Policy on Confidentiality

SOYIA Care SAS
Email: info@soyiacare.com

As the controller of your personal data, SOYIA Care SAS is committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) — EU Regulation 2016/679 — and applicable national legislation.

We collect the following data:

When placing an order:

• First name and last name
• Email address
• Shipping and billing address
• Phone number
• Payment data (processed directly by our secure providers — we never store your bank details)

When browsing:

• IP address
• Browser and device type
• Pages visited and duration of visit
• Traffic source (advertising, organic search, social media)

When subscribing to the newsletter:

• Email address
• Communication preferences

Your personal data is only transmitted to service providers strictly necessary for our activity:

Shopify Inc.
E-commerce platform — store hosting and order management
Privacy Policy: shopify.com/legal/privacy

PayPal Holdings Inc.
Online payment processing
Privacy Policy: paypal.com/privacy

Stripe Inc.
Credit card payment processing
Privacy Policy: stripe.com/privacy

Meta Platforms Inc. (Facebook & Instagram)
Targeted advertising and performance measurement
Privacy Policy: facebook.com/privacy/policy

TikTok Ltd.
Targeted advertising and performance measurement
Privacy Policy: tiktok.com/legal/privacy-policy

Google LLC(Google Ads & Google Analytics)
Targeted advertising, audience measurement, and traffic analysis
Privacy Policy: policies.google.com/privacy

In accordance with the GDPR, you have the following rights:

Right of access — Obtain a copy of your personal data

Right to rectification — Correct inaccurate or incomplete data

Right to erasure — Request the deletion of your data ("right to be forgotten")

Right to restriction of processing — Restrict the processing of your data in certain cases

EXERCISING YOUR RIGHTS

To exercise your rights, please contact us:

By email: info@soyia.com
Subject of the message: "GDPR Request — [your right]"

We commit to responding within a maximum of one month from the receipt of your request. This period may be extended by two additional months in the case of a complex or numerous request.

You may be asked for identification to verify your identity before your request is processed.

Right to data portability — Receive your data in a structured and readable format

Right to object — Object to the processing of your data for commercial prospecting purposes

Right to withdraw your consent — At any time, without compromising processing carried out before withdrawal

Right to define post-mortem directives — Define the fate of your data after your death

We never sell your data. We only share it with:

• Shopify: hosting and transactions.
• Carriers: order delivery.
• Payment providers: secure processing.
• Analytics tools: Google Analytics (with consent).

We only store your data for as long as necessary:

• Order data: 10 years (tax obligations).
• Customer service: 3 years after account closure.
• Marketing: until consent is withdrawn.

In accordance with the GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data.
• Withdraw your consent at any time.
• File a complaint with the CNIL.

To exercise your rights, please contact us at contact@mamarque.com.

We implement appropriate security measures: SSL/TLS encryption, payment processing via PCI-DSS certified providers, limited data access for authorized personnel.

MINORS

Our site is intended for an adult audience. We do not knowingly collect personal data from individuals under 16 years of age. If you believe a minor has provided us with personal data.

We reserve the right to modify this privacy policy at any time. In the event of a substantial change, we will notify you by email or via a notification on our site. The last updated date is indicated at the top of this document.