Privacy policy
This translation is provided for convenience only. In the event of any discrepancy, the French version shall prevail.
Last updated: 26 October 2026
1. Who is responsible for your data?
The data controller is SARL VALANDRE, a French limited liability company with share capital of €105,000, whose registered office is at Grande Versane, 11340 Belcaire, France, registered with the Carcassonne Trade and Companies Register (RCS) under number 343 490 538, represented by Ms Laurence Fauché, Manager (hereinafter “Valandré”, “we”).
For any question about your personal data or to exercise your rights: postbox@valandre.com, by post to SARL VALANDRE — Grande Versane — 11340 Belcaire, France, or by telephone on +33 (0)4 68 20 37 15. Valandré has not appointed a data protection officer, as this is not mandatory for its activity.
2. What data do we collect?
- Identity and contact details: surname, first name, delivery and billing addresses, email address, telephone number.
- Orders: products purchased, amounts, order history, returns, warranty and aftercare requests.
- Payment: payment method used and payment status. Card numbers are processed directly by our payment providers: Valandré never has access to them.
- Customer account: login email address (you log in with a code sent by email), preferences.
- Communications: messages sent via our contact and aftercare forms, the site's chat or by email.
- Customer reviews: the name or pseudonym displayed, rating, text and photos that you publish.
- Browsing: IP address, device and browser type, pages viewed, and cookies according to your choices (see our Cookie Policy).
- Newsletter: email address, language, preferences, email opens and clicks.
The information marked as mandatory when you order is needed to process your order: without it, we cannot deliver or invoice you.
3. Why, and on what legal basis?
| Purpose | Legal basis |
|---|---|
| Processing your orders: payment, delivery, invoice, tracking, returns, withdrawal | Performance of the contract of sale |
| Managing your customer account | Performance of the contract |
| Warranty, aftercare, repairs, down refills | Performance of the contract and legal obligations (legal guarantees) |
| Answering your requests (forms, chat, email) | Pre-contractual measures taken at your request, or legitimate interest in answering you |
| Keeping our accounts and retaining invoices | Legal obligation |
| Securing payments and preventing fraud | Legitimate interest |
| Sending you our newsletter and offers by email, including reminders about unfinished carts, if you are not a customer | Your consent |
| Sending you, if you are a customer, information and offers about Valandré products or services similar to those you have bought (care advice, aftercare, new products) | Legitimate interest (Article L. 34-5 of the French Postal and Electronic Communications Code); you may object at any time, free of charge |
| Inviting you to review a product you have bought | Legitimate interest; you may object at any time |
| Audience measurement and online advertising | Your consent (cookie banner) |
| Managing disputes and asserting our rights | Legitimate interest |
4. Who receives your data?
Your data is intended for authorised Valandré staff. Insofar as it concerns them, it is also passed on to our service providers, who act on our instructions:
- Shopify (shop hosting, payment via Shopify Payments, customer account, chat);
- Klarna (payment in instalments, if you choose it; Klarna may also act as a controller for its own assessment);
- La Poste / Colissimo (delivery);
- Klaviyo (sending our emails);
- Judge.me (collecting and displaying customer reviews);
- Order Printer Pro (generating invoices);
- our chartered accountant, and administrative or judicial authorities where required by law.
When you use Shop Pay or the Shop app, Shopify acts as a separate controller: see privacy.shopify.com.
We never sell or rent out your data.
5. Transfers outside the European Union
Some service providers (in particular Shopify in Canada and Klaviyo in the United States) may process your data outside the European Union. These transfers are covered by an adequacy decision of the European Commission (Canada; the EU–US Data Privacy Framework for certified companies) or by the European Commission's standard contractual clauses.
6. How long do we keep your data?
- Customer data: for the duration of our business relationship, then for 3 years after your last purchase so that we can send you our news.
- Prospects (newsletter subscribers who have not made a purchase): 3 years after your last contact with us.
- Invoices and accounting records: 10 years (Article L. 123-22 of the French Commercial Code).
- Contracts of sale of €120 or more: 10 years from delivery (Article L. 213-1 of the French Consumer Code); proof of other transactions: 5 years.
- Customer account: until it is deleted at your request, or after 3 years of inactivity.
- Contact and aftercare requests: for as long as it takes to handle them, then 3 years.
- Customer reviews: for as long as they are published, or until you ask for them to be deleted.
- Cookies: from 14 days to 2 years depending on the cookie (details in our Cookie Policy); your cookie choice is remembered for 1 year at most.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing and portability of your data, and the right to object, in particular at any time and without giving reasons to direct marketing. Where processing is based on your consent, you may withdraw it at any time. You may also give instructions as to what should happen to your data after your death (Article 85 of the French Data Protection Act, loi Informatique et Libertés).
To exercise these rights, email us at postbox@valandre.com or write to us at the address above. We reply within one month. We may ask you for proof of identity if we have reasonable doubts. Every marketing email also contains an unsubscribe link.
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.
If you give us your telephone number, you can register free of charge on Bloctel, the French opt-out list for telephone marketing: www.bloctel.gouv.fr.
8. Cookies
The cookies and trackers used on the site, and how to manage them, are described in our Cookie Policy. You can change your choices at any time using the “Cookie settings” link at the bottom of every page.
9. Security
The site is fully encrypted (HTTPS) and payments are processed by certified providers. Access to your data is restricted to the people who need it.
10. Minors
The site is intended for adults. We do not knowingly collect data relating to minors. If you are the parent of a minor who has given us data, contact us to have it deleted.
11. Changes to this policy
We may amend this policy, for example to adapt it to a new service. The date of the last update is shown at the top of the page.