Privacy Policy (GDPR) - PopMyPad
Last updated: March 17, 2026
At PopMyPad, we attach paramount importance to the security and confidentiality of your data. This policy details how we process your personal information in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).
1. Data Controller
The data controller is Julien Moraga (JMR-Service), an individual enterprise registered under SIRET 92911627500025, whose registered office is located at 2 rue des chaumes dorés, 27930 Guichainville, France.
For any questions: contact@popmypad.fr.
2. Data Collected and Purposes
We only collect data necessary for the performance of our services. The legal bases for our processing are the performance of the contract (orders) and legitimate interest (security and service improvement).
- Order management: First name, last name, shipping and billing address, email, and phone number for delivery tracking.
- Payment: Transactions are processed securely via Shopify Payments. We never have access to your full bank details.
- Technical data: IP address, device type, and browser for fraud prevention and site optimization.
3. Recipients and Processors
Your data is never resold. It is shared exclusively with our essential technical partners:
- Shopify: Our e-commerce platform (hosting, customer database, and Shopify Payments solution).
- PayPal: (If used by the customer) For securing alternative transactions.
- Carriers: Only your contact details (name, address, phone number) to ensure the delivery of your package.
- Google: For audience analysis and spam protection.
4. Consent Management (Consent Mode v2)
In accordance with Google and GDPR requirements, our site uses Shopify's native consent management system. This mechanism (Google Consent Mode v2) ensures that no non-essential cookies are placed on your device without your explicit consent via our cookie banner.
5. Data Retention Period
We apply the retention periods recommended by the CNIL (French Data Protection Authority):
- Customer data: Archived for 10 years after the end of the commercial relationship (accounting obligations).
- Prospect data: Deleted after 3 years of inactivity.
- Cookies: Lifespan limited to 13 months.
6. Your Rights
You have the rights to access, rectify, erase, restrict, and port your data. To exercise them, please contact us: contact@popmypad.fr. You can also contact the CNIL (cnil.fr) if necessary.
7. Security
As experts in infrastructure and security, we ensure that the PopMyPad site uses state-of-the-art SSL (HTTPS) encryption protocols provided by Shopify to protect your data during each session.
Contact Us
PopMyPad (JMR-Service)
2 rue des chaumes dorés, 27930 Guichainville
Email: contact@popmypad.fr
