Privacy & Cookies Notice

Last updated: 6 November 2026

Who is responsible for your data

Gaetan Leger (4 rue du 11 Novembre 1918, 59370 Mons-en-Barœul, France) is the controller of your personal data under the UK GDPR and the Data Protection Act 2018. Contact us about privacy at [email protected].

What we collect and why

• Order details — name, delivery address, e-mail, phone (if given) and what you bought. We use them to deliver your order and handle returns. Lawful basis: performance of a contract.
• Accounting records — kept because tax law requires it. Lawful basis: legal obligation.
• Messages you send us — to answer you. Lawful basis: legitimate interests (customer service).
• Payment — handled by our payment provider, Paynilo, on its own secure page (card payments are processed through Stripe). We never see or store your card details. They use some data to prevent fraud (legitimate interests).

We do not send marketing e-mails, sell your data, or use it for automated decisions.

Who we share it with

Only service providers who help us run the shop: Paynilo and Stripe (payments), our website host, our e-mail provider and our delivery carrier. Some may process data outside the UK; where they do, they are covered by UK adequacy regulations or the UK International Data Transfer Agreement / Addendum.

How long we keep it

Order and accounting records: 6 years after the end of the financial year of the order (HMRC requirement). Customer-service e-mails: 2 years after our last contact.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. E-mail [email protected]; we will respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

Cookies and similar storage

We only use storage that is strictly necessary for the shop to work: your basket is saved in your browser's local storage by our payment provider's script (paynilo.js) so it is not lost between pages. We use no analytics, advertising or tracking cookies, so we do not ask for cookie consent. Our payment provider sets its own strictly necessary cookies on its payment page to process your payment securely and prevent fraud. If we ever add optional cookies, we will ask for your consent first.