Privacy and Personal Data Protection Policy

Last updated: 11 August 2026

This Privacy Policy explains how MOKAÏ, operated by DU NORD AU SUD, collects, uses, stores and protects the personal data of users of www.mokaifuzion.fr.

It applies in particular when you:

• browse the website;

• create or use a customer account;

• sign in using your Google account;

• place a Click & Collect order;

• request delivery;

• make an online payment using PayPal;

• contact MOKAÏ;

• or submit an enquiry relating to a catering service.

1. Data controller

The controller responsible for the processing activities described in this Policy is:

DU NORD AU SUD
French simplified joint-stock company (SAS)
SIREN: 883 744 526
Registered office: 97 chemin du Chenil, 30100 Alès, France

MOKAÏ establishment:

1 place Joseph Bermond – Ophira 1
06560 Valbonne, France

Email: dunordausud29@gmail.com
Telephone: 09 88 34 85 93

For questions regarding your personal data or to exercise your rights, you may contact us using the email address above.

2. Personal data we collect

The data we collect depends on how you use the website and MOKAÏ services.

2.1 Customer account creation and management

When you create a customer account directly through the website, we may collect:

• your first and last name;

• your email address;

• your telephone number;

• your address, where provided;

• login details necessary to operate your account;

• information and preferences saved within the account;

• your order history where associated with your account.

This information is used to create and manage your account, facilitate ordering and allow you to access information associated with your use of the website.

3. Sign in with Google

The website may allow you to create an account or sign in using Sign in with Google.

When you choose this method, Google authenticates your identity and provides MOKAÏ with the information authorised for this purpose.

Depending on the configuration and permissions used, this may include:

• a unique identifier associated with your Google account;

• your name;

• your email address;

• and, where applicable, your profile picture.

MOKAÏ does not receive your Google password.

Google sign-in is used only to facilitate account creation, identify you and enable access to your MOKAÏ account.

Google also processes certain data in connection with its own authentication service in accordance with its own terms and privacy policy.

If MOKAÏ were to request access to additional Google services or data beyond what is strictly necessary for authentication, appropriate information would be provided and any necessary authorisation would be requested.

4. Order data

When you place an order, we may process:

• your first and last name;

• your email address;

• your telephone number;

• your order number or reference;

• products ordered;

• quantities;

• order date and time;

• order value;

• selected collection or delivery method;

• selected payment method;

• delivery address where delivery is requested;

• any instructions necessary for preparation, collection or delivery;

• information concerning fulfilment, amendment, cancellation or refund of the order.

This information is primarily used to perform the contract entered into with the customer.

5. Click & Collect

When you select Click & Collect, we use the information required to:

• register your order;

• prepare the products;

• identify you at collection;

• contact you where necessary concerning the order;

• manage your selected payment method;

• process any cancellation, complaint or refund request.

For Click & Collect orders, two payment options may be available:

• online payment via PayPal;

• payment directly at the counter when collecting the order.

6. Online payment using PayPal

Where you choose to pay online, payment is processed through PayPal.

PayPal directly processes the information needed to complete and secure the payment transaction.

MOKAÏ may receive certain information from PayPal required to manage the order and transaction, including:

• payment confirmation or status;

• transaction amount;

• a transaction identifier or reference;

• information necessary to match the payment with your order;

• information necessary to process a refund where applicable.

MOKAÏ does not normally receive or store your complete bank card number or security code where these details are processed directly by PayPal.

PayPal also processes data for its own purposes in accordance with its privacy policy and legal obligations.

Delivery orders

Orders selected for delivery must be paid online using the payment methods offered by the website, currently via PayPal.

7. Payment at the counter

For Click & Collect orders, you may choose to pay directly at MOKAÏ when collecting your order.

Payment may be made:

• by bank card;

• or in cash.

Where this option is selected, no payment is processed through www.mokaifuzion.fr.

Bank card data used on MOKAÏ’s physical payment terminal is not collected by the website.

