Privacy policy

Data controller

L&S SAS, 38 rue Charles de Gaulle, 88200 Remiremont, France (SIREN 130 421 662), reachable at contact@loveandseed.fr.

Data collected and purposes

Order and delivery — first name, last name, postal address, email address, phone number. Legal basis: performance of the contract. This data is essential: without it the order cannot be fulfilled. Retention: for the duration of the commercial relationship, then ten years under accounting obligations.

Payment — no card data is collected or stored by us. It is handled directly by the payment provider.

Newsletter — email address only, and only if you sign up. Legal basis: consent, collected through double opt-in, meaning confirmed by a link sent to your address. Retention: until consent is withdrawn. Every email carries an unsubscribe link.

Audience measurement — aggregate traffic statistics, with no cookie and no individual identifier, and only after your explicit agreement. Legal basis: consent. Refusing changes nothing about how the site works.

Trackers set

No advertising tracker is used. Here is the complete inventory.

• lw_cart_id — cookie. Technical identifier for your cart, so it survives closing the browser. Duration: 30 days. Strictly functional, exempt from consent.
• NEXT_LOCALE — cookie set by the internationalisation engine to remember your chosen language. Duration: 1 year. Strictly functional, exempt from consent.
• lw.age.v1 — browser local storage. Remembers that you confirmed being an adult, so the question is not asked on every visit. Persistent until browser data is cleared. Strictly functional.
• lw.audience.v1 — browser local storage. Remembers your answer to the audience measurement banner. Persistent. Strictly functional. Card payment adds nothing to this list: it takes place on our provider's secure site, where you are redirected, and the trackers it uses for fraud prevention are set on its domain, not ours.

You can change your mind about audience measurement at any time: the "Manage audience measurement" link in the footer reopens the banner.

Processors

• IONOS SARL — site and database hosting. Data located in the European Union (Spain).
• Cloudflare, Inc. — DNS, protection, content delivery, and routing of mail received at contact@loveandseed.fr. European Union and United States.
• Viva Payments SA (Viva.com) — card payment processing. Greece, European Union.
• Resend — transactional email delivery (order confirmation, invoice, dispatch). European Union and United States.
• Brevo — newsletter management. European Union.

Transfers outside the European Union, where they occur, are covered by the European Commission's standard contractual clauses.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to give instructions concerning its fate after your death.

To exercise these rights, write to contact@loveandseed.fr. You will receive a reply within one month.

You may also lodge a complaint with the French data protection authority: cnil.fr.

Security

Exchanges with the site are encrypted over HTTPS. Database access is restricted and logged. No card data is stored on our servers.