Privacy policy

Last updated: 30 October 2026

This page explains what personal data Morbellaio handles, why we handle it, and how long we keep it. It applies to morbellaio and all orders, enquiries, and returns processed through it.

Data Controller. Morbellaio, 144 Avenue Pierre Sémard, Avignon, 84000, France, is the controller of your data. For privacy requests, email info@morbellaio.my with "Privacy" in the subject line.

What we collect and why. When you order, we receive your name, delivery and billing address, email, phone number (if provided), and your order details. We use this to process the order, hand it to the carrier, manage returns, and keep accounting records. The legal basis is the performance of our contract.

We collect technical data (IP address, browser type, pages viewed) to keep the site secure and understand how it is used. The legal basis is our legitimate interest in running the shop. Emails or messages sent via the Contact form are kept alongside our replies to resolve your enquiry.

Marketing emails are sent only with your consent. You can withdraw consent at any time via the unsubscribe link or by emailing us.

Sharing. We share delivery data with the carrier and payment data with our payment processor. We do not sell personal data or share it with ad networks for cross-site tracking. Service providers acting for us are bound to use data only for the service they provide to Morbellaio.

Retention. Order and invoice records are kept for 10 years to comply with French accounting laws. Contact enquiries are kept for up to 3 years from the last exchange, unless needed longer for a dispute. Marketing consent records are kept until consent is withdrawn and deleted within 3 years of the last interaction.

Your Rights. If you are in the EU, you have the right to access, correct, or request the erasure of your data (where no overriding legal obligation requires us to keep it). You can also object to processing based on legitimate interests. Email info@morbellaio.my to exercise these rights. We reply within one month; for complex requests, we may extend this period and will inform you.

California Residents. California residents have the right to know what personal information is collected, request deletion, and opt out of the sale or sharing of personal information. Morbellaio does not sell personal information or share it for cross-context behavioural advertising. Email info@morbellaio.my with "California Privacy Request" in the subject line. We verify requests using the email linked to your order.

Cookies. Essential cookies keep the site working (like your shopping basket). Analytics and marketing cookies are set only with your consent via the cookie banner. Blocking essential cookies may stop checkout from completing.

International Transfers. Our shop and systems run from France. Where a service provider processes data outside the EEA, appropriate GDPR-recognised safeguards are used.