Where payment is made by bank card at the counter, certain transaction information may be processed by the bank and payment service providers involved in operating the payment terminal.

8. Delivery using Uber Direct

Where you choose delivery, MOKAÏ uses Uber Direct to transport your order.

The food order is placed with MOKAÏ. Uber Direct acts as the delivery service provider.

In order to arrange and fulfil delivery, MOKAÏ transmits certain personal data required for this purpose to Uber B.V.

Depending on the delivery requirements, this information may include:

• your name;

• delivery address;

• telephone number;

• email address where necessary;

• an order reference or identifier;

• order-related information necessary for delivery;

• any instructions required to complete delivery.

The main legal basis for this disclosure is performance of the contract, since this information is necessary to provide the delivery service requested by the customer.

MOKAÏ does not provide Uber Direct with the banking information used for your PayPal payment.

MOKAÏ seeks to limit the information transmitted to Uber Direct to what is necessary to perform the delivery.

After receiving the data transmitted by MOKAÏ, Uber B.V. also acts as an independent data controller for the processing it carries out in connection with Uber Direct.

Uber may process this data, in particular, to:

• arrange and carry out delivery;

• allow the courier to locate and contact the recipient;

• provide delivery tracking;

• manage delivery-related incidents;

• ensure the safety and security of the service;

• prevent fraud;

• comply with legal obligations;

• and carry out other processing described in the terms and privacy information applicable to Uber Direct.

Uber applies its own privacy policy to the processing for which it acts as controller.

9. Catering services

Catering services are handled separately from the website’s online ordering and payment system.

The website may allow you to send a catering enquiry to MOKAÏ.

In this context, we may collect:

• your name;

• telephone number;

• email address;

• your business name where the enquiry is professional;

• event address or location;

• event date;

• expected number of guests;

• information concerning the service requested;

• information required to prepare a quotation;

• communications concerning organisation of the service;

• information necessary for invoicing and payment.

This data may be used to:

• respond to your enquiry;

• assess your requirements;

• prepare and send a quotation;

• organise the service;

• communicate with you before and after the event;

• issue invoices;

• manage payment;

• handle administrative follow-up.

Catering services are not paid through the PayPal system used for website orders.

Payment arrangements are agreed directly between the customer and MOKAÏ, including through the quotation where applicable.

Before a quotation is accepted, the principal legal basis is the taking of pre-contractual steps at your request.

Once the service has been accepted, processing is primarily based on performance of the contract.

10. Contact forms and communications with MOKAÏ

When you contact us through the website, by email or by telephone, we may process the information you provide in order to respond to your request.

This may include:

• your name;

• email address;

• telephone number;

• the content of your request;

• your order number where your request concerns an order;

• subsequent communications with MOKAÏ.

This information is used to process and follow up your request.

11. Technical and security data

When you use the website, certain technical information may be processed to enable the website to function securely and correctly.

Depending on the technical configuration, this may include:

• IP address;

• browser type;

• device type;

• operating system;

• date and time of connection;

• pages visited;

• technical information relating to a session;

• logs required for error diagnosis, security and fraud prevention.

This information is processed insofar as necessary for the operation, security and maintenance of the website.

12. Legal bases for processing

Depending on the activity concerned, MOKAÏ relies primarily on the following legal bases.

Performance of a contract or pre-contractual steps

This applies in particular to:

• creating and managing your customer account;

• handling your order;

• preparing products;

• arranging Click & Collect;

• managing payment;

• arranging delivery using Uber Direct;

• responding to and managing catering enquiries and services;

• handling cancellations, refunds and complaints.

Legal obligation

Certain information may be retained in order to comply with legal obligations, including those relating to:

• accounting;

• taxation;

• invoicing;

• responding to certain requests concerning data protection rights.

Legitimate interests

MOKAÏ may rely on its legitimate interests, where appropriate, to:

• protect the website;

• prevent fraud and abuse;

• protect its IT systems;

• establish, exercise or defend legal rights;

• improve the technical operation of its services where consent is not required.

