Privacy Policy

Last updated: 30 July 2026

mistikmountain (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you visit our website, papettebr an account, make a purchase, or otherwise interact with our ecommerce services.

1. Data We Collect

We may collect the following categories of personal information:

• Identity and contact information: name, email address, telephone number, billing address, shipping address, and account details.
• Order information: products purchased, order history, delivery preferences, returns, refunds, and customer service communications.
• Payment information: payment method, billing details, transaction identifiers, and payment status. Payments are processed by Stripe. We do not directly store complete credit or debit card numbers, card security codes, or other full payment credentials.
• Technical information: IP address, browser type, device information, operating system, referring pages, and website activity.
• Marketing information: communication preferences and interactions with promotional emails, where permitted by law.
• Information you provide: messages, reviews, support requests, and other information submitted through our website.

2. How We Use Your Data

We use personal information to:

• Process payments, fulfill orders, arrange shipping, and manage returns or refunds.
• papettebr and administer customer accounts.
• Communicate about purchases, deliveries, account activity, and customer support requests.
• Prevent fraud, unauthorized transactions, abuse, and security incidents.
• Maintain, analyze, and improve our website, products, and services.
• Comply with tax, accounting, consumer protection, anti-fraud, and other legal obligations.
• Send marketing communications where you have consented or where otherwise permitted by law. You may unsubscribe at any time.

Where applicable, we process personal information based on the performance of a contract, compliance with legal obligations, our legitimate business interests, or your consent.

3. Payments and Stripe

We use Stripe to securely process payments. When you submit payment information, it is transmitted directly to Stripe and processed in accordance with Stripe’s terms and privacy practices. Stripe may collect payment details, transaction information, device information, and identifying information for payment processing, fraud prevention, regulatory compliance, and related services.

We may receive limited information from Stripe, such as your name, billing details, payment status, card brand, card expiration date, and the last four digits of your card. We do not receive or store your complete card number or card security code.

For more information, please review the Stripe Privacy Policy.

4. Sharing of Personal Information

We may share personal information only as necessary with:

• Stripe and other providers involved in payment processing, fraud detection, and transaction security.
• Shipping carriers, fulfillment providers, and delivery partners.
• Website hosting, analytics, email, customer support, and technology service providers.
• Professional advisers, auditors, insurers, and legal or regulatory authorities when required.
• A purchaser or successor in connection with a merger, acquisition, reorganization, or sale of business assets.

We do not sell personal information for monetary consideration. Service providers may use personal information only to perform services for us or as otherwise permitted by law.

5. Data Protection and Retention

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. These measures may include encrypted connections, access controls, secure service providers, monitoring, and restricted access to personal information.

No online system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us if you suspect unauthorized account activity.

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, complete transactions, resolve disputes, enforce agreements, prevent fraud, and comply with legal, tax, and accounting requirements. Retention periods may vary depending on the type of information and applicable law.

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate our website, remember preferences, maintain shopping carts, enable secure checkout, analyze website performance, and, where permitted, support marketing activities.

• Essential cookies: required for website functionality, security, account access, checkout, and payment processing.
• Preference cookies: remember settings and choices.
• Analytics cookies: help us understand website traffic and improve performance.
• Marketing cookies: may be used to measure campaigns or provide relevant advertising, subject to applicable consent requirements.

You can manage non-essential cookies through our cookie controls, where available, or through your browser settings. Blocking essential cookies may prevent parts of the website, including checkout, from functioning correctly.

7. International Data Transfers

Our service providers, including Stripe, may process personal information in countries other than the country where you live. Where required, appropriate safeguards are used for international transfers, such as contractual protections or other legally recognized transfer mechanisms.

8. Your Privacy Rights

Depending on your location, you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information, subject to legal exceptions.
• Request restriction of or object to certain processing.
• Withdraw consent where processing is based on consent.
• Request a portable copy of certain personal information.
• Opt out of marketing communications.
• Submit a complaint to your local data protection authority.

To protect your information, we may need to verify your identity before responding to a request. We will not unlawfully discriminate against you for exercising your privacy rights.

9. Children’s Privacy

Our website is not directed to children under the age required to consent to online data processing in their jurisdiction. We do not knowingly collect personal information from children without appropriate parental or guardian authorization. If you believe a child has provided us with personal information, please contact us so that we can take appropriate action.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes to our practices, services, or legal obligations. The revised version will be posted on this website with an updated “Last updated” date.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your personal information is handled, please contact mistikmountain at [email protected], by telephone at +33 4 55 79 10 08, or by post at Mistik Mountain SAS, 65 Rue de la Montagne, 69005 Lyon, France.