Privacy policy

This policy describes how TheraDawn collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR) and applicable data protection law.

1. Data controller

2. Data collected

Depending on how you interact with the site, we may collect the following data :

• Order data: first name, last name, postal address, phone, email
• Payment data: processed exclusively by Stripe. We do not store any banking information
• Browsing data: IP address, pages visited, session duration, browser type (collected via analytics cookies, only with your consent)
• Contact data: the content of the emails or messages you send us

3. Purposes of processing

Your data is processed in order to :

• Process and deliver your orders
• Contact you as part of customer service (tracking, claims, returns)
• Improve the site and user experience (anonymized statistics, with consent)
• Send you commercial communications (only with your explicit consent)
• Comply with our legal and accounting obligations

4. Legal basis

• Performance of the contract: order processing, delivery, after-sales service
• Consent: analytics cookies, marketing, commercial emailing
• Legal obligation: invoicing, accounting
• Legitimate interest: site security, fraud prevention

5. Recipients of your data

Your data is only shared with the strictly necessary providers :

• Stripe (secure payment)
• Carrier (parcel delivery)
• Hostinger (website hosting)
• Meta (Facebook/Instagram): only if you have accepted marketing cookies, for advertising retargeting

Your data is never sold to third parties.

6. Retention period

• Order data: 10 years (legal accounting obligation)
• Analytics cookies: 13 months maximum
• Commercial emails: 3 years after the last interaction
• Contact data (forms, emails): 3 years from the last exchange

7. Cookies

Our site uses three categories of cookies :

• Strictly necessary cookies: shopping cart, session preferences, consent management (no consent required)
• Analytics cookies: anonymized audience measurement (with consent)
• Marketing cookies: Meta Pixel for advertising retargeting (with consent)

You can change your preferences at any time via the cookie banner in the footer.

8. Your rights

Under the GDPR, you have the following rights over your data :

• Right of access: to know what data we hold about you
• Right to rectification: to correct any inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to portability: to retrieve your data in a reusable format
• Right to object to processing
• Right to withdraw your consent at any time

9. How to exercise your rights

To exercise any of these rights, send us an email at contact@theradawn.com specifying your request and attaching a copy of an ID document (so we can verify your identity).

We undertake to respond within a maximum of 30 days of receiving your request.

10. Security

We implement technical and organizational measures to protect your data against any unauthorized access, loss, alteration or disclosure. Payments are encrypted via SSL/TLS and processed by Stripe (PCI DSS certified).

11. Complaint to the supervisory authority

If you believe that your rights are not being respected, you can lodge a complaint with the French data protection authority :

12. Changes

This policy may change over time. Any substantial change will be notified to you by email (if we have your address) or via a banner on the site.