PRIVACY POLICY
Last updated: 24 October 2026
1. Who we are
This website, https://samathejewelmaker.com, is operated under the brand S.A.M.A. Paris by Sonia-Marta Dobien, entrepreneur individuel (micro-entreprise), 6 Place du 19 Mars 1962, 93100 Montreuil, France. For privacy requests, email contact@samathejewelmaker.com.
2. Personal data we collect
Depending on how you use the website, we may collect your email address and newsletter subscription preferences; your name and message when you contact us; and, when online sales are enabled, your billing and shipping details, order information and related customer-service correspondence. Our hosting and security systems may process technical information such as IP address, device information and server logs. We do not intentionally request sensitive personal data.
3. Why we use your information and our legal bases
We process newsletter subscriptions and promotional emails on the basis of your consent (Article 6(1)(a) GDPR). We process inquiries and orders to respond to your requests or perform a contract, or take steps before entering into one (Article 6(1)(b)). We retain invoices and records when legally required (Article 6(1)(c)). We may process necessary technical and security information to protect our website and services on the basis of legitimate interests (Article 6(1)(f)), subject to your rights.
4. S.A.M.A. Early Access and MailerLite
When you sign up for S.A.M.A. Early Access, we use your email address to send launch announcements, brand updates and, if you remain subscribed, marketing messages about our products. We use MailerLite to manage subscriptions and send these emails. Where double opt-in is enabled, we ask you to confirm your email address. You can withdraw consent at any time using the unsubscribe link in our emails or by contacting us. Withdrawing consent does not affect processing carried out before withdrawal.
5. Online shop and payments
When our WooCommerce store begins accepting orders, we will use the information necessary to process purchases, deliver products, handle returns and provide customer support. Stripe is our planned payment service provider and may process payment and fraud-prevention information under its own applicable privacy terms. We do not need to receive your full payment-card number to administer an order. Payment features are being configured; this section describes the intended store service and will be checked before sales go live.
6. Service providers and recipients
We may share only the information necessary with service providers that help operate the website and business, such as website hosting, MailerLite, WooCommerce-related services, Stripe when enabled, and delivery partners when orders are fulfilled. We may also disclose information where required by law. We do not sell your personal data.
7. International data transfers
Some service providers may process personal data outside the European Economic Area. Where this occurs, we assess the applicable transfer mechanism, such as an adequacy decision or appropriate safeguards including standard contractual clauses, as required by the GDPR. Provider-specific arrangements must be verified against our actual service contracts.
8. Retention
Newsletter data is generally retained until you unsubscribe or withdraw consent, subject to limited records needed to demonstrate compliance. Contact requests are kept only as long as needed to respond and manage follow-up. Order, accounting and tax records are kept for the periods required by applicable French law. Technical logs and cookie lifetimes depend on their purpose and the services actually configured. We review retention periods and delete or anonymise information when it is no longer needed.
9. Cookies
Our website may use cookies or similar technologies necessary for its operation, including shopping-cart and security functions. Optional analytics or advertising technologies, if enabled, require the applicable consent mechanism before they are used. You should be able to refuse or withdraw consent for non-essential cookies as easily as you give it. A detailed cookie list and consent controls will be verified against the live website configuration before launch.
10. Your rights
Subject to applicable conditions, you have rights to access, rectify or erase your personal data, restrict or object to processing, receive data portability where applicable, and withdraw consent at any time. You may also give instructions concerning your data after death under applicable French law. To exercise your rights, contact contact@samathejewelmaker.com. You may lodge a complaint with the French supervisory authority, the CNIL.
11. Security
We take reasonable organisational and technical measures appropriate to the risks of processing. No online system can guarantee absolute security.
12. Changes to this policy
We may update this policy as our website and services evolve. The latest version will be published here with an updated date. For any questions, contact contact@samathejewelmaker.com.