Privacy policy
This privacy policy describes the processing of personal data carried out on charlotte-leroux.com, in accordance with Regulation (EU) 2016/679 (GDPR) and French data protection law.
Data controller
Charlotte Leroux, individual entrepreneur. Contact: contact@charlotte-leroux.com.
Data collected and purposes
• Order: name, postal address, email, phone - to process and ship your order, legal basis: performance of the contract.
• Payment: banking information never passes through our servers. It is processed directly by Stripe (legal basis: performance of the contract).
• Contact form: name, email, message - to answer your request (consent).
• Transactional emails: sent through Mailjet (order confirmation, shipping).
• Payment: banking information never passes through our servers. It is processed directly by Stripe (legal basis: performance of the contract).
• Contact form: name, email, message - to answer your request (consent).
• Transactional emails: sent through Mailjet (order confirmation, shipping).
Cookies and local storage
The site only uses local storage (localStorage) that is strictly necessary for the cart and consent to work. No advertising or third-party analytics tracker is placed without your consent.
Recipients
Your data is intended for Charlotte Leroux and her technical processors: Stripe (payment), Mailjet (email sending), Infomaniak (website host), Cloudflare (form security) and the carrier for delivery.
Transfers outside the EU
Our providers mainly operate in the EU. When transfers outside the EU are necessary (for example Stripe), they take place within a GDPR-compliant framework (standard contractual clauses).
Retention periods
• Order data: 10 years (accounting obligation).
• Contact messages: 3 years from the last exchange.
• Technical logs: 12 months maximum.
• Contact messages: 3 years from the last exchange.
• Technical logs: 12 months maximum.
Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to define instructions regarding your data after your death. You can exercise these rights by writing to contact@charlotte-leroux.com. You may also lodge a complaint with the CNIL (www.cnil.fr).