Privacy policy
Last updated: 19 October 2026
Nebuleusejewel processes personal data in connection with orders placed through and with enquiries sent to our contact channels. This policy explains what we collect, why, who receives it, and what you can ask us to do with it.
Who is responsible for your data
The data controller is Nebuleusejewel, 908 Rue du Centre, 59570 Mecquignies, France. For privacy matters, write to info@nebuleusejewel.my.
Order data
What we collect: name, delivery address, email address, phone number, and the items ordered.
Why: to prepare the parcel, hand it to the carrier, handle returns, and answer order-related questions.
Legal basis: performance of the contract between you and Nebuleusejewel.
Who receives it: the carrier delivering the parcel (Colissimo, Chronopost, or Colis Privé), the payment provider processing the payment (Visa and MasterCard through our payment gateway, and PayPal), and the hosting and email infrastructure that keeps the site and inbox running.
How long: for the period required by French accounting and tax obligations.
Payment card details are entered on the payment provider’s page, not on ours. We receive a confirmation that payment succeeded and a transaction reference, not your full card number.
Contact and enquiry data
What we collect: the message you send and any information you choose to include in it, including your order number if you provide one.
Why: to respond to your enquiry and keep a record if the same issue comes up again.
Legal basis: performance of the contract where the enquiry relates to an order, and our legitimate interest in responding to customer messages otherwise.
Who receives it: our email infrastructure provider.
How long: for as long as needed to resolve the enquiry and for a reasonable period afterwards.
Site technical data and cookies
What we collect: pages viewed, approximate location derived from IP, device type, and referral source.
Why: to understand how the site is used and to keep it working.
Legal basis: our legitimate interest in keeping the site functional and understanding aggregate usage, or consent where consent is the applicable legal basis.
Who receives it: our hosting and analytics infrastructure.
How long: according to the lifetime of the specific cookie or technical log.
Non-essential cookies, including any used for advertising or analytics that go beyond basic site operation, are set only with your consent where consent is required. We do not use advertising cookies for cross-context behavioural advertising unless you consent through the cookie banner.
International transfers
Some providers may process data outside the European Economic Area. Where that happens, the transfer relies on an adequacy decision or standard contractual clauses, depending on the provider.
Your rights
You can ask for access to the personal data we hold about you, correction of inaccurate data, erasure, restriction of processing, and portability of data you provided to us. You can object to processing based on legitimate interest. To exercise any of these rights, email info@nebuleusejewel.my and describe what you want. We may ask for information to confirm that the request relates to you.
If you believe your data has been handled unlawfully, you can lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the French data protection authority, or with the supervisory authority in your country of residence in the European Union.
California residents
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of personal information are collected and the right to request deletion, subject to legal exceptions. We do not sell personal information as that term is defined under the CCPA. To make a request, contact us at info@nebuleusejewel.my.