Consent

Where applicable law requires your consent, it will be requested before the relevant processing takes place.

This may apply in particular to:

• certain non-essential cookies or tracking technologies;

• certain marketing communications where prior consent is required.

You may withdraw your consent at any time where processing relies on consent.

13. Marketing communications

MOKAÏ may send you marketing communications where permitted by applicable law.

Where consent is required, you should be able to provide that consent separately, for example through a dedicated unticked checkbox.

Creating an account or accepting the Terms and Conditions does not, by itself, constitute consent to receive marketing messages where specific consent is legally required.

You may withdraw consent or object to marketing communications at any time, including through an unsubscribe mechanism contained in the relevant communication or by contacting MOKAÏ.

14. Cookies and similar technologies

The website may use cookies and similar technologies.

Strictly necessary cookies

Certain cookies or technologies may be required for:

• operation of the shopping basket;

• maintaining a session;

• account authentication;

• website security;

• remembering choices necessary to provide a service requested by the user.

Where such technologies are strictly necessary and meet the relevant legal requirements, they may be used without prior consent.

Non-essential cookies and third-party services

Other technologies may be used for purposes such as:

• audience measurement;

• embedding third-party content;

• displaying social media content;

• providing certain external functions;

• advertising or tracking, if such functions are used.

Where prior consent is legally required, these technologies should not be activated until consent has been provided.

Users must also be able to refuse non-essential tracking technologies and change their choices later.

15. Social media and Instagram content

The website may contain links to or embedded content from third-party services, including Instagram.

Where third-party content is directly embedded on a page, the relevant platform may receive certain technical information concerning your browser or device.

Where activation of such content results in cookies or other tracking technologies requiring consent, those technologies should only be activated once the necessary consent has been obtained.

Where you leave the MOKAÏ website and access Instagram or another external service directly, processing of your data is governed by that service’s own terms and privacy policy.

16. Recipients of your personal data

Personal data is accessible only to those persons or organisations that require it for the purposes described in this Policy.

Depending on the service used, recipients may include:

• authorised persons within MOKAÏ and DU NORD AU SUD;

• technical providers responsible for website hosting, development, maintenance or security;

• Google, where you use Google sign-in;

• PayPal, where you make an online payment;

• Uber B.V. and the entities or individuals required to provide Uber Direct, where you request delivery;

• the courier carrying out the delivery, to the extent necessary;

• banking and payment providers involved in payments made at the counter;

• accounting, administrative or legal advisers where necessary;

• public authorities or courts where disclosure is required or authorised by law.

MOKAÏ does not sell your personal data.

Where providers such as Google, PayPal or Uber act as independent controllers for their own processing, their own privacy policies also apply.

17. Retention periods

MOKAÏ does not retain personal data for longer than necessary for the purpose for which it was collected, subject to mandatory legal retention periods.

Customer account

Information required to operate your account is retained while the account remains in use.

Following a prolonged period of inactivity or the end of the customer relationship, data that is no longer required may be deleted or anonymised, subject to information that must be retained to comply with legal obligations or defend MOKAÏ’s rights.

As a general principle, customer relationship data should not be retained indefinitely and may be deleted following an extended period of inactivity, generally within three years after the end of the commercial relationship where no other retention ground applies.

Orders and invoicing

Information required to fulfil an order is retained for the duration necessary to manage the commercial relationship.

Documents and data subject to accounting or tax obligations may subsequently be archived for the applicable legal period.

Invoices and accounting supporting documents may in particular be required to be retained for 10 years.

Catering enquiries

Information is retained for the period necessary to respond to the enquiry and, where a catering service is booked, for the time necessary to perform the contract and comply with administrative, accounting and tax obligations.

Marketing

Where customer data is used for marketing purposes, it may generally be retained during the commercial relationship and for up to three years following the end of that relationship or the last relevant contact, subject to applicable rules.

