Overview
This Privacy Policy applies to all persons whose data may be processed by MyPlushHero, as well as to visitors and users (the "Users") of the website myplushhero.com (the "Site").
It describes the commitments of PROS WONDER SOLUTIONS and the rights of Users under the applicable regulations on personal data protection, in particular Regulation (EU) 2016/679 of April 27, 2016 (the "GDPR") and French Law No. 78-17 of January 6, 1978, as amended and currently in force (the "French Data Protection Act").
MyPlushHero invites Users to read this Privacy Policy carefully and to consult it regularly.
The service offered by MyPlushHero is intended for orders placed by adults. The personalized game provided in this context may be intended for children, but the order process and the provision of the collected data must be carried out by an adult. Uploaded photographs must strictly show a plush toy, and not a child. MyPlushHero reserves the right to refuse any order that does not comply with the conditions set out in this Privacy Policy and/or in the Terms and Conditions.
1Who is the personal data controller?
Users' personal data is collected and processed by:
PROS WONDER SOLUTIONS
A simplified joint-stock company (societe par actions simplifiee) with share capital of EUR 1,000.00,
Registered with the Paris Trade and Companies Register under number 105 378 707,
Whose registered office is located at 66 avenue des Champs Elysees, 75008 Paris,
Represented by Stephanie DEBUT, in her capacity as manager.
MyPlushHero may be contacted by email at: hello@myplushhero.com.
2How is personal data collected?
MyPlushHero may collect Users' personal data in the following situations, in particular:
- When browsing the Site, in particular through cookies or other trackers placed on the User's device;
- When placing an order on the Site, including through the order form, upload of one or more photographs, and entry of payment information;
- When contacting MyPlushHero by email or through any other communication channel indicated on the Site, including questions, information requests, exercise of rights or complaints;
- When interacting with MyPlushHero on social networks, for example through the official MyPlushHero pages or accounts, comments, private messages, etc.
Data may be collected directly from the User, meaning data entered by the User, or more indirectly through tracking technologies, including cookies and other trackers, in accordance with the privacy settings chosen by the User.
3What personal data is processed, for what purposes and on what legal bases?
MyPlushHero collects and processes only personal data that is adequate, relevant and limited to what is necessary for the following purposes:
| Processing | Data processed | Purposes | Legal basis |
|---|---|---|---|
| Operation and security of the Site | - Device and browser information; - IP address; - Browsing data and privacy choices. | - Ensure the operation, security and continuity of the Site and checkout; - Detect errors; - Produce internal statistics. | - Legitimate interests for strictly necessary processing and trackers (Art. 6(1)(f)) |
| Optional audience measurement and advertising | - Browsing, device and browser data, including the IP address and cookie or advertising identifiers; - Consent data; - For paid purchases, purchase data and the customer’s email address pseudonymized by hashing before transmission. | - Measure the journey and conversions; - Assess campaign performance; - Optimize advertising delivery. | - The User’s prior consent (Art. 6(1)(a) GDPR and, for operations on the device, Art. 82 of the French Data Protection Act) |
| Order management and performance of the contract | - User's first name; - User's email address; - Plush toy name; - Desired language for the personalized game; - Photograph(s) uploaded by the User; - Dedication entered by the User; - Order references, including order number, date, amount, ordered content and exchange history relating to the order; - Payment data processed by the payment provider (processor: Stripe). | - Enable MyPlushHero to register and process the User's Order; - Generate, personalize, review, deliver and host the MyPlushHero Gift, including the personalized game, dedication, Printable Card, Keepsake Pack and Adventure Kit; - Provide support; - Manage reminders and any hosting extensions. | - Performance of the contract (Art. 6(1)(b)) |
| Managing contact and support requests | - User's first name; - User's email address; - Content of the request and any attachments sent by the User; - Date and time of the request; - History of exchanges with MyPlushHero. | - Enable MyPlushHero to answer Users' questions and requests, including order tracking, information, support and GDPR rights requests; - Follow up exchanges and maintain traceability to improve service quality and manage complaints or disputes. | - Legitimate interest (Art. 6(1)(f)) - Legal obligation where applicable (Art. 6(1)(c)) |
| Social network activity | - Content of messages and comments or any other interaction with MyPlushHero accounts or publications; - Username or handle on the social network; - Public profile picture. | - Manage MyPlushHero accounts and pages on social networks; - Reply to Users' messages and comments; - Where applicable, respond to a User's rights request. | - Legitimate interest (Art. 6(1)(f)) - Legal obligation where applicable (Art. 6(1)(c)) |
4How long is data retained?
