |
Parcel delivery across the United Kingdom | 🇬🇧 United Kingdom |
| United States Postal Service (USPS) 475 L'Enfant Plaza SW, Washington, DC 20260-0004, USA Independent establishment of the US federal government |
Mail and parcel delivery across the United States | 🇺🇸 United States |
| Mondial Relay SASU 1 Avenue de l'Horizon, 59650 Villeneuve-d'Ascq, France |
Delivery to parcel collection points | 🇫🇷 France / 🇪🇺 EU |
| Chronopost International SAS 1 avenue de la République, 94150 Rungis – RCS Créteil 389 979 351 |
Express delivery in France and Europe | 🇫🇷 France / 🇪🇺 EU |
| UPS France SAS 3 avenue Gallieni, 93170 Bagnolet – RCS Bobigny 334 160 987 |
Domestic and international express delivery | 🇫🇷 France / 🇪🇺 EU |
| Shippingbo SAS 3 Av. de l'Europe Bâtiment A, 31400 Toulouse – RCS Toulouse 992 657 783 |
Consolidation and transmission of Shopify orders to our logistics partner, shipment management | 🇫🇷 France |
4.4 Marketing and communications
| Provider | Role | Country |
|---|---|---|
| Klaviyo Inc. 125 Summer St, Boston, MA, USA |
Email marketing, newsletters, automation | 🇺🇸 USA (Standard Contractual Clauses) |
| Kanal SAS 229 Rue Saint-Honoré, 75001 Paris – RCS Paris 929 099 034 |
Customer communication via WhatsApp Business, order notifications, automated customer support | 🇫🇷 France |
4.5 Customer reviews
| Provider | Role | Country |
|---|---|---|
| Judge.me Ltd 1-3 Worship Street, London, EC2A 2AB, United Kingdom |
Collection and display of verified customer reviews | 🇬🇧 UK (adequacy decision) |
| Trustpilot A/S Pilestræde 58, 1112 Copenhagen, Denmark |
Independent customer review platform | 🇩🇰 EU |
4.6 Advertising and analytics
| Provider | Role | Country |
|---|---|---|
| Google France SARL 8 rue de Londres, 75009 Paris – RCS Paris 443 061 841 |
Google Analytics (statistics), Google Ads and YouTube Ads (advertising and remarketing) | 🇫🇷 EU / 🇺🇸 USA (Standard Contractual Clauses) |
| Meta Platforms Ireland Ltd 4 Grand Canal Square, Dublin 2, Ireland |
Facebook Ads, Instagram Ads (advertising and remarketing) | 🇮🇪 EU / 🇺🇸 USA (Standard Contractual Clauses) |
| Pinterest Europe Ltd 2nd Floor, Palmerston House, Dublin 2, Ireland |
Pinterest Ads (advertising and remarketing) | 🇮🇪 EU / 🇺🇸 USA (Standard Contractual Clauses) |
| Microsoft Ireland Operations Ltd One Microsoft Place, Dublin, Ireland |
Microsoft Ads / Bing Ads (advertising and remarketing) | 🇮🇪 EU / 🇺🇸 USA (Standard Contractual Clauses) |
| TikTok Technology Ltd 10 Earlsfort Terrace, Dublin 2, Ireland |
TikTok Ads (advertising and remarketing) | 🇮🇪 EU / 🇸🇬 Singapore (Standard Contractual Clauses) |
| Snap Inc. 2772 Donald Douglas Loop North, Santa Monica, CA, USA |
Snapchat Ads (advertising and remarketing) | 🇺🇸 USA (Standard Contractual Clauses) |
5. International data transfers
For further information on the safeguards in place, please contact our DPO at : dpo@moskera.com
6. Cookies and trackers
Our website uses cookies and similar technologies. Only strictly necessary cookies are placed without your consent. All other cookies require your prior agreement.
