Privacy & cookies

Data controller

[RAISON SOCIALE À COMPLÉTER], [ADRESSE DU SIÈGE SOCIAL], contact@vicaline.com.

Data collected

When creating an account: name, email, password (hashed, never stored in plain text).

When placing an order, with or without an account: name, shipping and billing address, email, order contents. No card details are collected or stored by VICALINE — payment is handled directly by Stripe.

Purpose and legal basis

This data is processed to fulfill orders (legal basis: performance of a contract), manage the customer account, and send order-related emails (confirmation, shipping, cancellation).

Retention period

Account data is kept for as long as the account exists. Invoice data is kept for 10 years under accounting obligations, even after account deletion.

Recipients

Stripe (payment), Resend (transactional emails), and the site's hosting provider. No data is sold to third parties.

Your rights

Under GDPR, you have the right to access, rectify, erase, port and object to your data. You may exercise these rights at contact@vicaline.com, or delete your account directly from your customer space.

Cookies

The site uses cookies strictly necessary for it to function (cart, login), set without prior consent as they are essential to the service.

Any audience-measurement or tracking cookie would only be set after your explicit consent via the banner shown at the bottom of the page, which you can accept or refuse in a single click.