隐私政策

Last updated: 12 November 2026

This policy describes how Ibuyora handles personal data collected through , by email, and by phone. It is written to meet the transparency requirements of the General Data Protection Regulation (GDPR) and, where applicable, the California Consumer Privacy Act as amended (CCPA).

Who controls your data

Ibuyora is the controller of the personal data described here. Postal address: 6 Chemin des Canebiers, 06800 Cagnes-sur-Mer, France. Privacy enquiries: info@ibuyora.my.

Data we collect

Contact and identity data — name, email address, telephone number, delivery address, billing address.

Order data — items ordered, order value, order date, order number, and the status of any return.

Payment data — the payment method used and transaction reference numbers. Full card numbers are not stored on our servers; card data is handled by our payment providers.

Correspondence — emails, contact form submissions, and notes taken during telephone calls about an order or return.

Technical data — IP address, browser and device type, referring page, and pages viewed, collected through cookies and similar technologies as described below.

We do not seek out special category data such as health information or data revealing racial or ethnic origin, and we ask that you do not include such information in messages to us.

Purposes and legal bases

Purpose    Legal basis
Taking payment, dispatching orders, handling returns    Performance of a contract
Order confirmations, dispatch notices, refund updates    Performance of a contract
Answering enquiries by email, phone, or contact form    Legitimate interest in supporting customers
Keeping invoices and accounting records    Legal obligation
Monitoring the website for fraud and abuse    Legitimate interest
Understanding aggregate site usage    Consent, where analytics cookies are used
Sending marketing emails    Consent, withdrawable at any time
Who receives data

Payment providers (Visa, MasterCard, PayPal) receive the data needed to process a transaction. Carriers (Colissimo, Chronopost, Colis Privé) receive the name, delivery address, and telephone number needed to deliver a parcel. Hosting, email, and IT support providers process data on our instructions under contracts that require them to protect it. We do not sell personal data and we do not pass it to advertising networks or data brokers.

Retention

Order and transaction records are retained for 10 years to meet French accounting and tax requirements. Account data is kept while the account is active, and for 3 years after the last interaction where there is no account. Correspondence about a return is kept for the return period and any related warranty period. Data that is no longer needed for these purposes is deleted or anonymised.

Your rights under the GDPR

You may request access to your data, correction of inaccurate data, deletion, restriction of processing, portability of data you provided, and you may object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting processing already carried out. Email info@ibuyora.my to exercise any of these rights. We respond within one month, and we may ask for information to confirm your identity before acting. If our response does not resolve the matter, you may complain to the CNIL (Commission Nationale de l'Informatique et des Libertés), the French supervisory authority.

California residents

Where the CCPA applies, California residents may request to know what personal information is collected, request deletion, and request correction. We do not sell personal information and we do not share it for cross-context behavioural advertising as those terms are defined under the CCPA. To make a request, email info@ibuyora.my with "California privacy request" in the subject line. We verify requests against the details held on the relevant order or account.

Cookies

Strictly necessary cookies keep the cart and session working and cannot be switched off through the site. Analytics cookies are set only where you have accepted them through the cookie banner, and you can change that choice at any time through the cookie settings link in the footer. Blocking necessary cookies may prevent checkout from working.

International transfers

Our hosting and email providers may process data outside the European Economic Area. Where that happens, transfers rely on the European Commission's Standard Contractual Clauses or on an adequacy decision covering the destination country.

Changes

If the way we handle personal data changes, this page is updated and the date at the top is revised. Where a change is significant, we will also notify you by email or by a notice on the site.