Privacy Policy

Last updated: 20 August 2026

This policy explains what personal data VESPRA collects when you visit or buy from this store, why we collect it, and what rights you have over it. It is written to comply with the EU General Data Protection Regulation (GDPR).

Who is responsible for your data

The data controller is [RAISON SOCIALE], [FORME JURIDIQUE], registered at [ADRESSE COMPLÈTE], France. Company number [SIREN]. VAT [NUMÉRO TVA].

For any question about your data, or to exercise any right below, write to [privacy@vespra.com]. We answer within 30 days.

What we collect, and why

Data	Why	Legal basis
Name, email, shipping and billing address, phone	To process and deliver your order, and contact you about it	Performance of a contract
Payment details	To take payment. We never see or store your card number — it goes directly to our payment provider	Performance of a contract
Order history	Returns, warranty claims, accounting obligations	Contract and legal obligation
Device, browser, IP address, pages viewed	To keep the store working, prevent fraud, and understand what people look at	Legitimate interest, or your consent for analytics cookies
Email address for marketing	To send you offers, only if you asked for them	Your consent — withdrawable at any time

Who else sees your data

We share only what is necessary, only with providers who process data on our behalf:

Shopify — hosts this store and processes orders. Shopify's privacy policy.
Our payment provider — handles the transaction and fraud checks.
Our carrier — receives your name, address and phone number to deliver the parcel.
Analytics and advertising providers — only with your cookie consent.

We do not sell your personal data. Ever.

Transfers outside the EU

Some providers process data outside the European Economic Area. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep it

Order and invoice records: 10 years — French commercial and tax law requires it.
Customer account data: 3 years from your last interaction with us.
Marketing consent: until you withdraw it, and 3 years after your last activity.
Cookies: 13 months maximum.

Your rights

Under GDPR you can ask us to: give you a copy of your data (access), correct it (rectification), delete it (erasure), pause our use of it (restriction), hand it to another provider (portability), or stop processing it (objection). You can also withdraw consent at any time without affecting what came before.

Email [privacy@vespra.com]. If you are not satisfied with our response, you have the right to complain to the French data protection authority, the CNIL (cnil.fr), or the supervisory authority in your own country.

Cookies

Strictly necessary cookies keep your cart and session working — they cannot be switched off. Analytics and advertising cookies are only set if you accept them in the consent banner, and you can change your mind at any time.