Last updated: July 18, 2026
This privacy policy is intended to inform you about how the company EDGE collects, uses, protects, and retains your personal data when you use the Maluttebio website.
EDGE attaches particular importance to respecting your privacy and undertakes to process your personal data in accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR), the French Data Protection Act (Loi Informatique et Libertés), and any applicable regulations.
1. Data controller
The personal data collected on the site is processed by:
EDGE
EURL (single-member limited liability company) with share capital of €4,918
8B rue Gutenberg
33450 Saint-Loubès
France
RCS Bordeaux: 848 590 675
SIRET: 848 590 675 00056
Intra-community VAT: FR53 848 590 675
For any questions regarding your personal data, you can contact us:
Email: sav@maluttebio.com
Phone: 07 80 94 19 60
2. Personal data collected
Depending on your use of the site, we may collect the following categories of data:
- First and last name;
- Postal address;
- Email address;
- Phone number;
- Order information;
- Purchase history;
- IP address;
- Browsing data;
- Marketing preferences;
- Messages sent to customer service;
- Reviews left on our products or services.
Required data is indicated at the time of collection. Failure to provide it may prevent us from processing your order or request.
3. Purposes of processing
Your personal data is used for the following purposes:
- Create and manage your customer account;
- Process and ship your orders;
- Track deliveries;
- Manage payments;
- Respond to your requests to customer service;
- Provide after-sales service;
- Combat fraud;
- Comply with our accounting and tax obligations;
- Send you information about your orders;
- Send you commercial offers by email and SMS when you have consented to this;
- Measure site traffic;
- Improve the user experience;
- Display personalized advertisements when you have accepted the relevant cookies;
- Collect your feedback after a purchase.
4. Legal bases for processing
In accordance with the GDPR, processing is based on one or more of the following legal bases:
- Performance of the contract (order management, payments, deliveries, after-sales service);
- Compliance with our legal obligations (invoicing, accounting, tax obligations);
- Your consent (newsletter, marketing SMS, advertising cookies);
- Our legitimate interest (site security, fraud prevention, service improvement, anonymized statistics, customer support).
5. Retention period
| Category | Duration |
|---|---|
| Customer account | Until deleted at your request. |
| Orders | Legal period required by accounting and tax obligations. |
| Invoices | 10 years in accordance with French regulations. |
| After-sales service requests | As long as necessary for processing, then archived in accordance with legal obligations. |
| Commercial prospecting | Until you withdraw your consent or for the period provided by applicable regulations. |
| Cookies | According to their nature and the periods set out in our consent management tool. |
6. Recipients of personal data
Your personal data is only shared with persons or organizations that need it as part of their duties.
Depending on the services used, your data may be transmitted to the following categories of recipients:
- Our authorized staff;
- Our payment service providers;
- Our carriers;
- Our IT service providers;
- Our marketing service providers;
- Our audience measurement providers;
- Administrative or judicial authorities where required by law.
We take care to select partners that offer sufficient guarantees regarding the protection of personal data.
7. Service providers and subcontractors
As part of our business, we work with the following service providers in particular:
Payment
- PayPal;
- Payplug.
These providers ensure the secure processing of payments. We never store your bank details.
Delivery
- La Poste;
- Chronopost;
- DPD.
To ensure delivery of your order, we only transmit the information necessary, such as your name, address, phone number where required, and your email address if the carrier offers delivery tracking.
Customer service
We use the Crisp solution to manage exchanges with our customer service. Information you provide via chat or support forms is processed solely to respond to your requests.
Marketing
We use Klaviyo to send informational emails and SMS as well as, where you have consented, commercial communications.
Customer reviews
After your purchase, certain information relating to your order may be shared with Société des Avis Garantis in order to invite you to leave a review of your shopping experience.
Audience measurement and advertising
Subject to your consent where required, we use in particular:
- Google Analytics;
- Google Ads;
- Microsoft Ads;
- Meta Pixel.
These tools allow us in particular to:
- measure site traffic;
- improve our services;
- assess the effectiveness of our advertising campaigns;
- offer you personalized advertising on various websites and social networks.
Consent management
We use Axeptio to collect and manage your consent regarding the use of cookies and similar technologies.
Site security
Google reCAPTCHA is used to protect our forms against fraudulent or automated use.
8. Cookies
Our site uses various types of cookies.
- Cookies strictly necessary for the site to function;
- Audience measurement cookies;
- Advertising cookies;
- Personalization cookies.
With the exception of cookies strictly necessary for the site's operation, these cookies are only placed after your consent via our Axeptio consent management platform.
You can change or withdraw your consent at any time from the cookie manager available on the site.
9. Personalized advertising
When you accept advertising cookies, certain browsing information may be used to offer you advertisements tailored to your interests on platforms such as Google, Facebook, Instagram, or Microsoft.
Refusing these cookies does not prevent you from using the site but may limit the personalization of the advertisements displayed.
10. Data transfers outside the European Union
Some of our service providers may process data outside the European Union, particularly in the United States.
Where such transfers take place, they are carried out in accordance with the GDPR and rely on mechanisms recognized by European regulations, in particular the European Commission's Standard Contractual Clauses or any other mechanism providing an adequate level of protection.
11. Data security
We implement appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of your personal data.
These measures are intended in particular to prevent any unauthorized access, disclosure, alteration, or accidental loss or destruction of your data.
Access to personal data is strictly limited to authorized personnel who need it to perform their duties.
12. Your rights
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access to your personal data;
- Right to rectification of inaccurate or incomplete data;
- Right to erasure ("right to be forgotten") where the legal conditions are met;
- Right to restriction of processing;
- Right to object to the processing of your data in certain cases;
- Right to data portability where processing is based on your consent or on a contract;
- Right to withdraw your consent at any time where this constitutes the legal basis for processing;
- Right to set guidelines regarding the fate of your data after your death, in accordance with French regulations.
The exercise of certain rights may be limited where the retention of certain data is required by law, particularly for accounting, tax, or fraud prevention purposes.
13. Exercising your rights
You may exercise your rights at any time by contacting us:
EDGE
8B rue Gutenberg
33450 Saint-Loubès
France
Email: sav@maluttebio.com
Phone: 07 80 94 19 60
To protect your personal data, we may ask you for proof of identity where this is necessary to process your request.
We undertake to respond within the timeframes provided for by applicable regulations.
14. Complaints to the CNIL
If you believe that your rights are not being respected or that the processing of your personal data does not comply with the regulations, you may file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the French data protection authority.
CNIL
3 Place de Fontenoy
TSA 80715
75334 PARIS CEDEX 07
You can also file your complaint directly on the CNIL's official website.
15. Changes to this policy
This privacy policy may be amended at any time to reflect legislative, regulatory, or technical developments, or changes to the services offered by Maluttebio.
The date of the last update appears at the top of this document. We invite you to check this page regularly to stay informed of any changes.