Privacy Policy

Isabelle Lenfant, Rue Vilain XIIII 29, 1000 Brussels, Belgium (company number 0880.674.777), is responsible for your personal data. For any question about it, write to isabellelenfant@gmail.com.

To process and deliver your order, we keep your name, email address, phone number, delivery address, the pieces ordered, the amount, the means of payment and, for a bank transfer, its structured communication. We never see your card details: they go to PayPal only.

We need this information to perform the sale. We keep orders for seven years, as Belgian accounting law requires; after that, they are deleted.

If you open an account, we keep your email address, and your name and phone number if you give them, so that you can find your orders. You sign in with a link sent by email: there is no password to keep.

You can delete your account at any time from its page. Your orders are then kept, detached from your account, for the accounting period above.

If you subscribe, we keep your email address to send you our news, and nothing else. You can unsubscribe at any time, from any newsletter or by writing to us; your address is then deleted.

When you write to us through the contact form, we keep your name, email address, phone number if given, and your message, to answer you. We delete them at the latest two years after our last exchange.

We only measure the audience of the website if you accept it in the cookie banner; if you refuse, nothing is loaded. Our cookie policy explains what is measured, by whom, and how to change your choice at any time.

Only the companies that help us run the shop, each for its own task: IKOULA, which hosts the website; Supabase, which stores its database; PayPal, if you pay with PayPal; Resend, which sends our emails; Google, only if you accept audience measurement; and the carrier that delivers your parcel, which receives your name, address and phone number.

Some of them are based outside the European Union, in the United States. Your data is then protected by the guarantees the law requires: the EU–US Data Privacy Framework, or the standard contractual clauses of the European Commission.

We never sell your data, and never pass it on for advertising.

Connections to the website are encrypted. Access to the shop's administration is reserved to the people who run it, each with their own account and a second factor of authentication, and every connection is recorded.

You may ask to see the data we keep about you, to correct it, to delete it, to limit its use, to receive it in a common format, or to object to its use. You may withdraw a consent at any time — for the newsletter or for audience measurement — without affecting what was done before.

Write to isabellelenfant@gmail.com: we answer within a month. If you think your rights are not respected, you may lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données), Rue de la Presse 35, 1000 Brussels — dataprotectionauthority.be.

We may update this policy when the website changes. The date at the top says which version is in force.