Privacy policy

Controller

Tonio Bessa, sole trader, 118 rue de Paris, 94220 Charenton-le-Pont, France. For privacy questions or requests: bessa.tonio@gmail.com.

Data processed

Identity and contact details, delivery and billing addresses, order information, payment references, customer-service messages and technical data strictly required for security and operation may be processed. The website does not receive or store full card details.

Information required to fulfil and deliver an order is mandatory. Without it, the sale cannot be performed.

Purposes and legal bases

Data is processed to perform the contract: payment, production, inventory, delivery, confirmation, returns, refunds and customer service. Records are also retained for accounting and tax duties. Fraud prevention, security and the defence of legal rights rely on legitimate interests.

No newsletter is sent. The website uses neither Google Analytics, Meta Pixel nor behavioural advertising tools.

Recipients and transfers

Data is accessible to Tonio Bessa and, only as necessary, to Stripe, UPS or La Poste, any production provider, and technical providers required for hosting and operation.

Transfers outside the EEA rely on an adequacy decision or safeguards such as the European Commission’s standard contractual clauses.

Retention

Orders, invoices and accounting records are retained for ten years. Enquiries without an order are retained for no more than three years after the last contact. Data may be kept longer when required by law or a dispute.

Your rights

You may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests, by writing to bessa.tonio@gmail.com. Proof of identity may be requested only where there is reasonable doubt about identity.

You may also lodge a complaint with the CNIL at cnil.fr.

Cookies

Only cookies and trackers strictly necessary for operation, security and payment may be used without consent. No non-essential advertising or audience-measurement tracker is used as of the date of this policy.