Privacy Policy

Last updated: 26/09/2025

I only collect and process personal data that is necessary to manage orders, ship items, provide customer support, and comply with my legal obligations.

1️⃣ Data Controller

The data controller is: Bebert/Velkia. Sole trader (micro-entrepreneur, EI)

Email: [email protected]

2️⃣ What data I collect

I may collect the following personal data when you use my shop:

• Identity and contact details: name, postal address, email address, phone number (optional).
• Order details: purchased items, order date, payment information (processed securely by third-party payment providers. I do not store your full card data).
• Communication data: messages you send to me by email or through the shop platform.
• Technical data: limited information (browser, IP, device) if collected by the shop host or analytics service.
  
  

3️⃣ Why I collect your data (purposes and legal bases)

I process your personal data for the following purposes:

• Fulfilling your order (contract):  processing payment, preparing and shipping items, handling returns or refunds.
• Customer support (legitimate interest): answering your messages and requests.
• Legal obligations: invoicing, accounting, tax reporting.
• Analytics and performance (legitimate interest, optional): understanding how my shop is used, improving services.
  
  

• Order data: kept for 10 years as required by French accounting/tax law.
• Customer support emails/messages: kept up to 3 years.
• Technical/analytics data: usually retained 14 months (depending on the analytics provider).

After these periods, your data is deleted or anonymised.

5️⃣ Sharing of data

I do not sell or rent your personal data.

I may share data only with:

• Payment providers (e.g. PayPal, Stripe) to process secure payments.
• Shipping carriers (La Poste, Chronopost, etc.) to deliver your order.
• Hosting/platform providers (e.g. BigCartel, INPRNT) that provide the e-commerce infrastructure.

All processors are contractually or legally bound to protect your data.

6️⃣ Your rights (EU / GDPR)

As a data subject, you have the right to:

• Access your data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, where legally possible.
• Object to or restrict processing under certain conditions.
• Request portability of your data to another controller.
• Lodge a complaint with your local Data Protection Authority (in France: CNIL, www.cnil.fr

7️⃣ Cookies and tracking

My shop host may use cookies that are necessary for the site to function (e.g. cart, session).

Optional analytics cookies (if enabled) are used only with your consent and can be disabled via your browser settings.

I do not place marketing or advertising cookies myself.

8️⃣ Security

I take appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access. Payment details are handled exclusively by certified payment providers.

9️⃣ International transfers

Your data may be processed outside the EU if required by payment processors or hosting providers (e.g. servers in the US). In such cases, I rely on contractual safeguards such as the EU Standard Contractual Clauses or providers certified under equivalent frameworks.

🔟 Updates

I may update this Privacy Policy from time to time to reflect legal or operational changes. The updated version will always be posted on this page.