Privacy Policy

Politique de confidentialité (RGPD) — last updated 5 August 2026.

Who is responsible

Maximilien Bozon, entrepreneur individuel (EI), SIRET 990 603 094 00014, is the data controller (responsable de traitement) for the processing described here. Full details are on the Legal Notice page.

For anything on this page, write to Maximilien.bozon@gmail.com.

What we collect, and when

If you just browse, we do not collect anything about you. There is no analytics, no tracking pixel and no advertising on this site.

If you buy something, the checkout is handled by Stripe, who collect your name, email address, delivery address, phone number and payment details. Your card details go to Stripe and never touch our server. Stripe passes back to us everything except the card details, and we keep that record so we can send your order and answer questions about it.

If you email us, we keep the correspondence so we can deal with your query.

Legal basis for processing

• Performance of a contract (art. 6(1)(b) GDPR) — we cannot post you a notebook without your address, or confirm your order without your email.
• Legal obligation (art. 6(1)(c)) — accounting and tax records must be kept.
• Legitimate interests (art. 6(1)(f)) — keeping a record of orders so we can handle returns, refunds and support.

We send no marketing email, so we do not rely on consent for it. We never sell or share your data with anyone for their own purposes.

Who else processes it

• Stripe — payment processing and checkout, and a controller of your payment data in its own right.
• Resend — sends your order confirmation email; handles your name, email address and order contents.
• Railway — hosts the site and the order records.
• Google Fonts — the site loads its typefaces from Google, which means your IP address reaches Google's servers when a page loads.

How long we keep it

Order and invoicing records are kept for 10 years, the retention period required for accounting records by article L123-22 of the Code de commerce. Email correspondence is kept for two years. After that it is deleted.

Cookies and local storage

We set no tracking or advertising cookies, which is why you have not been asked to accept any. The site stores two things in your own browser, both strictly necessary and neither shared with us or anyone else: your shopping cart, so it survives moving between pages, and a note that you have already been shown the page-browsing invitation, so it does not reappear all session. Clearing your browser data removes both.

Stripe sets its own cookies on the checkout page, including for fraud prevention.

Your rights

Under the RGPD you have the right of access, rectification, erasure, restriction of processing, portability, and objection to processing. Email us and we will respond within one month.

If you are not satisfied, you may lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.

Note that we cannot delete a record we are legally required to retain for accounting purposes until that period expires.

Where your data is held

Stripe, Resend and Railway are established in the United States and may process data there. Those transfers rely on the safeguards each provider has in place, such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

Back to VetCo