Privacy policy

The website www.lesarcadiens.fr is operated by Les Arcadiens, a sole trader founded and run by Geoffrey Kazmierczak, controller of your personal data. This page explains what data we collect, why, who it is entrusted to and how long it is kept.

We have only one principle: to collect nothing beyond what an order needs. The site has no customer account and no advertising tracker. We do measure traffic, but with a cookie-free tool that tells us nothing about you personally (see point 2).

1 – The data we collect

When you place an order:

• Identity and contact: first name, last name, email address
• Delivery: the Mondial Relay pickup point you choose (name, address, postcode, town, country)
• Order: the items, the amounts, the date, the payment status

When you enter your email address in the checkout without completing it:

• Pending cart: your email address, the contents of the cart and its amount, so that we can write to you once and once only as a reminder (see point 3).

When you write to us from the contact or withdrawal form:

• Your request: first name, last name, email, subject, order reference, message, and the date of the request. If you write to us as a stockist, the name and town of your shop.

We never see your card details. Payment takes place entirely at Stripe: your card number does not pass through our site and we have no access to it.

We do not ask for your postal address, your date of birth or your telephone number.

2 – Cookies and traffic measurement

We set no advertising cookie, no analytics cookie and no tracking pixel. We do not carry out targeted advertising and share your data with no marketing partner.

We do, however, measure traffic with Plausible Analytics, a European tool we chose precisely because it works without following you: no cookie is set, no lasting identifier is assigned to you, your IP address is not kept, and nothing allows you to be recognised from one visit to the next or found on another site.

What we see is limited to counters: the number of visits, the pages viewed, the country, the type of device and the site that brought you here. This information is aggregated: it describes an audience, never a person. It is this absence of personal data that lets us use it without imposing a consent banner, in line with the criteria set by the French data protection authority for exempt traffic measurement.

The identifier of your payment, which appears in the address of the order confirmation page, is stripped before anything is sent to that tool.

Your cart is kept in your browser’s local storage (localStorage), on your device only: it is passed to no one until you place an order, and you can erase it by clearing the site data in your browser.

Stripe and Mondial Relay set their own technical cookies, needed for payment and for displaying the pickup point map.

3 – Why we use this data

• To process and deliver your order. Legal basis: performance of the contract of sale.
• To write to you about your order (confirmation, dispatch, tracking). Legal basis: performance of the contract.
• To remind you of a cart left pending, once and never more. Legal basis: our legitimate interest in recovering an interrupted order. Every message contains a one-click unsubscribe link, and you can object at any time by writing to us. An address already reminded is never contacted again.
• To answer your questions and handle your return or withdrawal requests. Legal basis: performance of the contract, and a legal obligation for withdrawal: the law requires us to keep its date, which is also what protects your own deadline.
• To meet our accounting and tax obligations. Legal basis: a legal obligation.
• To prevent payment fraud. Legal basis: our legitimate interest, implemented by Stripe.

We sign you up to no newsletter without your explicit agreement. The email field in the checkout serves only your order and the single reminder described above.

A checkbox, never pre-ticked, appears on our contact form: if you tick it, we send you news from the workshop a few times a year. Legal basis: your consent. We keep the date on which you gave it, because the law requires us to be able to evidence it. You can withdraw it at any time, in one click from any of those messages or by writing to us, without this affecting your orders.

4 – Who your data is entrusted to

We neither sell nor rent your data. It is entrusted only to the providers needed for an order, each acting as a processor:

• Stripe Payments Europe, Ltd. (Ireland): payment, fraud prevention, invoicing
• Mondial Relay (France): dispatch and delivery to the pickup point
• Supabase Inc.: hosting of the order database, within the European Union
• Vercel Inc. (United States): site hosting
• Resend: sending of order emails, from its European region (Ireland)
• Plausible Insights OÜ (Estonia): traffic measurement, data hosted within the European Union. We name it here for transparency: it receives neither your name, nor your email address, nor any data that identifies you.

Some of these providers are established in the United States. Any transfers are covered by the European Commission’s standard contractual clauses and, where applicable, by the Data Privacy Framework.

5 – How long we keep it

• Orders and invoices: 10 years, the period required by the French Commercial Code in accounting matters.
• Pending carts: 90 days, then deletion. An unsubscribed address is kept for as long as needed never to be contacted again.
• Contact requests: 3 years after the last exchange.
• Withdrawal requests: 5 years, the commercial limitation period. It is the date of your request that starts your rights running, and we must be able to evidence it.
• Newsletter consent: until it is withdrawn, then 3 years as evidence.

6 – Your rights

Under the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection to the processing of your data.

To exercise them, write to us at contact@lesarcadiens.fr. We reply within 30 days at most and may ask you for proof of identity if any doubt remains.

The right to erasure does not extend to invoices, which the law requires us to keep for 10 years.

If our reply does not satisfy you, you may refer the matter to the CNIL: www.cnil.fr. As a resident of the European Union you may equally refer it to the supervisory authority of your own country.

7 – Children’s data

Our site is not intended for children under 15. If you believe a minor has sent us personal data, write to us: we will delete it.

8 – Security

Exchanges with the site are encrypted (HTTPS). The order database is accessible only to the server, never from your browser. As no system is infallible, avoid sending us sensitive data over unsecured channels.

9 – Changes

This policy may change. The version in force is always the one published on this page, with its update date at the top.

10 – Contact us

Les Arcadiens
Sole trader, Geoffrey Kazmierczak
18 rue d’Hérouville
14000 Caen, France
Email: contact@lesarcadiens.fr
Tel: +33 2 61 53 71 37

11 – Governing language

This version is a translation. In the event of any discrepancy between language versions, the French version prevails.