Privacy policy

At Tamelys.com , protecting your personal data is a priority. This policy clearly explains how we collect, use, protect, and share your information when you use our website and services.


1. Data Controller

The data controller is:

GCT AGENCY S.A.R.L.
Address: 11, Rue des Trois Cantons, L - 8399 Windhof (Koerich), Luxembourg
Company Number (RCS): B306520
Email: service@tamelys.com
Telephone: +33537170399

We act as the data controller within the meaning of the General Data Protection Regulation (GDPR).


2. Data we collect

When you use Tamelys.com, we may collect different categories of data:

2.1 Data provided directly by you

  • First and last name

  • E-mail address

  • Postal address (delivery and billing)

  • Phone number

  • Payment information (via secure provider)

  • Order history

  • Information related to your VIP Membership

2.2 Automatically collected data

When you browse our site:

  • IP address

  • Device type and browser

  • Pages viewed

  • Navigation time

  • Data from cookies and similar technologies

2.3 Data from customer service

If you contact us (email or phone), we may retain:

  • The content of your exchanges

  • The information needed to process your request


3. Purposes of the processing

We use your data to:

✔ Order Management

  • Payment processing

  • Shipping of products

  • After-sales service

Legal basis: performance of the contract

✔ Account management and VIP Membership offer

  • Subscription activation and management

  • VIP Benefits Allocation and Tracking

  • Monthly billing where applicable

Legal basis: contractual performance

✔ Communication

  • Transactional emails (order confirmation, delivery…)

  • Customer support

  • Information about your account

Legal basis: contractual performance

✔ Marketing (if you have consented)

  • Promotional offers

  • Commercial information

  • Exclusive VIP Member Benefits

Legal basis: consent or legitimate interest

✔ Safety and compliance

  • Fraud prevention

  • Compliance with legal obligations

  • Defending our rights

Legal basis: legal obligation and legitimate interest


4. Cookies and similar technologies

We use cookies to:

  • Ensure the proper functioning of the site

  • Measuring audience

  • Personalize your experience

  • Offer suitable solutions

You can manage your preferences via the cookie banner or your browser settings.


5. Data sharing

Your data may only be transmitted when necessary to:

  • Secure payment providers

  • Logistics and transport services

  • Website host

  • Marketing providers (if consent is given)

  • Public authorities in case of legal obligation

We never sell your personal data. A detailed list of our subcontractors can be provided upon request to the contact email address.


6. Transfers outside the European Union

In some cases, your data may be processed outside the European Union (e.g., hosting or technical tools).

In this case, we ensure that appropriate safeguards are in place:

  • Standard Contractual Clauses

  • European Commission adequacy decisions


7. Shelf life

We retain your data:

  • During the term of your account

    • Customer data: 3 years after the last commercial contact (classic recommendation).

    • Billing data: 7 or 10 years (according to Luxembourger accounting law).

    • Cookies: 13 months maximum.

  • During the duration of your VIP Membership

  • Then, according to applicable legal obligations (e.g., accounting obligations)

Marketing data is retained until you withdraw your consent.


8. Data Security

We are implementing:

  • Encryption of sensitive data

  • Secure access to databases

  • Password protection

  • Access monitoring

Despite our efforts, no system is completely invulnerable.


9. Data on minors

Tamelys.com is reserved for adults.

We do not knowingly collect data from individuals under the age of 18. If you believe a minor has provided us with data, please contact us immediately.


10. Your rights

In accordance with the GDPR, you have the following rights:

  • Right of access

  • Right of rectification

  • Right to erasure

  • Right to limitation

  • Right to object

  • Right to portability

  • Right to withdraw your consent at any time

To exercise your rights:
📩 service@tamelys.com

We will respond within a maximum of one month.

For security reasons, we may ask you for proof of identity if there is reasonable doubt about the person making the request.


11. Complaints

If you believe your rights have not been respected, you can file a complaint with the Data Protection Authority in Luxembourg.


12. Policy changes

We may modify this Privacy Policy in order to:

  • To comply with a legal evolution

  • Adapting our services

  • Improve transparency

The current version is still available on Tamelys.com.