The Spirit of the forest
Last Updated: July 2026
1. Introduction
MAH SPIRIT operates this website in strict compliance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés). We are committed to protecting your privacy and ensuring your personal data is handled securely and transparently.
2. Identity of the Data ControllerThe data controller responsible for the collection and processing of your personal information is MAH SPIRIT, a Société par actions simplifiée headquartered at 42 rue de Turbigo, 75003 Paris, France]. If you have any questions regarding this policy, you can reach us at contact@mahspirit.com.
3. Data We CollectWhen you visit our store or make a purchase, we collect the following types of information:- Identity Data: First name, last name, and age/date of birth (mandatory for legal age verification).- Contact Data: Billing address, delivery address, email address, and telephone number.- Financial Data: We do not store credit card details. All transactions are securely processed by our third-party payment gateways.- Technical & Usage Data: IP address, browser type, device information, and browsing behavior on our site, collected via cookies.
4. Purpose of Data CollectionWe strictly use your personal data for the following legal bases and purposes:- Contract Fulfillment: To process your orders, manage payments, and facilitate delivery.- Legal Obligations: To verify you are of legal drinking age and to maintain mandatory accounting and tax records.- Consent-Based Marketing: To send you promotional emails or display targeted advertising, provided you have given explicit consent.
5. Cookies and Tracking TechnologiesOur website utilizes a Consent Management Platform (Cookiebot) to govern the use of trackers. With your explicit consent, we may use third-party tools such as Google Analytics (GA4), Meta Pixel, and Mailchimp to analyze site traffic and optimize our marketing efforts. You can view the full list of active cookies, or withdraw your consent at any time, by visiting our dedicated Cookie Declaration page.
6. Data Retention PeriodsWe only retain your personal data for as long as necessary to fulfill the purposes for which it was collected:- Transactional and invoicing data are kept for a period of ten (10) years to comply with French commercial and tax laws.- Customer accounts are retained for active users. If an account is inactive for three (3) years, the data will be anonymized or deleted.- Marketing consent data is refreshed in accordance with ePrivacy guidelines, and you may opt out of marketing communications at any time.
7. Your GDPR RightsUnder the GDPR, you possess the following rights regarding your personal data:- The right to be informed about how your data is used.- The right to access the personal data we hold about you.- The right to request the correction of inaccurate or incomplete data.- The right to request the erasure of your data ("right to be forgotten"), subject to our legal retention requirements.- The right to restrict or object to the processing of your data.- The right to data portability.
8. How to Exercise Your RightsTo exercise any of your rights, please email us at contact@mahspirit.com. We will respond to your request within one (1) month. If you feel that your rights have not been respected, you also have the right to lodge a formal complaint with the French data protection authority (CNIL - Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.