Privacy policy
1. Data Controller
The data controller for personal data collected through the Site is:
Softlinenliving
4 Avenue Millet, 44000 Nantes, France
Email: info@softlinenliving.my
Phone: +33 2 40 48 99 99
2. Data We Collect
We collect the following categories of personal data:
-
Identity and contact data: name, billing address, delivery address, email address, phone number
-
Transaction data: payment method, order details, purchase history, order value
-
Technical data: IP address, browser type and version, device information, operating system
-
Usage data: pages visited, time spent on the Site, referring URLs (collected via cookies)
-
Communication data: emails you send us, customer service records
We do not collect any special category data (such as health, racial, or biometric data).
3. Purposes and Legal Basis of Processing
| Purpose | Legal Basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Sending order confirmations and shipping notifications | Performance of a contract |
| Customer service and dispute resolution | Performance of a contract / legitimate interest |
| Payment verification and fraud prevention | Legitimate interest / legal obligation |
| Tax and accounting record-keeping | Legal obligation |
| Website analytics and improvement | Consent (where required) / legitimate interest |
| Marketing communications | Explicit consent |
4. Data Retention
-
Order and transaction data: retained for 10 years from the end of the financial year in which the order was placed, in accordance with French commercial and tax law.
-
Customer account data: retained for 3 years from the last activity or contact.
-
Marketing consent records: retained until you withdraw consent, plus 3 years for proof purposes.
-
Cookie data: as specified in our Cookie Declaration.
-
Customer service records: retained for 3 years from the date of the last exchange.
5. Data Recipients
Your personal data may be shared with:
-
Payment processors for transaction processing
-
Delivery carriers for order fulfilment
-
IT service providers (hosting, analytics, email) operating under data processing agreements
-
Legal and accounting professionals where required by law
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
6. Your Rights
Under the GDPR and the French Data Protection Act (Loi Informatique et Libertés), you have the following rights:
-
Right of access: to obtain a copy of the personal data we hold about you
-
Right to rectification: to correct inaccurate or incomplete data
-
Right to erasure: to request deletion of your data, subject to legal retention obligations
-
Right to restriction: to limit how we process your data
-
Right to object: to object to processing based on legitimate interest
-
Right to data portability: to receive your data in a structured, machine-readable format
-
Right to withdraw consent: at any time, without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, contact us at info@softlinenliving.my. We will respond within one month. If you believe your rights have not been respected, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.
7. Cookies
The Site uses cookies and similar technologies. Essential cookies are necessary for the Site to function and cannot be disabled. Non-essential cookies (analytics, marketing) are only placed with your consent, which you may give or refuse via the cookie banner on your first visit. You can change or withdraw your consent at any time via the cookie banner or your browser settings. For a full list of cookies used, please see our Cookie Declaration.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include SSL encryption, access controls, and regular security reviews.
9. International Transfers
We do not transfer your personal data outside the European Economic Area (EEA) except where necessary for payment processing or IT services, in which case we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The version published on the Site at the time of your visit is the applicable version. Material changes will be notified by email where required.