Privacy Policy

Privacy Policy

Data Controller: Kharim Jouini, Auto-entrepreneur, SIRET 50770876600070, Route de l’Anse Marcel, 97150 Saint-Martin (FWI) — contact@mysxm.store

1. Data Collected

We collect: identity and contact details (name, email, shipping address), order data, and browsing data (IP, cookies with consent). We do not collect data from minors under 16.

2. Purpose and Legal Basis

Order processing (contract performance) — Customer service — Legal compliance — Newsletter (consent, withdrawable at any time).

3. Sub-processors

Stripe (payments — DPA) · Brevo (emails — DPA) · Hostinger (hosting — DPA) · Supabase (CRM — DPA) · Partner print workshops (fulfilment — your address is transmitted for production and delivery; the named list of these processors and their privacy policies is available on request at contact@mysxm.store).

4. Retention

Order data: 10 years (legal obligation). Marketing data: 3 years from last contact. Browsing data: 13 months.

5. Your Rights

You have the right to access, rectify, erase, restrict, port, and object to the processing of your data. Contact: contact@mysxm.store. You may also lodge a complaint with the CNIL (France) or your local supervisory authority.

6. Cookies

Essential cookies (cart, session) operate without consent. Analytics and marketing cookies require your consent, which you can withdraw at any time via the banner or your browser settings.

Last updated: April 2026