Privacy Policy

This privacy policy informs users of letapisdelaine.fr about how their personal data is collected, used and protected, in accordance with the General Data Protection Regulation (GDPR).

The website is an online shop selling wool mats and textile articles. Data is collected for order and delivery management, customer relations, sending commercial communications with your consent, audience measurement and website security.

Data controller: Le Tapis de Laine, SASU with a share capital of €1,000, registered office at 77 boulevard Maurice Fournol, 12400 Saint-Affrique, France — SIREN 931 999 221, RCS Rodez, represented by its President, Mr Thomas Mogharaei. Contact: contact@letapisdelaine.fr.

1. Personal data collected

We may collect the following categories of data:

• Identification and contact data: surname, first name, e-mail address, telephone number.
• Order and delivery data: delivery and billing addresses, order contents, purchase history.
• Payment data: transactions are processed by secure payment providers; we do not store card numbers.
• Browsing data: IP address, browser type, pages visited, cookies and trackers.
• E-mail interaction data: message opens, date and time, device type (via tracking pixels).

No decision producing legal effects is taken solely on the basis of automated processing, and we do not collect sensitive data.

2. Purposes of processing

Your data is processed for: managing and tracking your orders and their delivery; customer relations and after-sales service; sending commercial communications and our newsletter with your consent; complying with our legal, tax and accounting obligations; audience measurement, website improvement and fraud prevention.

3. Legal bases

• Performance of the contract (Art. 6(1)(b)) for managing orders, deliveries and customer service.
• Consent (Art. 6(1)(a)) for the newsletter, commercial communications and non-essential cookies, withdrawable at any time.
• Legal obligation (Art. 6(1)(c)) for retaining invoices and accounting documents.
• Legitimate interest (Art. 6(1)(f)) for audience measurement, service improvement and fraud prevention.

4. Cookies and trackers

Cookies strictly necessary for the operation of the website do not require your consent. Audience-measurement, personalisation and advertising cookies are only set after your consent via the dedicated banner, which you can change or withdraw at any time. Cookies are kept for no longer than 13 months.

5. Processors, recipients and data transfers

We use processors who access your data only as needed for their services (Art. 28 GDPR):

• Shopify: shop hosting, order and payment management.
• Payment providers (including Shopify Payments): secure transaction processing.
• Sendcloud and partner carriers: shipping and delivery tracking.
• Klaviyo: sending our e-mails and newsletter.
• Google Analytics: audience measurement.

Your data is neither sold nor rented. As some providers are established outside the European Union (United States, Canada), your data may be transferred subject to appropriate safeguards (European Commission standard contractual clauses or the EU–US Data Privacy Framework).

6. Retention periods

• Order and billing data: duration of the commercial relationship, then legal archiving (up to 10 years for accounting records).
• Marketing data (newsletter): until unsubscription; contacts inactive for more than 3 years are deleted.
• Browsing data and cookies: 13 months maximum.

7. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw your consent at any time. To exercise them, write to contact@letapisdelaine.fr or to the registered office; proof of identity may be requested and we will reply within one month. You also have the right to lodge a complaint with a supervisory authority — in France the CNIL (www.cnil.fr) or the data protection authority of your country of residence.

8. Minors

The website is not intended for minors under 16, who may not consent alone to the processing of their data without the authorisation of the holder of parental responsibility.

9. Security

We implement reasonable technical and organisational measures to protect your data. Exchanges with the website are encrypted (HTTPS/SSL).

10. Contact

Le Tapis de Laine — 77 boulevard Maurice Fournol, 12400 Saint-Affrique, France. E-mail: contact@letapisdelaine.fr.

Last updated: 5 August 2026.