Privacy policy

1. Data controller

When using the website lpbb.fr, the controller of personal data is:

Les P'tits Bouts d'Bois (LPBB) — micro-enterprise
Entrepreneur: MEEDER Yann
Address: 17 Grand Rue, 67700 Haegen — France
SIREN: 893 269 316
Telephone: +33 6 80 13 25 77
Email address: Write to us

For any question about the collection or use of your personal data, or to exercise your rights, you can contact LPBB at the email address above.

2. Personal data collected

The website lpbb.fr only collects the data needed for it to operate, in particular:

• surname, first name and contact details;
• information relating to orders, delivery and invoicing;
• customer account data, where applicable;
• for digital manufacturing plans: your name, email address and order reference are printed at the foot of the file's pages, and the number of downloads is recorded;
• for gift vouchers: the recipient's name and the message you enter, printed on the voucher;
• messages sent through the forms or by email;
• certain technical data and cookies necessary for the operation of the site.

Full bank details are not kept by LPBB: card payments are processed by Stripe, and your card details are entered directly with Stripe, without ever passing through the site.

3. Use of data

Personal data is used only to:

• manage orders, payments, deliveries and customer accounts;
• reply to contact requests;
• meet accounting and legal obligations;
• ensure the operation and security of the site;
• manage cookies that require the user's consent.

Depending on the case, this processing is based on the performance of a contract, a legal obligation, LPBB's legitimate interest or the user's consent.

4. Retention period

Personal data is kept only for as long as necessary for its use. Data relating to orders and invoicing is kept for the applicable statutory period, in particular 10 years for accounting documents. Other data is deleted or anonymised when it is no longer needed.

5. Recipients of data

Personal data is accessible only to LPBB and, where necessary, to its technical, payment, delivery or accounting providers. These providers only access the data needed for their task and must ensure its confidentiality and security.

The site uses the following providers in particular:

• Cloudflare, Inc. (Turnstile service): anti-robot check of the contact form. When the form is displayed, it receives the IP address and technical characteristics of the browser.
• Google LLC (Google Analytics service): audience measurement, only if you have accepted it.
• API Adresse and API Géo (French government services): help with entering the address, town and postcode when ordering. They receive the text entered and the IP address.
• Stripe Payments Europe, Ltd. (Ireland) and its parent company Stripe, Inc. (United States): card payment. Stripe receives the card data, the amount, the order reference, the email address and the IP address, and carries out fraud prevention on its own behalf. Its script is loaded only on the payment page.
• Mondial Relay (with the Leaflet map from unpkg.com and the OpenStreetMap base map): choice of the pick-up point when ordering. They receive the postcode, town, country and IP address.
• Meta Platforms Ireland Limited (Instagram): playback of the Instagram videos on the « Bois de bout & entretien » page. As soon as the page is displayed, Instagram receives the IP address and technical characteristics of the browser and may place its own cookies.

Cloudflare, Google, Meta Platforms, Inc. and Stripe, Inc. are established in the United States. The corresponding data transfers are covered by the EU–US Data Privacy Framework, under which they are certified.

6. Your rights

In accordance with the applicable regulations, you may request access to, rectification or erasure of your data, request that its processing be restricted, or object to certain processing. You can exercise your rights by writing to: Write to us. In case of difficulty, you may also lodge a complaint with the CNIL, the French data protection authority.

7. Cookies

The website lpbb.fr uses cookies that are necessary for its operation. Non-essential cookies are only placed after you have given your consent. You can accept all, refuse all or customise your choices from the banner provided for this purpose. Your preferences can be changed at any time using the cookie management tool available on the site.

The anti-robot check of the contact form (Cloudflare Turnstile) does not place any cookie. It is necessary for the security of the form, is based on LPBB's legitimate interest and is not subject to consent.

On the payment page, Stripe may place cookies (« __stripe_mid », « __stripe_sid ») that are necessary for payment security and fraud prevention. As they are essential to the service requested, they are not subject to consent.

Audience measurement (Google Analytics) is only enabled with your consent. It places the cookies « _ga » and « _ga_… », kept for 13 months at most. If you withdraw your consent, these cookies are deleted.

The Instagram videos on the « Bois de bout & entretien » page are provided directly by Instagram: displaying them may place Instagram cookies, regardless of your choice in the banner. Their use is governed by Instagram's privacy policy, and you can avoid them by not visiting that page or by blocking third-party content in your browser.

Your choice is stored in your browser.

8. Data security

LPBB implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. The providers used for the operation of the site must also ensure a level of security appropriate to the data they process.

9. Updates to this policy

This privacy policy may be amended to reflect changes to the site or to the applicable regulations. The version in force is the one published on lpbb.fr.