This page explains which data the shop uses, why, for how long and with which service providers. For any request, write to rgpd@loremipsum.re.
Data controller
Nathan Lannes, sole proprietor, trading as Lorem Ipsum Réunion. Chemin des Grevilléas, 97490 Sainte-Clotilde, Reunion Island.
Data used
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Order, production, shipping, customer service | Name, addresses, email, phone, products ordered | Performance of the contract | 3 years after the last purchase. Invoices kept for 10 years. |
| Customer account and loyalty points | Login details, order history, points balance | Performance of the contract | Until the account is deleted, or 3 years without an order |
| Payment | Payment data processed by Stripe or PayPal | Performance of the contract | According to Stripe's and PayPal's rules |
| Newsletter | Email address | Consent | Until you unsubscribe |
| Audience measurement | Pages viewed, device, browsing data | Consent given in the cookie banner | 13 months maximum |
| Browsing analysis | Clicks, scrolling, mouse movements, pages viewed, device, IP address | Consent given in the cookie banner | 13 months maximum |
The shop never receives any card number.
Service providers
These providers receive the data they need for their task.
- Printful: production and shipping of products. Name, shipping address, phone and email.
- Carriers: parcel delivery. Name, address and phone.
- Stripe and PayPal: payment and fraud prevention.
- OVHcloud: website hosting in France.
- Google (Analytics): audience measurement, with your consent.
- Microsoft (Clarity): browsing analysis, with your consent.
Printful, Stripe, PayPal, Google and Microsoft may process data outside the European Union, in particular in the United States. These transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.
Your rights
You can request access to, correction, deletion or portability of your data. You can also object to its use, restrict its use, withdraw your consent and give instructions for after your death.
Write to rgpd@loremipsum.re. If you disagree, you can file a complaint with the CNIL.
Cookies
Audience measurement and order origin cookies are only set with your consent. Your choice is kept for 6 months. The other cookies are used for the cart, the account and payment.
| Cookie | Purpose | Retention | Consent required |
|---|---|---|---|
| li_cookies | Keeps your cookie choice | 6 months | No |
| wp_consent_* | Passes your choice on to the shop's plugins | 6 months | No |
| wp_woocommerce_session_*, woocommerce_cart_hash, woocommerce_items_in_cart | Cart and checkout | 2 days | No |
| wordpress_logged_in_*, wordpress_sec_* | Customer account login | End of visit, or 14 days with “Remember me” | No |
| __stripe_mid, __stripe_sid | Payment and fraud prevention, by Stripe | 1 year and 30 minutes | No |
| sbjs_* | Visit origin linked to the order, by WooCommerce | End of visit | Yes |
| _ga, _ga_* | Audience measurement, by Google Analytics | 13 months | Yes |
| _clck, _clsk | Browsing analysis, by Microsoft Clarity | 1 year and 1 day | Yes |
PayPal sets its own cookies on its website during payment.