Template: to be completed and reviewed by a lawyer before publication.
Data controller
[TO BE COMPLETED: company name, address and contact email for data protection matters]
Data we collect
When you place an order, we collect: first name, last name, email address, phone number, delivery address, the contents of the order and, where applicable, your delivery instructions.
Purposes and legal basis
- Processing and delivering your order: performance of the contract (Art. 6(1)(b) GDPR).
- Meeting our accounting and tax obligations: legal obligation (Art. 6(1)(c) GDPR).
We do not use your data for advertising and we do not sell it.
Recipients
To prepare and ship your order, we share your data with the producer of the products you have bought [TO BE COMPLETED: list of producers] and with the courier responsible for delivery. Card payments are processed by Stripe Payments Europe, Ltd. (Ireland), which receives your name, your email address, the amount and your card details.
Retention period
We keep order data for as long as the business relationship lasts and, after that, for the statutory retention period for accounting records [TO BE COMPLETED].
Cookies and local storage
This website does not use cookies or any advertising, audience measurement or tracking tools. Your browser only stores on your device:
- your cart (localStorage): the items you have chosen and their quantities, so that it is not lost when you move from one page to another. It is emptied automatically when you send your order, and you can delete it at any time in your browser settings;
- your last order (sessionStorage): its number, items and amounts, without your name or address, solely to display the confirmation page. This information is deleted automatically when you close the browser tab or window.
This storage is strictly necessary for the cart and the order you request to work, so it does not require your consent (Art. 5(3) of Directive 2002/58/EC; in France, Art. 82 of the Loi Informatique et Libertés; in Germany, § 25(2) no. 2 TDDDG). Fonts are hosted on our own server; no data is sent to Google Fonts.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, and to request its portability. To exercise these rights, write to [TO BE COMPLETED: email]. You may also lodge a complaint with the data protection supervisory authority of your country of residence: in France, the CNIL (www.cnil.fr); in Germany, the competent data protection authority; in Spain, the Agencia Española de Protección de Datos (AEPD, www.aepd.es).