Information strictly necessary to respect an objection to marketing may be retained for longer in a suppression list to ensure that the person is not contacted again.

Technical data

Technical logs and similar information are retained for a period proportionate to security, maintenance and incident-resolution requirements.

Cookies

Cookie and related information retention periods depend on their purpose and are determined in accordance with the rules applicable to the relevant technology.

18. Deleting a customer account

You may ask MOKAÏ to delete your customer account by contacting us.

Deleting your customer account does not necessarily result in the immediate deletion of all information associated with it.

Certain information relating to:

• orders;

• invoices;

• payments;

• refunds;

• disputes or complaints

may need to be retained separately for the period required to comply with a legal obligation or establish, exercise or defend legal rights.

Such information will no longer be used for normal account management once the account has been deleted.

19. International data transfers

Some technology providers used by MOKAÏ operate internationally.

As a result, certain personal data processed in connection with Google, PayPal, Uber or other technical providers may be processed or accessed from countries outside the European Economic Area.

Where an international transfer requires specific safeguards under the GDPR, it must rely on an authorised mechanism, such as:

• an adequacy decision issued by the European Commission;

• Standard Contractual Clauses approved by the European Commission;

• or another mechanism permitted under applicable data protection law.

Google, PayPal and Uber also maintain their own privacy policies explaining the international processing and transfers they carry out under their own responsibility.

20. Data security

MOKAÏ implements appropriate technical and organisational measures designed to protect personal data against:

• unauthorised access;

• unauthorised disclosure;

• loss;

• alteration;

• destruction;

• fraudulent use.

Access to personal data is limited to people and service providers who require it for their duties.

No information system can guarantee absolute security, and security measures may therefore evolve according to the risks and technologies involved.

21. Your rights

Under the General Data Protection Regulation and applicable French law, you may have the following rights depending on the processing concerned:

• right of access – to find out what personal data we hold about you and obtain a copy;

• right to rectification – to correct inaccurate or incomplete personal data;

• right to erasure – to request deletion of personal data where the legal requirements are met;

• right to restriction – to request temporary restriction of certain processing in the circumstances provided by law;

• right to object – to object to certain processing, particularly processing based on legitimate interests;

• right to data portability – to receive certain data you have provided to us in a structured and reusable format where the applicable conditions are met;

• right to withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

22. How to exercise your rights

To exercise your rights or ask a question concerning your personal data, you may contact us:

By email:
dunordausud29@gmail.com

By post:
DU NORD AU SUD – MOKAÏ
1 place Joseph Bermond – Ophira 1
06560 Valbonne
France

Your request should contain sufficient information to identify you and clearly indicate the right you wish to exercise.

Where necessary and proportionate to prevent unauthorised access to personal data, we may request additional information in order to verify your identity.

We will respond within the time limits required by applicable law.

23. Complaints to the CNIL

If you believe that the processing of your personal data does not comply with applicable data protection law, you may contact MOKAÏ so that we can review your request.

You also have the right to lodge a complaint with the French data protection authority:

Commission Nationale de l’Informatique et des Libertés – CNIL.

24. Sensitive information and allergies

Certain information voluntarily supplied by a customer may reveal information concerning their health, for example where they mention a food allergy or intolerance.

MOKAÏ asks customers to provide this type of information only where it is necessary for their order or request.

Such information must not be used for marketing purposes.

Where information concerning an allergy or medical condition is not necessary for delivery, MOKAÏ seeks not to disclose it to the delivery provider.

Instructions provided to a courier should, wherever possible, be limited to information necessary to locate the delivery address and hand over the order.

25. Changes to this Privacy Policy

This Privacy Policy may be amended to reflect:

• changes to the website;

• the addition or removal of functionality;

• changes of service provider;

• changes to payment or delivery methods;

• or changes in applicable law or regulation.

The date shown at the top of this Policy indicates the date of the latest revision.

Where a significant change materially affects how personal data is used, MOKAÏ may provide appropriate notice to affected users.