Privacy Policy

At Munchy ("Munchy", "we", "us"), your data deserves as much care as our gummies ⚡. This policy explains exactly what information we collect, why we collect it, who we share it with, how long we keep it, and your rights.

Title

Dernière mise à jour : Septembre 2025

1. WHAT DOES THIS COVER?

This policy applies to all our activities: website, e-shop, customer support, newsletter, contests, social media, and B2B/wholesale services. Specific terms may apply to certain operations (e.g., contests).

2. USEFUL DEFINITIONS

Personal Data: Any information that can identify a person (e.g., name, email, address).
Service Provider / Processor: A partner who processes data on our behalf.
EEA: European Economic Area.

3. WHAT DATA DO WE COLLECT?

Data you provide to us:

Account/Order: Name, surname, email, phone number, billing & shipping addresses, order content.
Payment: Card data is processed exclusively by our payment providers (e.g., Shopify Payments/Stripe/PayPal); we do not have access to it.
Support / Forms / Surveys: Messages, reviews, attachments.
B2B / Recruiting / Partnerships: Professional contact info, CV/portfolio, social handles.

Data collected automatically (not directly identifying):

Device & Navigation: Browser type, OS, truncated/anonymized IP where possible, page views, time spent, traffic source.
Cookies & Trackers: To make the site work, measure audience, personalize the experience, and (if you accept) show ads.

You can manage your preferences at any time via "Cookie Settings".

4. WHY DO WE USE IT? (PURPOSES & LEGAL BASES)

We process your data only for clear goals:

To sell and deliver our products.
Creating your account, managing the cart, processing payment (via providers), shipping, managing returns and warranties.
Legal basis: Performance of the contract.

To answer and assist you.
Customer support (emails, forms, social media), after-sales follow-up, review management.
Legal basis: Legitimate interest and/or performance of the contract depending on context.

To send newsletters and offers.
Only if you subscribe. You can unsubscribe at any time via the link at the bottom of our emails.
Legal basis: Consent (can be withdrawn at any time).

To improve Munchy and our site.
Audience measurement, user feedback, A/B testing, product and experience improvement.
Legal basis: Legitimate interest; non-essential cookies are only activated with your consent.

To ensure security and prevent fraud.
Account protection, abuse detection, payment security.
Legal basis: Legitimate interest.

To provide personalized advertising (if agreed).
Remarketing and lookalike audiences via our partners (e.g., Meta, Google). You can modify your choices at any time in Cookie Settings.
Legal basis: Consent.

To meet our legal obligations.
Invoicing, accounting, responding to authority requests when required by law.
Legal basis: Legal obligation.

👉 We do not sell your data. You can withdraw your consent at any time and object to processing based on legitimate interest (especially marketing) by writing to us at hello@munchy.com.

5. WHO DO WE SHARE IT WITH?

Only with trusted service providers acting under our instructions:

E-commerce: Shopify (store platform & hosting)
Payment: Shopify Payments / Stripe / PayPal
Logistics: Carriers, 3PL (Third-Party Logistics)
Emailing & CRM: (e.g., Klaviyo or equivalent)
Analytics & Ads: Google Analytics, Google Ads, Meta (Facebook/Instagram)

These providers must protect your data and not use it for their own marketing.
We may also share info if required by law or in the event of a corporate operation (merger/acquisition).

6. INTERNATIONAL TRANSFERS

Some service providers may process data outside the EEA (e.g., USA, Canada, UK). In this case, we use appropriate safeguards (e.g., European Commission Standard Contractual Clauses) and additional measures where necessary.

7. DATA RETENTION (HOW LONG WE KEEP IT)

Account & Orders: Up to 10 years (accounting and tax requirements).
Support / Messages: Up to 3 years after the last interaction.
Prospects / Newsletter: As long as you are subscribed or 3 years without interaction.
Cookies: Duration depends on type; audience measurement cookies ≤ 13 months (and associated data ≤ 25 months).

8. YOUR RIGHTS

You can: access, correct, delete (if applicable), limit, object (especially to marketing), withdraw consent at any time, and request data portability.
To exercise your rights: hello@munchy.com (Subject: Personal Data).
You also have the right to lodge a complaint with a competent authority (e.g., CNIL in France).

9. COMMUNICATIONS & MARKETING COOKIES

Marketing Emails: Unsubscribe link at the bottom of every email.
Personalized Ads: Activated only if you accept the corresponding cookies. Modify your choices via Cookie Settings.

10. SECURITY

We apply organizational, technical, and physical measures (encryption in transit, access control, backups). No system is perfect: stay vigilant and contact us in case of suspected fraudulent use.

11. THIRD-PARTY SITES & SERVICES

Our site may contain links or widgets to third-party services (social networks, payment methods, carriers). Their privacy policy applies; please remember to check it.

12. UPDATES

This policy may evolve. The online version is the valid one and indicates the last updated date. If a modification is significant, we will notify you by email or banner.