Privacy policy

This policy explains what personal data VESPRA collects when you visit or buy from this store, why we collect it, and what rights you have over it. It is written to comply with the EU General Data Protection Regulation (GDPR).

WHO IS RESPONSIBLE FOR YOUR DATA
The data controller is [RAISON SOCIALE], [FORME JURIDIQUE], registered at [ADRESSE COMPLETE], France. Company number [SIREN]. VAT [NUMERO TVA].
For any question about your data, or to exercise any right below, write to nado971333@gmail.com. We answer within 30 days.

WHAT WE COLLECT, AND WHY
Name, email, shipping and billing address, phone - to process and deliver your order and contact you about it. Legal basis: performance of a contract.
Payment details - to take payment. We never see or store your card number; it goes directly to our payment provider. Legal basis: performance of a contract.
Order history - returns, warranty claims, accounting obligations. Legal basis: contract and legal obligation.
Device, browser, IP address, pages viewed - to keep the store working, prevent fraud and understand what people look at. Legal basis: legitimate interest, or your consent for analytics cookies.
Email address for marketing - to send you offers, only if you asked for them. Legal basis: your consent, withdrawable at any time.

WHO ELSE SEES YOUR DATA
We share only what is necessary, only with providers who process data on our behalf:
- Shopify - hosts this store and processes orders.
- Our payment provider - handles the transaction and fraud checks.
- Our carrier - receives your name, address and phone number to deliver the parcel.
- Analytics and advertising providers - only with your cookie consent.
We do not sell your personal data. Ever.

TRANSFERS OUTSIDE THE EU
Some providers process data outside the European Economic Area. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

HOW LONG WE KEEP IT
Order and invoice records: 10 years - French commercial and tax law requires it.
Customer account data: 3 years from your last interaction with us.
Marketing consent: until you withdraw it, and 3 years after your last activity.
Cookies: 13 months maximum.

YOUR RIGHTS
Under GDPR you can ask us to: give you a copy of your data (access), correct it (rectification), delete it (erasure), pause our use of it (restriction), hand it to another provider (portability), or stop processing it (objection). You can withdraw consent at any time without affecting what came before.
Write to nado971333@gmail.com. If you are not satisfied with our response, you have the right to complain to the French data protection authority, the CNIL (cnil.fr), or the supervisory authority in your own country.

COOKIES
Strictly necessary cookies keep your cart and session working - they cannot be switched off. Analytics and advertising cookies are only set if you accept them in the consent banner, and you can change your mind at any time.

CHILDREN
This store is not intended for anyone under 16. We do not knowingly collect data from children.

CHANGES
If we change this policy we update the date at the top. Material changes will be announced on this page.