Petunia Chatterton Editions ("we", "us") respects your privacy. This policy explains what personal data we collect when you use our website and personalized book service, why we collect it, how we use it, and the rights you have over it under the EU General Data Protection Regulation (GDPR) and applicable French data-protection law.
1. Who we are
Petunia Chatterton Editions is the data controller for the personal data described in this policy. You can contact us at any time at contact@petuniachatterton.com.
2. What data we collect
We collect (a) account data — your first name, last name, email address, and password (stored as a salted hash); (b) order data — the personalisation details you provide for each book (e.g. child's first name and pronouns), the shipping address and phone number, and the contents of your orders; (c) communication data — messages you send via our contact form or by email; (d) technical data — IP address, browser type, and pages visited, collected via essential cookies and standard server logs.
3. Why we use it
We use your data to (a) create and personalise the books you order; (b) take payment via our payment processor (Stripe) and ship via our print partner (Gelato); (c) respond to your support requests; (d) send you transactional emails (order confirmation, shipping, refund); (e) comply with our legal obligations (accounting, tax, consumer protection).
4. Legal basis
We rely on (a) the performance of our contract with you for order processing and account management; (b) your consent for the optional newsletter; (c) our legitimate interest in answering support requests; (d) legal obligation for invoicing and tax records.
5. Who we share it with
We share data only with the processors strictly necessary to deliver our service: Stripe (payment), Gelato (print and shipping), our email provider (transactional and newsletter emails), and our cloud hosting provider. We never sell your data and we do not share it with advertisers.
6. How long we keep it
We keep account data for as long as your account is active and for up to 3 years after the last activity. Order and invoice data is kept for 10 years to meet French accounting law. Contact-form messages are kept for up to 1 year.
7. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. You can exercise these rights at any time by emailing contact@petuniachatterton.com. You also have the right to lodge a complaint with the French data-protection authority, the CNIL (www.cnil.fr).
8. Cookies
We use only the cookies strictly necessary to run the site (session, language preference, cart). We do not use third-party advertising or tracking cookies.
9. Changes
We may update this policy from time to time. The "Last updated" date above always reflects the current version. Material changes will be announced by email to active customers.