Privacy policy

[RAISON SOCIALE — à compléter], [FORME JURIDIQUE — ex. SASU, auto-entrepreneur], registered at [ADRESSE DU SIÈGE — à compléter] under [SIRET / RCS — à compléter], is the data controller for this site.

For anything on this page, write to hello@lifewithmycompanion.com. A person answers within one business day.

When you order: your name, e-mail address, delivery address, phone number if you give one, and the contents and value of your order. We never see your card number — it is entered on PayPal's own systems and never reaches ours.

When you create an account: the above, plus a password that is stored only as a cryptographic hash, and the personalisation names you ask us to engrave.

When you sign in with Google: your name, e-mail address and Google account identifier. Nothing else from your Google account.

In your browser: your basket, your wishlist and your language, kept in local storage on your device. These never reach our servers until you order.

Automatically: page views and performance timings, collected without cookies and without any identifier that can single you out.

To perform the contract you entered into when ordering: name, address, order contents. Without them there is no parcel.

To meet legal obligations: invoices and accounting records, which tax law requires us to keep.

On our legitimate interest in a working shop: fraud prevention, and audience measurement that does not identify you.

On your consent, which you may withdraw at any time: nothing today, because we do not run marketing e-mails or advertising cookies.

PayPal (USA) — takes the payment. It receives your name, e-mail and the amount. PayPal is a controller in its own right for what it does with that.

CJ Dropshipping (China) — packs and posts your order. It receives your name, delivery address, phone number and what you bought. Nothing else.

Supabase (USA, Amazon eu/us regions) — stores your account, orders and group buys.

Resend (USA) — sends the receipt and the tracking e-mail.

Vercel (USA) — hosts the site and measures page performance.

We never sell your data, and we never rent it.

Your order is fulfilled from China and your data is stored in the United States, so it leaves the European Economic Area. These transfers rest on the European Commission's standard contractual clauses signed with each processor.

This is not a formality: your delivery address genuinely travels to a warehouse in China, because that is where the parcel is packed. If that is not acceptable to you, please do not order.

Orders and invoices: ten years, as accounting law requires.

Account and address book: until you delete your account, then thirty days in backups.

Group buys: twelve months after the group closes.

Browser storage: until you clear it, or two years, whichever comes first.

You may ask us for a copy of everything we hold, correct anything wrong, have it erased, restrict what we do with it, receive it in a portable format, or object to processing based on legitimate interest.

Write to hello@lifewithmycompanion.com and say what you want. We reply within one month. We may ask you to confirm who you are, but only if there is real doubt.

If we handle it badly, you can complain to the CNIL (cnil.fr) or to the supervisory authority where you live.

We set no advertising or tracking cookies, so there is no consent banner to click away.

Signing in stores a session cookie. It is strictly necessary — without it you would be signed out on every page — and it disappears when you sign out.

Traffic runs over HTTPS. Passwords are hashed. Access to the database is restricted row by row, so one customer's session cannot read another customer's orders.

If a breach ever puts you at risk, we will tell you and the CNIL within 72 hours of finding out.