Legal notice

Shopvault (Merchelyz)
Last updated: 01/12/2025

1. Introduction
MERCHELYZ, operator of the Shopvault website, places utmost importance on the protection of personal data and the privacy of its users, customers, and partners.
This privacy policy aims to inform, in full transparency, how personal data is collected, used, protected, and stored in accordance with applicable regulations, including:
  • General Data Protection Regulation (GDPR – EU 2016/679)
  • French Data Protection Act (“Informatique et Libertés”)
  • California Consumer Privacy Act (CCPA / CPRA)
  • International principles for data protection

2. Data Controller
The data controller is:
MERCHELYZ
SASU with a share capital of €1,000
RCS Paris: 991 429 978
Registered office:
60 Rue François 1er, 75008 Paris, France
📧 Email: contact@merchelyz.com
📞 Telephone: +33 (0)6 51 70 17 67

3. Personal Data Collected
3.1 Data provided directly by the user
  • First and last name
  • Email address
  • Phone number
  • Billing and delivery addresses
  • Order information
  • Messages submitted via contact forms
3.2 Data collected automatically
  • IP address
  • Browser and device type
  • Navigation data (pages visited, duration, interactions)
  • Cookies and similar technologies
3.3 Payment data
Payments are processed by secure providers (e.g., Shopify Payments, Stripe, PayPal).
No banking data is stored by Merchelyz.

4. Purpose of Processing
Personal data is collected for the following purposes:
  • Order and delivery management
  • Payment and invoicing
  • Customer service and support
  • Marketing communications (with consent)
  • Improving user experience
  • Security and fraud prevention
  • Compliance with legal and accounting obligations

5. Legal Basis for Processing (GDPR)
Processing is based on:
  • Performance of a contract (order, delivery)
  • User consent (newsletter, cookies)
  • Legal obligation (invoicing, accounting)
  • Legitimate interest (security, service improvement)

6. Cookies & Similar Technologies
The website uses cookies to:
  • Ensure proper functioning of the site
  • Analyse traffic and performance
  • Personalise the user experience
Users may at any time:
  • Accept
  • Refuse
  • Configure cookies via their browser or the cookie banner

7. Data Recipients
Personal data may be shared only with:
  • Technical service providers (hosting, payment, logistics)
  • Partners strictly necessary for the provision of services
  • Administrative or judicial authorities, if required by law
No data is sold or transferred to third parties.

8. International Data Transfers
Some data may be processed outside the European Union (e.g., Shopify hosting – Canada / USA).
In such cases, Merchelyz ensures that:
  • Standard contractual clauses (SCC) are in place
  • Or the country provides an adequate level of protection recognised by the European Commission

9. Data Retention
Data is retained:
  • For as long as necessary to fulfil the processing purposes
  • In accordance with legal obligations (invoicing, accounting)
Indicative retention periods:
  • Customer data: up to 10 years (legal requirements)
  • Marketing data: 3 years after last contact
  • Cookies: depending on type (maximum 13 months)

10. Data Security
Merchelyz implements appropriate technical and organisational measures to ensure:
  • Confidentiality
  • Integrity
  • Availability of data
The website uses security protocols conforming to international standards (HTTPS, secure servers, restricted access).

11. User Rights (GDPR – EU)
Under the GDPR, every user has the following rights:
  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to object
  • Right to data portability
📩 To exercise these rights: contact@merchelyz.com
A response will be provided within 30 days.

12. US Consumer Rights (CCPA / CPRA)
For California residents, you have the following rights:
  • Right to know which data is collected
  • Right to request deletion of data
  • Right to opt-out of the sale or sharing of data
  • Right to non-discrimination
📩 CCPA requests: contact@merchelyz.com
Merchelyz does not sell personal data.

13. Data of Minors
The Shopvault website is not intended for persons under 16 years of age.
No personal data from minors is knowingly collected.

14. Policy Changes
Merchelyz reserves the right to modify this policy at any time to ensure compliance with applicable laws.
The version in force is the one published on the website at the time of consultation.

15. Contact & Complaints
For any questions regarding data protection:
📧 contact@merchelyz.com
In case of dispute, users may also submit a complaint to the competent authority:
CNIL (France): https://www.cnil.fr