Privacy Policy
This privacy policy explains how www.vanilha-noire.com collects, uses and protects the personal data of its users, in accordance with the General Data Protection Regulation (GDPR) and applicable French data protection law.
Data controller
The controller for the personal data collected on this site is IDEERP LLC, operating under the Vanilha Noire brand — see the full publisher details in our legal notice. For any question, contact us at contact@vanilha-noire.com.
Data Protection Officer
Given the nature and volume of the processing carried out, IDEERP LLC is not required to appoint a Data Protection Officer under Article 37 of the GDPR. Any request regarding your personal data may be sent directly to the controller at the address above.
Data collected, purposes and legal basis
As part of its activity (online shop for individuals, contact and quote request forms for professionals), Vanilha Noire collects the following data:
| Data | Purpose | Legal basis |
|---|---|---|
| Name, first name, email, delivery/billing address, order history (Shop customer account, WooCommerce) | Process and deliver your orders, manage your account | Performance of the sales contract |
| Name, email, industry, message content (contact form and professional quote request) | Respond to your request, prepare a quote | Pre-contractual steps / legitimate interest |
| Professional status, company information (B2B accounts) | Verify and manage approved professional accounts | Performance of the contract |
| Billing data (number, amount, address) | Issue invoices | Legal obligation (French Commercial Code) |
| Order-origin measurement cookies (see our cookie policy) | Understand the origin of traffic and sales | Consent (cookie banner) |
This data is used strictly for the purposes described above and is never resold to third parties.
Data recipients (processors)
Your data may be transmitted to the following technical service providers, strictly to the extent necessary for their task:
- O2SWITCH (hosting of the site and database, France)
- WooCommerce (online shop engine, order processing)
- CWILL / ParcelWILL (order delivery tracking)
- FormLayer (processing of contact and quote request forms)
- CookieAdmin (recording of your cookie consent)
No online payment method is active on the site to date. As soon as a payment solution goes live, the relevant provider and the way your banking data is processed will be added to this list before it goes into service.
Data transfer outside the European Union
The site and its database are technically hosted in France (host: O2SWITCH). The data controller, IDEERP LLC, is established in the United States (California) — access to your data from the United States constitutes a transfer of personal data outside the European Economic Area within the meaning of the GDPR.
IDEERP LLC undertakes to frame this transfer with the standard contractual clauses adopted by the European Commission, which provide the safeguard relied upon to ensure an adequate level of protection for your data in accordance with Chapter V of the GDPR.
Vanilha Noire’s presence in Madagascar relates exclusively to the vanilla production supply chain, with no personal data processing taking place there.
Cookies
This site uses cookies that are necessary for it to function and audience-measurement cookies (WooCommerce order-origin attribution). No advertising cookie or third-party tracker is set at this time. Details of each cookie, its purpose and its duration are set out in our cookie policy. You can change your choice at any time via the cookie management link in the footer, or in your browser settings.
Retention period
In line with the personal data retention settings configured on our WooCommerce shop, your data is kept for the following periods:
- Customer account: up to 24 months of inactivity, after which the account is deleted, in line with CNIL (French data protection authority) recommendations.
- Orders pending payment: 30 days.
- Failed orders: 7 days.
- Cancelled orders: 1 day.
- Refunded orders: no automatic anonymisation — this data is kept to track the refund and for our accounting obligations.
- Completed orders (delivered and paid): 30 months, after which the personal data attached to the order is anonymised.
- Payment data sent to our payment provider (Stripe), where this payment method is enabled on the site: 60 days.
- Invoices and accounting data: 10 years, a duration imposed by our accounting obligations (French Commercial Code, Article L123-22) — this retention is independent from the anonymisation of the personal data of the order described above.
- Contact and quote requests: 3 years from the last exchange, in the absence of any business follow-up.
- Cookies: 13 months maximum, in line with CNIL recommendations.
Your rights
Under the General Data Protection Regulation (GDPR) and French data protection law, you have a right of access, rectification, erasure, restriction and objection regarding the processing of your data, as well as a right to data portability. You may also set guidelines on what happens to your data after your death.
You can exercise these rights at any time by writing to us at contact@vanilha-noire.com, specifying your request and enclosing proof of identity if necessary. We undertake to respond within a maximum of one month.
You also have the right to lodge a complaint with the French data protection authority (CNIL) if you believe your rights are not being respected: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
Data security
Vanilha Noire implements reasonable technical and organisational measures to protect your data against loss, unauthorised access or disclosure: secure connection (HTTPS), access to data restricted to authorised staff, tiered administrator access rights.
Minors
The site www.vanilha-noire.com is intended for adult users, as part of a food product sales activity. IDEERP LLC does not knowingly collect personal data relating to minors. If you believe a minor has provided us with personal data without the consent of their legal representative, contact us at contact@vanilha-noire.com so that we can delete it.
Changes to this policy
This privacy policy may be updated to reflect changes to the site or to the applicable law. The date of the last update appears at the bottom of this page.