At Lords Of Sylen, protecting your personal data is a top priority. This policy explains what data we collect, how we use it, and what your rights are.

1. Who are we?

Lords Of Sylen is a registered non-profit association. Our mission includes artistic, musical and audiovisual creation; distribution of artistic content on streaming platforms; live music performances (originals and covers); and the sale of albums and merchandising items.
Email: lordsofsylen@gmail.com

2. Personal data we collect

We may collect the following information:

When creating an account:

• First and last name

• Email address

• Encrypted password

• Mailing/shipping address

• Phone number

When placing orders:

• Order history

• Delivery details

• Payment information (handled by a secure third-party provider — we do not store your banking data)

Through cookies:

• Anonymous browsing data

• Connection data (IP address, browser type, session duration)

• Shopping behavior (pages viewed, cart activity, etc.)

Through contact forms or newsletter sign-up:

• Email address

• Message or inquiry

3. Purpose of data processing

We use your personal data to:

• Create and manage your customer account

• Process and deliver your orders

• Contact you regarding your order or account

• Send you promotional offers or updates (if you’ve opted in)

• Improve our website through anonymous statistical data

• Fulfill our legal and tax obligations

4. Legal basis for processing

In accordance with the GDPR, we process your data based on the following legal grounds:

• Contract performance: to manage your account, process and deliver your orders

• Consent: for newsletters and non-essential cookies

• Legitimate interest: to improve our service or prevent fraud

• Legal obligation: to retain invoices and handle disputes

5. Data retention periods

• Customer account: until deleted or after 3 years of inactivity

• Orders: 6 years for tax purposes

• Cookies: up to 13 months

• Newsletter subscription: until you withdraw your consent

6. Data recipients

Your data may be shared with:

• Our technical providers (hosting, web developer)

• Our secure payment provider

• Our delivery partner

• Our marketing tools (emailing, analytics)

All third parties are committed to maintaining the confidentiality of your data.

7. Transfers outside the EU

If some of your data is stored outside the European Union (e.g., on US-based servers or tools), such transfers are protected by standard contractual clauses approved by the European Commission or equivalent safeguards.

8. Your rights

Under applicable regulations, you have the following rights:

• Right of access: to know what data we hold about you

• Right to rectification: to correct inaccurate data

• Right to erasure ("right to be forgotten")

• Right to data portability

• Right to object to data processing, especially for marketing

• Right to withdraw consent at any time

To exercise your rights, contact us at: [insert GDPR-specific email address]
You may also lodge a complaint with the CNIL (www.cnil.fr) if you believe your rights have not been respected.

9. Data security

We implement technical and organizational security measures to protect your personal data from unauthorized access, loss, alteration, or disclosure.

10. Cookies

We use various types of cookies to:

• Ensure site functionality (login, cart, etc.)

• Enhance user experience (performance and analytics cookies)

• Offer personalized content (marketing cookies)

You can accept or decline cookies via the consent banner shown on your first visit or change your preferences at any time via the “Manage Cookies” link.

See our [Cookie Policy] for more information.