Privacy Policy
This translation is provided for convenience. The French version prevails.
Your privacy matters to us. This policy explains what data AlphA AquilA collects, why, and how you can exercise your rights under the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679).
1. Data Controller
Sébastien Gaudy — AlphA AquilA
2 bois de Brussin — 03130 Bert — Allier, France
Email: contact@naturalness-dream.com
2. Data Collected
| Data | Purpose | Retention period |
|---|---|---|
| Surname, first name, email | Orders | 3 years after last purchase |
| Delivery address | Shipping orders | Duration of the order + 1 year |
| Order history | Tracking, customer service, legal obligations | 10 years (accounting obligation) |
| Browsing data (cart) | User experience | Session / local storage |
3. Legal Basis for Processing
- Performance of a contract: processing orders and deliveries
- Legitimate interest: improving the service, security
- Legal obligation: retention of accounting records
4. Recipients of Data
Your data may be shared with:
- Gelato (production and delivery) — to process your order
- Stripe (secure payment) — payment data only
- O2Switch (hosting of the website and data) — servers located in France
No data is sold to third parties for commercial purposes.
5. Your Rights (GDPR)
Under the GDPR, you have the following rights:
- Right of access: obtain a copy of your data
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your data (subject to legal obligations)
- Right to data portability: receive your data in a structured format
- Right to object: object to certain processing
- Right to restriction: restrict processing in certain cases
To exercise these rights: contact@naturalness-dream.com. We reply within 30 days.
You may also lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés, the French data protection authority).
6. Cookies & Local Storage
This website does not use tracking or advertising cookies. Local storage (localStorage) is used for:
- Your shopping cart (stored locally, not sent to our servers)
- Your language preference (FR/EN)
- Your login session (JWT token)
You can delete this data at any time in your browser settings.
7. Security
Data is stored on secure servers. Communications are encrypted (HTTPS/TLS). Payments are processed by Stripe (PCI-DSS certified) without passing through our servers.
8. Changes
This policy may be updated. Any substantial change will be shown on this page.
Last updated: October 2026