Skip to content

Privacy

We keep only what we need, and we sell nothing to anyone.

Controller

Thomas Piot, sole trader (entrepreneur individuel), Villa Lenta, 55 rue de la Duchesse d’Uzès, 78120 Rambouillet, France, thomaspiot78@gmail.com.

What we keep, and why

  • Orders: name, e-mail, phone, delivery address, pieces bought. To make, ship and provide after-sales service (performance of the contract). Kept 3 years after shipping (or after cancellation, if nothing was sent), for the guarantees and any complaints. After that, only the invoice remains.
  • Invoices: name, address, pieces and amounts. Kept 10 years after the end of the financial year of the sale (31 December), as French commercial law requires (legal obligation).
  • Payment: your card details go straight to Stripe. We never see or keep them.
  • Villa register (the letter): your e-mail, if you sign up (consent). Kept until you unsubscribe, in one click from any letter.
  • Messages sent through “Write to us”: name, e-mail, message. To reply to you (our legitimate interest). Kept 3 years after your last message.
  • Backups: a copy of the database is made every day and kept 14 days. Erased data leaves the backups 14 days later.
  • Cookies: one technical cookie remembers your bag for 30 days, another protects the forms. No advertising cookies, no third-party analytics.

Who receives it

  • Stripe, for payment: Stripe Payments Europe, in Ireland. Some data may be processed by Stripe, Inc. in the United States, under the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.
  • Printful, to make and ship (name, address, phone, e-mail): its European workshops, and the Printful group in the United States, under the European Commission’s standard contractual clauses.
  • Resend, to send order e-mails and forward your messages to us (name, e-mail, order or message details): Resend, Inc., in the United States, under the European Commission’s standard contractual clauses.
  • Google (Gmail), the shop’s mailbox, which receives your messages and order notices: Google Ireland, with possible transfers to the United States under the Data Privacy Framework.
  • Our host OVH SAS (server in the United Kingdom, recognised by the EU as providing adequate protection).

Your rights

You can ask to access, correct or erase your data, to restrict its processing or to receive it in a portable format, and you can object to processing based on our legitimate interest. For the letter, you can withdraw your consent at any time. Write to thomaspiot78@gmail.com: we reply within one month. You can also contact the French data protection authority, CNIL (cnil.fr).