6.1 Strictly necessary cookies (consent-exempt)
| Name / Provider | Purpose | Duration |
|---|---|---|
| Shopify (session, cart) | Session maintenance, shopping cart management, payment security | Session / 1 year |
| Cloudflare | Security, protection against attacks, routing to the correct server | Up to 13 months |
| Stripe (fraud prevention) | Fraud detection during payment, transaction security | Session |
6.2 Analytics cookies (require consent)
| Name / Provider | Purpose | Duration |
|---|---|---|
| Google Analytics | Traffic statistics, user behaviour analysis, website improvement | Up to 13 months |
| Shopify Analytics | Internal store statistics, conversion rate, purchase behaviour | Up to 13 months |
6.3 Advertising and remarketing cookies (require consent)
| Name / Provider | Purpose | Duration |
|---|---|---|
| Meta Pixel (Facebook / Instagram) | Conversion measurement, custom audience creation, targeted advertising | Up to 13 months |
| Google Ads / YouTube Ads | Conversion measurement, remarketing, targeted advertising on Google and YouTube | Up to 13 months |
| Pinterest Tag | Conversion measurement, targeted advertising on Pinterest | Up to 13 months |
| Microsoft / Bing Ads UET | Conversion measurement, targeted advertising on Bing and Microsoft Network | Up to 13 months |
| TikTok Pixel | Conversion measurement, targeted advertising on TikTok | Up to 13 months |
| Snapchat Pixel | Conversion measurement, targeted advertising on Snapchat | Up to 13 months |
6.4 Functional third-party cookies (require consent)
| Name / Provider | Purpose | Duration |
|---|---|---|
| Klaviyo | Email personalisation, abandoned cart recovery, marketing segmentation | Up to 13 months |
| Trustpilot | Display of review widget, collection of customer ratings | Up to 13 months |
| Judge.me | Display of verified product reviews, collection of ratings | Up to 13 months |
| PayPal | Display of payment button, PayPal checkout experience | Session / Up to 13 months |
| Klarna | Display of buy now pay later options, Klarna checkout experience | Session / Up to 13 months |
You can manage your cookie preferences at any time via the cookie banner on our website. You may also opt out of targeted advertising through :
- 🇬🇧 UK / 🇪🇺 EU : www.youronlinechoices.com/uk/
- 🇺🇸 USA : optout.aboutads.info (DAA) or optout.networkadvertising.org (NAI)
- 🇦🇺 Australia / 🇳🇿 New Zealand : www.youronlinechoices.com
- Google : adssettings.google.com
- Meta : www.facebook.com/adpreferences
7. Your rights
Under the GDPR and applicable local data protection laws, you have the following rights regarding your personal data :
- Right of access (Art. 15) : to obtain a copy of the personal data we hold about you
- Right to rectification (Art. 16) : to request correction of inaccurate or incomplete data
- Right to erasure / "right to be forgotten" (Art. 17) : to request deletion of your data in the cases provided for by the GDPR
- Right to restriction of processing (Art. 18) : to request temporary suspension of processing of your data
- Right to data portability (Art. 20) : to receive your data in a structured, machine-readable format
- Right to object (Art. 21) : to object to processing of your data based on our legitimate interest or for direct marketing purposes
- Right to withdraw consent (Art. 7(3)) : at any time for consent-based processing, without affecting the lawfulness of prior processing
- Right not to be subject to automated decision-making (Art. 22) : not to be subject to a decision based solely on automated processing
Send your request by email to dpo@moskera.com indicating your identity. We commit to responding within one month of receiving your request (extendable by a further two months in cases of complex requests, with prior notification).
8. Right to lodge a complaint with a supervisory authority
If you believe that our processing of your personal data constitutes a breach of applicable law, you have the right to lodge a complaint with the competent data protection authority in your country of residence :
Office of the Australian Information Commissioner (OAIC) – responsible for the Privacy Act 1988 (Cth) :
www.oaic.gov.au – GPO Box 5218, Sydney NSW 2001
Australian consumers also retain rights under the Australian Consumer Law (Competition and Consumer Act 2010, Schedule 2).
Office of the Privacy Commissioner – responsible for the Privacy Act 2020 :
www.privacy.org.nz – PO Box 10094, The Terrace, Wellington 6143
Information Commissioner's Office (ICO) – responsible for the UK GDPR and Data Protection Act 2018 :
ico.org.uk – Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Note : Following Brexit, the UK applies its own version of the GDPR (UK GDPR) which mirrors EU GDPR provisions in substance.
Federal Trade Commission (FTC) – consumer data protection and privacy enforcement :
www.ftc.gov – 600 Pennsylvania Avenue NW, Washington, DC 20580
California residents may have additional rights under the California Consumer Privacy Act (CCPA/CPRA). For any such request, please contact : dpo@moskera.com
Commission Nationale de l'Informatique et des Libertés (CNIL) :
www.cnil.fr/fr/plaintes
We encourage you to contact us first so we may attempt to resolve any issue directly and amicably.
9. Data security
Moskera SAS implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration, including :
- Encryption of data in transit (HTTPS / TLS protocol)
- Access to data restricted to authorised personnel only
- Use of PCI-DSS certified payment providers (Stripe, PayPal)
- Secure hosting via Shopify Inc. with infrastructure compliant with international standards
10. Children's data
Our website is intended solely for adults aged 18 and over. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at dpo@moskera.com so we can arrange for its deletion.
11. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, applicable legislation or our services. The date of the most recent update is shown at the bottom of this page. In the event of a material change, we will notify you by email or via an information banner on our website.
12. Contact us
For any questions relating to this Privacy Policy or to exercise your rights, please contact us :
- By email (Data Protection Officer) : dpo@moskera.com
- By email (customer service) : contact@moskera.com
- By post : Moskera SAS – 73 allée Kleber, 34000 Montpellier, France
Last updated : Monday, 23 March 2026