Privacy policy

Controller

…, …. Contact for any question about your data: ….

Data collected

When you order: name, delivery and billing addresses, email, phone, items ordered and amounts. Card details are entered with Stripe and never passed to us.

No customer account is created. No audience measurement or targeted advertising is used on the website.

Purposes and legal bases

Fulfilling the order: preparation, shipping, tracking, customer service (performance of the contract).

Bookkeeping and invoicing (legal obligation).

Preventing fraud and securing the website, for example by limiting repeated attempts (legitimate interest).

Recipients

Your data is never sold or transferred. It is shared only with the providers required: Stripe (payment), Colissimo (delivery), Resend (order emails), Vercel (website hosting) and Neon (database).

Some of these providers may process data outside the European Union; these transfers are covered by the safeguards provided by the GDPR (standard contractual clauses or adequacy decision).

Retention

Order data: for the duration of the business relationship, then 5 years under the limitation period. Invoices and accounting records: 10 years. Security logs: 12 months at most.

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability, within the limits set by law (accounting data must be kept). Write to ….

You may lodge a complaint with the CNIL (cnil.fr), the French data protection authority.

Cookies and local storage

The website uses no advertising or audience measurement cookies. Your cart is kept in your browser's local storage, on your device only. The administration area uses a strictly necessary session cookie.