Last updated: 19 October 2026
This policy explains how we collect and use your personal data when you visit www.mildchaosclub.com or buy from us. It is based on the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
Elie Barrieu, entrepreneur individuel (EI), trading as Mild Chaos. Registered with the Trade and Companies Register (RCS) of Auch under number 983 117 490.
- Address: [BUSINESS ADDRESS]
- Privacy contact: contact@mildchaosclub.com
2. What data we collect and why
| Purpose | Data | Legal basis | How long we keep it |
|---|---|---|---|
| Processing and delivering your order, customer service, returns | Name, email, delivery/billing address, phone (optional, for the carrier), order details | Performance of the contract | 3 years after the order. Invoices and accounting records: 10 years (legal obligation) |
| Payment | Payment status and transaction ID (card details are handled by the payment provider only) | Performance of the contract | Same as above |
| Customer account (optional) | Login, password (encrypted), order history | Performance of the contract | Until you delete your account, or 3 years without activity |
| Newsletter and marketing emails | Email, first name | Your consent (you can unsubscribe in every email) | 3 years after your last interaction with us |
| Audience measurement and advertising (cookies) | See section 6 | Your consent | 13 months maximum |
| Fraud prevention and site security | IP address, technical logs | Our legitimate interest | 12 months maximum |
We do not sell your data.
3. Who receives your data
Your data is shared only with the service providers we need to run the store, and only to the extent necessary:
- Hosting: Hostinger International Ltd. (Cyprus, EU).
- Order production and shipping: Printful (production facilities in the EU; group companies in the United States), Yoycol (production in China), and the carriers that deliver your parcel.
- Payment: Stripe Payments Europe Ltd. (Ireland) and PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg).
- Analytics and advertising, only if you accept cookies: Meta (Facebook/Instagram pixel), TikTok (TikTok pixel).
- Authorities, where the law requires it.
4. Transfers outside the EU
- United States (Printful, Meta). Transfers rely on the EU-US Data Privacy Framework, where the provider is certified, or on the European Commission’s Standard Contractual Clauses.
- China (Yoycol, for orders of products made by Yoycol). Your name, delivery address, phone number and order content are transferred so the item can be produced and shipped. China does not have an EU adequacy decision, so this transfer relies on Standard Contractual Clauses or, where those are not available, on the transfer being necessary to perform your order (Article 49(1)(b) GDPR).
You can ask us for more information about these safeguards.
5. Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing (including direct marketing, at any time), to data portability, and to withdraw your consent at any time. You can also give instructions on what happens to your data after your death.
To exercise any of these rights, email contact@mildchaosclub.com. We will reply within one month.
If you think your rights have not been respected, you can lodge a complaint with the French data protection authority (CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr) or the data protection authority of your country.
6. Cookies
Strictly necessary cookies, such as your cart, login, security and the record of your cookie choice, do not need your consent.
All other cookies are placed only if you accept them in our cookie banner. You can accept or refuse them with one click, or choose by category:
| Category | Purpose | Examples |
|---|---|---|
| Necessary | Cart, checkout, login, security, remembering your cookie choice | WooCommerce, WordPress |
| Audience measurement | Understanding how visitors use the site | Statistics tools |
| Advertising | Measuring the results of our ads and showing you relevant ads | Meta Pixel, TikTok Pixel |
Your choice is kept for 6 months. Cookies themselves are kept for 13 months maximum. You can change your choice at any time with the “Cookie settings” link at the bottom of every page, or in your browser settings.
7. Security
We use HTTPS encryption and access controls, and our providers are bound by confidentiality and security obligations.
8. Changes
We may update this policy. The date at the top always shows the latest version.