Privacy policy

Who processes your data

[PLACEHOLDER — raison sociale], [PLACEHOLDER — adresse], Tunisie. Contact: hello@melopillow.com. [PLACEHOLDER]

What we collect

• Your contact details: name, phone/WhatsApp, email, country
• Your creation details: format, style, composition, decoration, name or initial
• The photograph you send us
• Any notes you add and the occasion you select

Why

To create your design, make your pillow, deliver it and answer your questions. The legal basis is performance of our contract with you.

Marketing use of your finished pillow rests on a separate, optional consent that you can withdraw at any time with no effect on your order.

Your photographs — our commitments

• Stored in a private, encrypted space with no public access and no directory listing
• Accessed only by the atelier staff working on your order
• We use no facial recognition, biometric identification or face-matching tools of any kind
• We never sell or transfer them to third parties
• They are never published without your explicit, separate permission

Retention

• Original photographs: deleted 90 days after delivery
• Final artwork files: kept 24 months to allow a reorder, then deleted
• Images you have approved for communication: kept until you withdraw permission
• Order records: kept per our accounting obligations

Photographs of minors

When ordering, you certify that you hold the rights to the photograph and, if it shows a minor, that you are the parent or legal guardian.

We apply heightened caution to images of children and exclude them from all communication without explicit written permission from the parent or guardian.

Sub-processors

• Cloudflare — hosting, file storage, security
• [PLACEHOLDER] — transactional email delivery
• Meta (WhatsApp) — if you choose to write to us on WhatsApp
• [PLACEHOLDER] — tools used in the artistic treatment, where applicable

Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of any consent. Write to hello@melopillow.com — we respond within 30 days.

Cookies

We use cookieless analytics with no personal identifier. A single technical cookie remembers your currency choice. No advertising trackers are set at this time.

Jurisdictions

The GDPR applies to customers resident in the European Union. Tunisian Law No. 2004-63 on the protection of personal data applies to our operations in Tunisia. [PLACEHOLDER — confirm whether an Article 27 EU representative is required, and INPDP formalities.]