Privacy
Last updated: [DATE — e.g. 21 September 2026]
This policy explains what personal data Vetma collects, why, and what rights you have over it. It is written to comply with the GDPR (EU Regulation 2016/679) and the French Data Protection Act.
Who is responsible
[YOUR FULL NAME], sole trader, is the data controller.
SIRET: [YOUR SIRET NUMBER]
Address: [YOUR ADDRESS]
Contact for any data question: contact@vetma.fr
What we collect, and why
When you place an order
We collect your name, email address, delivery and billing address, phone number if you give one, and the details of your order.
Why: to process your order, ship it, invoice it and provide after-sales service.
Legal basis: performance of the contract between us.
How long: the duration of the commercial relationship, then archived for 10 years to meet our accounting obligations (article L123-22 of the Code de commerce).
When you pay
Your payment details are collected and processed directly by our payment provider. Vetma never sees, receives or stores your card number.
Legal basis: performance of the contract.
How long: as set by the payment provider; we keep only the transaction reference.
When you subscribe to the newsletter
We collect your email address.
Why: to tell you about new releases, restocks and the progress of the book.
Legal basis: your consent, which you give by subscribing.
How long: until you unsubscribe, or after three years without any interaction.
Every email we send contains an unsubscribe link. One click is enough, and you do not have to give a reason.
When you create an account
We collect your email address and the details you choose to save. Customer accounts are provided by Shopify: you sign in with a code sent to your email, and no password is stored.
Legal basis: performance of the contract.
How long: until you ask us to delete your account.
When you write to us
We keep the content of your message and your email address, so we can answer and keep track of the matter.
Legal basis: our legitimate interest in answering you.
How long: three years from our last exchange.
When you browse the site
Our hosting provider records technical data — IP address, browser, pages visited — needed to serve the site and keep it secure.
Legal basis: our legitimate interest in operating and securing the site.
How long: up to 12 months.
Cookies
We use only the cookies strictly necessary for the site to work: keeping your basket between pages, keeping you signed in, and security. These do not require your consent under French law (article 82 of the Data Protection Act).
We do not use advertising or audience-tracking cookies. No Google Analytics, no advertising pixel, no third-party tracker.
If this ever changes, we will ask for your consent through a cookie banner before any such cookie is placed, and this page will be updated first.
Who has access to your data
We never sell your data, and we never share it for someone else's marketing. We share it only with the providers we need to run the shop:
| Provider | Purpose | Location |
|---|---|---|
| Shopify | Shop platform, hosting, customer accounts, payments | Canada / EU — standard contractual clauses |
| Carriers (La Poste / Colissimo, and partners) | Delivery of your order | France / EU |
| [EMAIL PROVIDER, if you use one — e.g. Klaviyo, Mailchimp] | Sending the newsletter | [TO COMPLETE] |
Where a provider is outside the European Union, the transfer is covered by the European Commission's standard contractual clauses or an adequacy decision.
Your rights
Under the GDPR you may at any time:
- Access the data we hold about you, and get a copy.
- Correct anything inaccurate or incomplete.
- Delete your data, where we have no legal obligation to keep it (invoices must be kept 10 years).
- Restrict or object to our use of it, in particular for marketing.
- Receive your data in a portable, machine-readable format.
- Withdraw your consent at any time, where consent is the basis we rely on.
Write to contact@vetma.fr. We answer within one month. We may ask you to confirm your identity if there is any doubt.
Complaints
If you believe we are mishandling your data, you may lodge a complaint with the French supervisory authority:
CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
www.cnil.fr
Security
The whole site is served over HTTPS, so everything you send is encrypted in transit. Payments are handled by a certified provider and card details never reach our systems. Access to customer data is limited to what is needed to run the shop.
Children
This shop is not intended for children under 15. We do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.
Changes
If we change this policy, the new version is published on this page with a new date. Significant changes affecting how we use your data will be announced by email to subscribers.