Privacy Policy
Last updated 1 June 2026.
This Privacy Policy explains how MPNT, trading as HavenNest ("HavenNest", "we", "us", "our"), collects, uses, shares and protects your personal data when you visit havennestshop.com, contact us, or place an order. We are the data controller responsible for your personal data. We comply with the EU General Data Protection Regulation (GDPR), the UK GDPR and the UK Data Protection Act 2018 in respect of customers in the United Kingdom.
If you have any question about this policy or how we handle your data, contact us at contact@havennestshop.com or through our contact page.
1. Who we are
The controller of your personal data is MPNT (HavenNest), 60 rue FranΓ§ois 1er, 75008 Paris, France. Company registration number: [to be completed]. Contact email: contact@havennestshop.com.
2. The personal data we collect
Data you give us
- Order and account data β name, billing and delivery address, email address, phone number, and order history.
- Payment data β your card or payment details are collected and processed directly by our payment providers. We never see or store your full card number; we receive only confirmation of payment and limited transaction data.
- Communications β the content of messages you send us by email, contact form, chat or social media, and our replies.
- Marketing preferences β whether you have chosen to receive marketing, and your responses to it.
Data we collect automatically
- Usage and device data β pages viewed, items added to cart, referring site, IP address, browser and device type, and approximate location, collected through cookies and similar technologies.
Data from third parties
- Fraud-prevention and identity checks from our payment providers, delivery confirmations from couriers, and aggregated insights from our analytics tools.
3. How and why we use your data, and our legal bases
- To perform our contract with you β process orders, take payment, deliver goods, and handle returns, refunds and warranty claims.
- With your consent β send marketing emails, and set non-essential (analytics and marketing) cookies. You can withdraw consent at any time.
- For our legitimate interests β to provide customer support, prevent fraud, secure and improve our website and products, and understand how our store is used, in a way that does not override your rights.
- To comply with legal obligations β keeping tax, accounting and transaction records, and responding to lawful requests.
4. Marketing and your choices
We only send marketing where you have agreed or where the law otherwise allows. Every marketing email contains an unsubscribe link, and you can opt out at any time by clicking it or contacting us. Opting out of marketing does not stop service messages about an order you have placed.
5. Cookies and similar technologies
We use strictly necessary cookies to run the store, remember your cart and keep it secure; these do not require consent. With your consent we also use analytics cookies to measure how the site is used and marketing cookies to make advertising more relevant. You can accept or decline non-essential cookies through our cookie banner and change your choice at any time, and you can block or delete cookies in your browser settings (this may affect how the site works).
6. Who we share your data with
We do not sell your personal data. We share it only with trusted service providers (processors) who act on our instructions, including:
- our ecommerce platform and hosting provider (Shopify);
- payment processors that handle your transaction;
- delivery and courier partners that fulfil your order;
- email, customer-service and analytics providers that help us operate.
We may also disclose data where required by law, to enforce our terms, to prevent fraud or harm, or as part of a business sale or reorganisation, in which case it would remain protected under this policy.
7. International transfers
Some of our providers are located outside the EEA and the UK. Where personal data is transferred internationally, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or transfers to countries with an adequacy decision.
8. How long we keep your data
- Order and transaction records β kept for as long as needed to provide the service and to meet legal, tax and accounting obligations (typically up to 10 years).
- Marketing data β kept until you unsubscribe or ask us to stop, then suppressed or deleted.
- Support messages β kept for a reasonable period after your query is resolved.
- Cookies and analytics β retained for the periods set out in our cookie information.
When data is no longer needed we delete it or anonymise it.
9. Your rights
Subject to the conditions in data-protection law, you have the right to:
- access a copy of your personal data;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to certain processing, including direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting prior processing.
You are not subject to decisions producing legal effects based solely on automated processing. To exercise any right, contact us at contact@havennestshop.com. We respond within one month and will not charge a fee in normal circumstances. We may need to verify your identity first.
10. Children
Our store is intended for adults. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Security
We use encryption in transit (HTTPS), reputable processors and access controls to protect your data. No method of transmission or storage is completely secure, but we take reasonable steps to keep your information safe and to act promptly on any breach.
12. Third-party links
Our site may link to other websites we do not control. This policy does not apply to them, so please review their own privacy notices.
13. Changes to this policy
We may update this policy from time to time. The date at the top shows the current version; significant changes will be highlighted on this page.
14. Complaints and contact
For any privacy matter, contact us at contact@havennestshop.com or via our contact page. You also have the right to lodge a complaint with a data-protection authority β in France, the CNIL (cnil.fr); in the United Kingdom, the Information Commissioner's Office (ico.org.uk).
Registered to: MPNT (HavenNest), 60 rue FranΓ§ois 1er, 75008 Paris, France. Company number: [to be completed].