1. Data controller

The data controller is Vanyrix. For any question regarding your data, contact us via our contact form.

2. Data collected

• Account: email address, password (encrypted), optional display name.
• Orders: shipping address, billing address, order contents, transaction ID.
• Payment: credit card data is processed exclusively by our provider Stripe; we never have access to it.
• Browsing: technical session cookies, and — if you consent — anonymized traffic statistics.

3. Purposes

Your data is used exclusively to:

• process and deliver your orders;
• manage your account and let you view your history;
• respond to your support requests;
• comply with our legal and accounting obligations;
• improve service quality through aggregated statistics.

4. No resale, no advertising profiling

We do not sell, rent, or transfer your data to any third party for commercial purposes. We do not use advertising trackers and we do not practice any marketing profiling.

5. Retention period

Account data is retained as long as your account remains active. Invoices and order data are retained for ten years to comply with our accounting and tax obligations. Technical logs are purged within twelve months.

6. Cookies

Vanyrix uses two families of cookies:

• Essential cookies — essential to operation (session, cart, security). They do not require consent.
• Anonymous statistics — optional, placed only if you consent. No personal data is associated with them.

7. Your rights

In accordance with the GDPR, you have the right of access, rectification, erasure, portability, restriction, and opposition to the processing of your data.

To exercise these rights, contact us via our contact form specifying your request. You also have the right to lodge a complaint with the CNIL.