Privacy & cookies

Data controller

VICALINE, 22 avenue du Général de Gaulle, 14800 Deauville, France, contact@vicaline.com.

Data collected

When creating an account: name, email, password (hashed, never stored in plain text).

When placing an order, with or without an account: name, shipping and billing address, email, order contents. No card details are collected or stored by VICALINE — payment is handled directly by Stripe.

Purpose and legal basis

This data is processed to fulfill orders (legal basis: performance of a contract), manage the customer account, and send order-related emails (confirmation, shipping, cancellation).

Retention period

Account data is kept for as long as the account exists. Invoice data is kept for 10 years under accounting obligations, even after account deletion.

Recipients

Stripe (payment), Resend (transactional emails), and the site's hosting provider. No data is sold to third parties.

Your rights

Under GDPR, you have the right to access, rectify, erase, port and object to your data. You may exercise these rights at contact@vicaline.com, or delete your account directly from your customer space.

Cookies and local storage

The site stores three technical items on your device, each necessary for it to work: a session token (cookie), set only after you log into your account, which keeps you signed in for 7 days; the contents of your cart (browser local storage), holding only the items and quantities you chose; and your day/evening display preference (browser local storage).

None of these are used to track you, build a profile, or serve advertising — which is why no consent is required to set them, under the exemption for what is strictly necessary to the service you request.

You can clear them at any time from your browser's settings (cookies and site data); doing so will sign you out and empty your cart.