Privacy Policy
Last updated: March 29, 2026
1. Data controller
Léa Victoria CORTES
Sole proprietorship — Artisan florist
R.M. no. 842 745 754 00031
151 Avenue de Castres, 31500 Toulouse, France
Email: atelier.poesiefleurie@gmail.com
Phone: +33 6 11 58 13 37
2. Data collected
Contact form
- Last name, first name, email address, phone number
- Subject and content of the message
- Any attachments
- IP address (connection logs)
Online order
- Last name, first name, email address, phone number
- Delivery address where applicable
- Payment data — processed directly by Stripe; we do not access your bank details
- Order history (items, amounts, date)
Browsing
Anonymous and aggregated traffic statistics are collected (visited pages, device type, region). This data does not allow us to identify you individually and does not require prior consent.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to your contact request | Legitimate interest (Art. 6.1.f) |
| Fulfilling an order | Performance of a contract (Art. 6.1.b) |
| Invoicing and accounting | Legal obligation (Art. 6.1.c) |
| Sending transactional emails | Performance of a contract / Legitimate interest (Art. 6.1.b / Art. 6.1.f) |
| Anonymous traffic statistics | Anonymised data — outside the scope of GDPR |
| Security and proper operation of the Website | Legitimate interest (Art. 6.1.f) |
4. Recipients
Your data is never sold. It may only be shared with the following service providers, strictly for the purposes described above:
- Stripe, Inc. — secure payment processing. Privacy policy
- Email service provider — sending order confirmations and contact replies
- Hosting provider — website hosting and file storage, with servers located in Europe
5. Retention periods
| Category | Period |
|---|---|
| Contact requests | 3 years from the last interaction |
| Order data | 5 years (commercial limitation period) + 10 years for accounting records |
| Form attachments | For the time needed to process the request, then deleted |
| Connection logs (IP addresses) | 12 months (French Law no. 2004-575) |
6. Cookies
The Website only uses cookies that are strictly necessary for its operation:
- Stripe session cookie — required for payment processing, session duration
No advertising or third-party tracking cookies are placed. Traffic statistics are collected without cookies.
7. Your rights
In accordance with the GDPR, you have the following rights over your personal data:
- Right of access — obtain a copy of your data
- Right to rectification — correct inaccurate data
- Right to erasure — request deletion of your data
- Right to restriction — restrict processing
- Right to portability — receive your data in a structured format
- Right to object — object to processing based on legitimate interest
To exercise these rights, contact us at atelier.poesiefleurie@gmail.com. We will respond within one month.
You may also lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr.
8. Changes
We reserve the right to update this policy at any time. The last updated date is shown at the top of this page.