Privacy policy

The data controller is the publisher of this site, whose identity, address and SIRET number appear in the legal notice. For any question about your data, write to the contact address given on that same page.

• Name, postal address, email address and, where given, phone number. Collected when you order, to fulfil it and keep you informed. Legal basis: performance of the contract.
• Order details, amount paid and transaction identifiers. Kept for tracking, returns and our accounting obligations. Legal basis: performance of the contract and a legal obligation.
• The content of your messages, if you write to us. Legal basis: our legitimate interest in answering you.

We collect nothing else. There are no customer accounts, no profiling, no automated decisions and no targeted advertising on this site.

They never pass through our servers. Payment is handled by Stripe Payments Europe, an authorised provider, which receives card information directly. We keep only a transaction identifier, with no banking data.

• Stripe, to process the payment.
• The carrier, to deliver the parcel: name and delivery address only.
• Resend, to deliver confirmation and tracking emails.
• Vercel and Supabase, which host the site and its database.

Each one is involved only for its own part and is not allowed to use your data for anything else. Some of these providers may process data outside the European Union, on the basis of the European Commission standard contractual clauses.

Order data is kept for three years from the last order for customer follow up, and ten years for accounting records, as the law requires. Messages you send us are kept for as long as your request takes to handle, then one year.

You have rights of access, rectification, erasure, restriction, objection and portability over your data. To exercise them, write to the contact address given in the legal notice, quoting your order number. We answer within one month.

Some data cannot be erased before the legal periods end: an invoice must be kept for ten years, even if you ask for it to be deleted. If you consider that your rights are not respected, you may refer the matter to the French data protection authority, cnil.fr.

This site sets no analytics, advertising or social network cookies. The only cookies used are those strictly necessary for the bag to work and for payment security, set by Stripe: they are exempt from consent under article 82 of the French data protection act.

Should any measurement or advertising tools be added, a consent banner would be put in place beforehand and this page would be updated accordingly.