Privacy Policy

Data controller

Personal data collected on nellsechoes.com is processed by Nazha EL ANSARI LORIDAN EI (Dr Nell), 63 rue de la République, 59360 Le Cateau-Cambrésis, France and contact@nellsechoes.com

Data collected and purposes

• Customer account: email address and preferred language, for logging in and accessing purchases (performance of the contract).
• Orders: name, email address, delivery address and order details, for the purposes of processing, delivering and tracking orders (performance of the contract), and for accounting purposes (legal obligation).
• Payments: processed by Stripe; the seller neither receives nor stores any card details.
• Membership: membership packages, terms and conditions, and payment deadlines, to manage subscriptions and send renewal reminders (contract fulfilment, legal obligation).
• Price enquiries, tenders and auctions: name, email address and message or bid, so that we can respond (pre-contractual measures, legitimate interest).
• Leave a comment: email address and an optional message, to say thank you and for record-keeping purposes.
• Country of connection: determined from the IP address by the host at the time of the visit, only to apply the restrictions linked to international sanctions (legal obligation and legitimate interest); it is not stored.

No data is sold or used for advertising purposes.

Recipients and subcontractors

The data is accessible only to the seller and to service providers necessary for the operation of the website:

• Vercel Inc. (website hosting);
• Supabase, Inc. (database, accounts, files);
• Stripe (payments);
• Resend (sending emails);
• Gelato (printing and dispatch of prints: name and delivery address);
• Google Meet (live sessions: join link only).

Some of these service providers are based outside the European Union, notably in the United States. Data transfers are governed by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

Retention periods

• Customer account: until it is deleted by the user, from their customer area or on simple request by email. Related orders and payments are then kept with only the email address, for the legal period stated below.
• Invoices and accounting documents: for the statutory retention period (up to 10 years).
• Quotation requests and applications: 3 years after the last exchange.
• Membership: for the duration of the membership, and thereafter in accordance with accounting requirements.

Cookies and local storage

The website does not use any advertising cookies or audience measurement tools. It uses only:

• session cookies required to log in to your account;
• a cookie that remembers the chosen language;
• local browser storage to retain the contents of the shopping basket.

These elements are strictly necessary for the website to function and do not require consent.

Your rights

You have the right to access, rectify, erase, restrict the processing of, object to and transfer your data, as well as the right to set out instructions regarding what should happen to your data after your death. To exercise these rights, please write to contact@nellsechoes.com

You can lodge a complaint with the CNIL (www.cnil.fr).