Last updated: October 28, 2026
At Mitoufli, we take care of your personal data. This policy explains what data we process when you visit our online store (the "Site"), place an order, track your package, or write to us, why we use it, and what your rights are, in accordance with applicable data protection laws, including the GDPR for European residents and the CCPA for California residents.
1. Data controller
-
Controller: Entreprise Mannai, which operates the Mitoufli brand
-
Contact: from our Contact page
2. What data we process
-
Contact and delivery data: first and last name, postal address, billing address, email, and phone number.
-
Order data: products purchased, amounts, date, shipping status, and tracking number.
-
Payment data: it is processed directly by our payment providers. Mitoufli does not keep your full card number.
-
Communications: the messages you send us by email or through the contact form.
-
Browsing data: IP address, device and browser type, pages viewed, and data collected by cookies, depending on your choices.
3. Why we use it
-
To manage your order (payment, preparation, shipping, tracking, returns, and customer service): this is necessary to perform the sales contract.
-
To meet our legal obligations (invoicing, accounting, warranties).
-
To prevent fraud, keep the Site secure, and improve it: this is our legitimate interest.
-
To send you our news by email, if you sign up: with your consent, which you can withdraw at any time using the unsubscribe link in every email.
-
To measure our audience and show you personalized ads through non-essential cookies: with your consent, which you manage in the cookie banner and on the Your privacy choices page.
4. Who we share your data with
We only share your data with the providers needed to deliver the service, and only for that purpose:
- our e-commerce platform, Shopify;
- payment providers;
- the providers who prepare your order and the carriers who deliver it;
- the package tracking service 17TRACK, which receives the tracking number you enter on our Track my order page, and the apps we use for post-purchase offers;
- advertising platforms (for example Meta), only if you have accepted the corresponding cookies;
- the authorities, when the law requires it.
We do not sell your personal data.
5. International data transfers
Some of these recipients are located outside the United States, in particular in Canada and in China, and Mitoufli itself processes your data from France, in the European Union. These transfers rely on contractual safeguards or on their necessity to fulfill your order. You can ask us for more information from our Contact page.
6. How long we keep it
- Order data and invoices: for as long as the law requires, up to 10 years.
- Customer service data: until your request is handled, then for the applicable limitation periods.
- Newsletter data: until you unsubscribe.
- Cookies: for the period shown in the cookie banner, 13 months at most.
7. Your rights
You can at any time ask to access, correct, or delete your personal data, object to its use for marketing, and withdraw your consent, by writing to us from our Contact page. We reply within one month.
If you live in the EU and believe your data has not been handled correctly, you can file a complaint with your data protection authority, such as the CNIL (www.cnil.fr).
8. Security
We implement reasonable technical and organizational measures to protect your data. Payment takes place on an encrypted page.
9. Minors
The Site is not intended for people under 18, and we do not knowingly collect their data.
10. Changes to this policy
We may update this policy. The date of the last update is shown at the top of this page.
