Privacy Policy

MBKitup ("we", "our", "us") operates the website mbkitup.com. This Privacy Policy describes how we collect, use, store, and protect your personal information when you visit our website, place an order, or interact with our services.

By using our website, you consent to the practices described in this policy. If you do not agree with these terms, please do not use our site.

We collect the following types of data:

• Identity data: name, email address, phone number, and postal address when you create an account or place an order.
• Payment data: transactions are processed by Stripe and PayPal. We never store your credit card numbers on our servers.
• Browsing data: IP address, browser type, pages visited, and visit duration, collected through cookies and analytics tools.
• Communication data: content of emails and messages you send us through our contact form.
• Account data: order history, wishlist, size preferences, and notification settings.

We use your personal data to:

• Process and ship your orders
• Manage your customer account and preferences
• Communicate with you about your orders, returns, and customer service requests
• Send you newsletters and promotional offers (with your consent)
• Improve our website, products, and services through data analysis
• Prevent fraud and ensure the security of our services
• Comply with our legal and regulatory obligations

We never sell your personal data. We only share your information with the following service providers, necessary for operating our store:

• Stripe & PayPal: secure payment processing
• Cloudinary: product image hosting
• Resend: transactional emails (order confirmations, shipping notifications)
• Vercel: website hosting
• Neon: database (secure data storage)
• Shipping carriers: name and delivery address for shipping your orders

These providers are bound by confidentiality agreements and are only authorised to use your data in connection with the services they provide to us.

Our website uses the following cookies:

• Essential cookies: required for the website to function (session, cart, language and currency preferences). These cookies cannot be disabled.
• Analytics cookies: help us understand how visitors use our website to improve the user experience. These cookies require your consent.

You can manage your cookie preferences at any time through the consent banner or your browser settings.

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: obtain a copy of the personal data we hold about you
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your personal data
• Right to restriction: restrict the processing of your data in certain circumstances
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing of your data for direct marketing purposes
• Right to withdraw consent: withdraw your consent at any time where processing is based on consent

To exercise these rights, contact us at contact@mbkitup.com. We will respond to your request within 30 days. You also have the right to lodge a complaint with the CNIL (French Data Protection Authority) or your local supervisory authority.

We retain your personal data only for as long as necessary for the purposes described in this policy:

• Account data: retained as long as your account is active. You may request account deletion at any time.
• Order data: retained for 10 years in accordance with French accounting and tax obligations.
• Browsing data: retained for a maximum of 13 months in accordance with CNIL recommendations.
• Newsletter data: retained until you unsubscribe.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• SSL/TLS encryption for all communications
• Passwords hashed with modern encryption algorithms
• Restricted access to personal data (only authorised personnel)
• Payments processed by PCI-DSS certified providers (Stripe and PayPal)
• Regular backups and secure infrastructure