Privacy Policy | MOCLAUS COLLECTION

1. Who is responsible for your data

The data controller is MOCLAUS COLLECTION (the “Store”, “we”), an online store selling women’s handbags and shoes in Cameroon, operated by [À COMPLÉTER / TO BE COMPLETED: legal name and legal form of the operator], registered office: [À COMPLÉTER / TO BE COMPLETED: registered address], RCCM: [À COMPLÉTER / TO BE COMPLETED: RCCM number].

Privacy contact / data protection officer: [À COMPLÉTER / TO BE COMPLETED: DPO or privacy contact name and email]. You can also reach us on WhatsApp at +237 680 60 11 75 or through our contact page.

2. Legal framework

We process personal data in accordance with Law No. 2024/017 of 23 December 2024 on personal data protection in Cameroon, together with the other applicable Cameroonian rules, in particular Law No. 2010/012 of 21 December 2010 on cybersecurity and cybercriminality and Law No. 2010/021 of 21 December 2010 governing electronic commerce. Law No. 2024/017 provides for a national Personal Data Protection Authority; its practical set-up and detailed implementing rules may still be evolving, and we will adapt this policy as they are published.

3. Data we collect

Account data: name, email address, and sign-in details. If you sign in with Google or GitHub, we receive the basic profile information that provider shares with us. We never see your provider password.
Order and delivery data: name, phone number, email address, delivery city and address, items ordered (product, colour, size), order total, chosen payment method and order status.
Payment data: we do not collect or store card numbers or mobile-money PINs on this site. MTN MoMo and Orange Money payments are made through those operators or confirmed with you directly; we may keep a transaction reference and the amount. Cash on Delivery is available in Douala and Yaoundé only.
Messages: what you send us by WhatsApp or Telegram, including messages started from our contact page, which opens WhatsApp (for example order questions and exchange requests).
Browsing data (visitor analytics): for certain pages (such as home, shop, product, cart, checkout, about, contact, FAQ, shipping, returns), we record the page visited, page title, the website you came from, device type (mobile, tablet or desktop), approximate location (country and city derived from your connection by our hosting provider), a random session reference, and a salted, hashed form of your IP address. We do not store your IP address in clear in this analytics log.
Preferences stored on your device: cart, wishlist, language and currency choices (see our Cookie Policy).

4. Why we use your data and on what legal basis

Purpose	Legal basis
Create and manage your account; process, confirm, deliver and support your orders; handle exchanges and refunds	Performance of the contract and steps taken at your request before a contract
Contact you about your order (WhatsApp, SMS, email)	Performance of the contract
Keep accounting, tax and sales records	Legal obligation
Measure visits, understand which pages are used, detect abuse and keep the site secure; receive internal alerts about site activity	Our legitimate interest in operating and securing the Store, using minimised data, or your consent where the law requires it
Newsletter / “drops” announcements and other marketing messages	Your consent, which you can withdraw at any time
Remember cart, wishlist, language and currency	Strictly necessary for the service you request, or your choice

We do not sell your personal data. We do not use it for automated decisions with legal effects on you.

5. Who receives your data

Access is limited to what is necessary. Our service providers act on our instructions:

InsForge (database, authentication, file storage and server functions), hosted in the United States (US-East region). It stores accounts, orders, catalogue data and analytics records.
Cloudflare (website hosting on Cloudflare Pages, network security and delivery). Cloudflare processes technical connection data, such as IP address, to deliver and protect the site.
Messaging providers: WhatsApp (Meta) and Telegram, used to communicate with you about orders and, for Telegram, to send internal alerts to the Store team about site activity and orders. Messages sent by you through these services are also subject to those providers’ own policies.
Payment operators: MTN Mobile Money and Orange Money, for payments you choose to make with them.
Delivery couriers and agencies, to whom we give the name, phone number and delivery address needed to deliver your parcel.
Authorities and advisers (tax authorities, courts, accountants, lawyers) where the law requires or to defend our rights.

6. Transfers outside Cameroon

Some of the providers above store or process data outside Cameroon, notably in the United States. Where the law requires it, we rely on the transfer mechanisms recognised by Cameroonian law, which may include authorisation by the data protection authority, contractual commitments from the provider, or your informed consent. We limit what is sent, restrict access, and use encrypted connections (HTTPS). [À COMPLÉTER / TO BE COMPLETED: confirm transfer mechanism and any authorisation or declaration filed with the authority].

7. How long we keep data

Account data: while your account is open, then up to [À COMPLÉTER / TO BE COMPLETED: e.g. 12 months] after you close it or after your last activity.
Order and invoicing records: for the period required by Cameroonian accounting and tax law ([À COMPLÉTER / TO BE COMPLETED: confirm period with accountant]).
Visitor analytics: [À COMPLÉTER / TO BE COMPLETED: e.g. 13 months], then deleted or aggregated.
Marketing: until you unsubscribe or withdraw consent.
Messages and support requests: [À COMPLÉTER / TO BE COMPLETED: e.g. 24 months] after the last exchange.

8. Security

We use access controls, encrypted connections, hashed visitor identifiers and role-based database rules to protect your data. No online service is completely secure. If a breach is likely to affect you, we will inform you and the competent authority as the law requires.

9. Your rights

Subject to the conditions and exceptions of applicable law, you may:

obtain access to the personal data we hold about you;
have inaccurate data corrected (rectification);
request deletion of your data (erasure), unless we must keep it by law;
object to, or ask us to restrict, certain processing, including marketing;
receive your data in a structured, commonly used format (portability), where applicable;
withdraw consent at any time, without affecting earlier processing.

To exercise a right, write to [À COMPLÉTER / TO BE COMPLETED: privacy email address] or message us on WhatsApp (+237 680 60 11 75), stating your request and the name, phone or email used on your account. We may ask you to prove your identity. We will answer within a reasonable time and in any case within the delay set by law.

10. Complaints

If you believe your rights are not respected, please contact us first. You may also lodge a complaint with the national personal data protection authority provided for by Law No. 2024/017, once it is operational, or bring the matter before the competent Cameroonian courts. [À COMPLÉTER / TO BE COMPLETED: authority name and contact details once confirmed].

11. Children

The Store is intended for adults. We do not knowingly collect data from children under 18. If you believe a child has given us data, contact us and we will delete it.

12. Cookies and similar technologies

See our Cookie Policy for details.

13. Changes to this policy

We may update this policy, for example when the law or our tools change. The date at the top shows the latest version. Material changes will be highlighted on the site.