House

Privacy

Updated 15 September 2026

SIRET, registered office, host, contact email and mediator appear here once they are provided. No numbers are invented.

Payments: bank transfer. The shop never asks for your banking login.
App and media hosting: the vestiaire’s technical providers.
Order and account email: Resend. No advertising messages.
France shipping: the carrier receives name, address and phone.

Controller

The controller is MM Running, shop MM Running. Details are in the legal notice.

Data

Account: email, hashed password, name. Order: France address, phone, pieces, status, payment. Bag and theme. Short-lived security logs (IP, user agent). No card data on the shop.

Purposes

Contract: account, bag, payment, delivery, tracking. Legal duty: invoicing. Legitimate interest: security, fraud, stock. No ad profiling.

Retention

Bag: 14 days. Session: as in the cookie list. Orders and invoices: 10 years (accounting). Account: until you ask for erasure, except legal archives.

Rights

Access, rectification, erasure, restriction, portability, objection. Write to contact@mmrunning.fr. Complaint: CNIL, https://www.cnil.fr.

Transfers

Stripe payments and Resend email: necessary data may be processed outside the EU under those providers’ published safeguards. No other voluntary transfer.