MyPlushHero retains personal data only for periods that are determined and proportionate to the purposes pursued:
- The Source Photo and its thumbnail are deleted within ninety (90) days following Delivery.
- The dedication and game settings are retained for the game's hosting period, subject to the statutory archiving of Order data.
- The Keepsake Pack and Adventure Kit files are retained for ninety (90) days after they are last sent or resent.
- The published game and essential technical files are retained for three (3) years, extended where a hosting extension is purchased, followed by a technical retention period of ninety (90) days.
- Contractual data is retained for the term of the contract and then archived for the applicable statutory limitation period, generally five (5) years. Accounting documents are retained for ten (10) years.
- Data relating to contact or support requests is retained for the time necessary to process the request, then archived for up to three (3) years from the last exchange.
- Temporary data used to prepare and transmit a purchase event to Meta is retained for the time required for delivery and retries, for no longer than forty-eight (48) hours. Metadata linked to the Order follows the retention periods applicable to contractual data. Meta states that it may retain Event Data for a maximum of two (2) years under the Meta Business Tools Terms.
- Data from cookies and other trackers is retained for the period applicable to each tracker, without exceeding the stated period. The User's choice to accept or reject cookies is retained for six (6) months.
Beyond these periods, data is deleted or irreversibly anonymized.
5What rights do Users have and how can they exercise them?
In accordance with the GDPR and the French Data Protection Act, the User has the following rights over personal data: right of access, right to rectification, right to erasure, right to withdraw any consent given, right to data portability, right to restriction, right to object, and right to define post-mortem instructions.
To exercise these rights, the User may contact MyPlushHero at: hello@myplushhero.com
In the event of persistent difficulty, the User also has the right to lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.
6How does MyPlushHero protect personal data?
MyPlushHero implements appropriate technical and organizational measures to ensure the security, integrity and confidentiality of Users' personal data and to prevent unauthorized access, loss, alteration or disclosure.
7To whom is personal data disclosed?
Users' personal data may be disclosed, within the limits of what is necessary, to the following recipients:
- Internally: authorized MyPlushHero personnel who need access for the purposes described above;
- MyPlushHero's technical providers and processors: hosting and database providers, image generation and processing providers, similarity-checking providers, the payment provider and the email service provider;
- Only after consent, the audience measurement and advertising providers identified in Section 8, including Meta Platforms Ireland Limited for the Meta Pixel and Conversions API;
- the competent administrative or judicial authorities to comply with legal or regulatory obligations, for example in response to a court order.
MyPlushHero ensures that its providers and partners comply with applicable legal requirements on personal data protection, in particular by checking that they implement appropriate technical and organizational measures to ensure data security and confidentiality.
Under the Meta Business Tools Terms, Meta may act, depending on the purpose, as a processor, joint controller or independent controller.
Meta may process data outside the European Economic Area, including in the United States. Depending on the circumstances, these transfers rely on an adequacy decision or European Commission Standard Contractual Clauses supplemented, where necessary, by additional measures. Information and applicable safeguards are available in Meta’s Privacy Policy and Meta Business Tools Terms, or may be requested from MyPlushHero.
8Cookies and other trackers
The Site uses trackers that are strictly necessary for its operation, security and the storage of privacy choices. Optional trackers and processing are enabled only after the User’s prior consent.
If the User consents, MyPlushHero uses Google Analytics, the Meta Pixel and the TikTok Pixel. For paid purchases, Meta’s Conversions API also sends a purchase event from MyPlushHero’s servers containing technical and browsing data, purchase data and the customer’s email address pseudonymized by hashing. This data is used to measure conversions and campaign performance and to optimize advertising delivery. MyPlushHero does not send Meta the Source Photo, plush toy name, dedication or game content.
The User may refuse or withdraw consent at any time by changing these choices. Refusal or withdrawal does not prevent use of the Site or placement of an Order. Withdrawal applies prospectively and does not affect the lawfulness of processing carried out beforehand. Information on exercising rights is provided in Section 5.
9Changes to this Privacy Policy
MyPlushHero reserves the right to amend this Privacy Policy at any time depending on changes in its activity and legal requirements. Changes and clarifications will take effect immediately after publication on the Site.
If MyPlushHero makes changes to the content of this Privacy Policy, Users will be informed on this page that it has been updated or by any other appropriate means.
Last updated: August 7, 2026