Privacy policy

Privacy Policy

This privacy policy aims to inform you about how we collect and process your personal data when you use our online store (website address).

Data Controller

The controller of your personal data is (company name, legal form, share capital, registered office, RCS, EU VAT number).
Contact: privacy@bigmamma.com

Data Collected

We collect and process, in particular:

  • Your identification data (first name, last name, address, phone number, email)

  • Your order and payment data (payment method, purchase history, billing and delivery address)

  • Your login and browsing data (cookies, IP addresses, logs)

  • Your communication preferences

Purposes and Legal Bases for Processing

We use your data to:

  • Manage your orders and deliveries (performance of the contract)

  • Manage your customer account and requests (performance of the contract)

  • Ensure site security and improve our services (legitimate interest)

  • Produce statistics and measure audience (legitimate interest / consent, as applicable)

  • Send you our marketing offers if you have agreed (consent)

Data Recipients

Your data is intended for MAMMA 16 SAS and its technical service providers involved in managing the site and orders (hosting provider, payment service provider, carriers, marketing solutions).
They are not shared with third parties for commercial purposes without your consent.

Transfers Outside the European Union

Some of our service providers may be located outside the European Union. In such cases, we ensure that these transfers are governed by appropriate safeguards (such as the European Commission’s standard contractual clauses, adherence to the Data Privacy Framework, etc.).

Data Retention Periods

Your data is retained only for the time strictly necessary for the purposes pursued:

  • Order data: for the duration of the contractual relationship, then archived for 5 to 10 years depending on legal obligations

  • Billing data: 10 years (accounting obligation)

  • Marketing prospect data: 3 years from the last contact

  • Cookies: maximum lifespan of 13 months, consent choices retained for 6 months

Your Rights

In accordance with the GDPR, you have the following rights:

  • Right of access, rectification, and erasure of your data

  • Right to object to and restrict processing

  • Right to data portability

  • Right to withdraw your consent at any time

  • Right to lodge a complaint with the CNIL (www.cnil.fr)

You may exercise your rights by writing to us at privacy@bigmamma.com.

Cookies

To learn more about the use of cookies and manage your preferences, you can consult our Cookie Policy and access the management tool “Manage my cookies,” available at any time at the bottom of the page.

Security

We implement appropriate technical and organizational measures to protect your data against any loss, alteration, unauthorized access, or disclosure.

Changes to this Policy

This policy may be updated in line with regulatory developments and our data processing practices. The date of the last update will always be indicated at the top.

Last updated: 22/09/2025.