Skip to content
Nyllao3D

Privacy policy

This page explains what personal data is collected on nyllao.com, why, how long it is kept, and how to exercise your rights.

Who processes your data

The data controller is Nyllao3D par JR Web Concept, 24 avenue Joannès Masset, 69009 Lyon, France, reachable at hello@nyllao.com.

What is collected, and why

To process your order: first and last name, email address, delivery and billing postal address, telephone number. This data is necessary to perform the contract of sale. Without it, the order cannot go through.

To keep the accounts: the details of your orders and your invoices. This retention meets a legal obligation.

To answer your messages: the information you enter in the contact form. It is used only to reply to you.

For the newsletter, if you subscribe: your email address, on the basis of your consent, which you may withdraw at any time using the unsubscribe link in every message.

To run the site: a session cookie, necessary for the cart and for signing in to your account, and a cookie that remembers your choice about trackers. Neither is used for any advertising tracking.

What is not done

Your data is never sold, rented or exchanged, and no automated decision is taken about you. No advertising profiling is carried out beyond the trackers described below, under "Cookies", which are only set with your consent.

Who else has access

Your data is passed only to the providers strictly necessary to fulfil your order:

  • the site host, JR Web Concept, which stores the data;
  • the carrier handling your parcel, which receives your name, address and telephone number;
  • the payment provider, when you pay by card. The seller never stores your bank details;
  • the email sending service, for order confirmations and shipping notices.

These providers act only on the seller's instructions and may not use your data for any other purpose.

Where applicable, and only with your consent, the providers of the trackers described under "Cookies" are added to this list. Those act on their own behalf, which is why your permission is asked before anything is set.

For how long

  • Order data and invoices: ten years from the sale, the statutory retention period for accounting records.
  • Customer account: until it is deleted, then erased within a reasonable time, excluding accounting data.
  • Contact messages: three years from the last exchange.
  • Newsletter address: until consent is withdrawn, then three years at most.
  • Cart not turned into an order: thirty days.

Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, and to data portability. You may also give instructions on what happens to your data after your death.

These rights are exercised at hello@nyllao.com. You will receive a reply within one month.

The right to erasure does not extend to data the law requires us to keep, in particular invoices.

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the French data protection authority, cnil.fr.

Cookies

The site uses one session cookie, strictly necessary to its operation: it keeps your cart and your session. It does not require your consent and disappears when the browser is closed.

A second cookie, just as necessary, remembers your choice about trackers, including your refusal. Without it, you would be asked again on every page. It is kept for six months.

No advertising or third-party analytics cookie is set on this site.

Changes to this page

This policy may change. The version that applies is the one published on this page on the day of your visit.