Last updated: 16 September 2026
1. Data processed
- Account: name, email address, technical identifiers and authentication events.
- Order: products, amounts, payment reference, delivery address and status.
- Payment: information required by Stripe; full card details are not stored by the site.
- Contact and withdrawal: identity, email, order reference, message and follow-up of the request.
- Essential technical data: security and operational logs.
2. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and securing the account | Performance of the contract and legitimate security interest |
| Processing payment, delivery, returns and withdrawal | Performance of the contract and legal obligations |
| Responding to requests | Pre-contractual measures, contract or legitimate interest depending on the request |
| Keeping accounting records and handling disputes | Legal obligation and defence of rights |
3. Processors and recipients
Data is limited to authorised persons and the necessary service providers: Supabase (database and authentication), Stripe (payment), Resend (transactional emails), Vercel (hosting) and Formspree (contact form). Some providers may process data outside the European Economic Area under their contractual safeguards and transfer mechanisms.
4. Retention periods
Data is kept for as long as necessary for the purposes above, then archived to meet legal obligations. Accounting records and order supporting documents are kept for the applicable legal period. Account data is deleted or anonymised after closure, subject to archiving obligations and ongoing disputes.
5. Cookies and local storage
The site does not currently deploy any advertising or non-essential audience-measurement tool. It uses the browser’s local storage for the basket, to remember your language choice (French or English) and for the mechanisms essential to the Supabase session. If a non-essential tool is added, a consent mechanism must be put in place before it is activated.
6. Your rights
You may request access, rectification, erasure, restriction, portability, or object to certain processing, under the legal conditions. Send your request via the contact page. A dedicated address must be published before opening: [EMAIL TO BE COMPLETED]. You may also lodge a complaint with the CNIL at cnil.fr.
7. Security
The site applies access controls, database security rules, HTTPS encryption, server-side validation of prices and webhook signatures. As no system removes all risk, the measures are regularly reassessed.