Escargot Post

Privacy Policy

Last updated:

This policy explains what personal data we collect on escargotpost.com, why, how long we keep it and what your rights are. It complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Who is responsible for your data?

Claire Servanton EI (BlackCat CVSG, brand Escargot Post), 22 Chemin des Catalins, 26200 Montélimar, France. Contact: hello@escargotpost.com.

2. The data we collect

  • When you order: your first and last name, email address, billing address (and delivery address if different), phone number if you give it, and the contents and amount of the order.
  • To personalise the letters: the first name, last name and address of the child who receives them (see point 4).
  • Payment is handled by Stripe: we never see or keep your card details.
  • If you create an account (optional): your email and a password, stored encrypted.
  • Newsletter: your email address and the date you signed up.
  • Contact form: your first and last name, email and message. They are sent to us by email and are not stored on the website.
  • Browsing: cookies, including analytics and advertising cookies only with your consent (see the Cookie Policy). Our host also keeps technical logs (including the IP address) for the website’s security.

3. Why, and on what basis

  • Processing and posting your order, answering your questions about it: performance of the contract.
  • Issuing invoices and keeping accounts: legal obligation.
  • Managing your customer account: performance of the contract.
  • Sending you the newsletter: your consent, which you can withdraw at any time (unsubscribe link in every email).
  • Answering your messages: our legitimate interest in replying to you.
  • Measuring visits to the website (Google Analytics): your consent.
  • Measuring how well our adverts work (Meta: Facebook, Instagram): your consent.
  • Keeping the website and payments secure, preventing fraud: our legitimate interest.

4. Children’s data

Our letters are meant for children, but adults place the orders: the child does not use the website. The child’s first name, last name and address, which you give us, are used only to personalise and post their letters. They are never used for advertising or passed on for any other purpose. By entering them, you confirm that you are allowed to give them to us (parent, relative, or with the parents’ agreement).

5. Who receives your data?

Your data is never sold. Only Escargot Post and the service providers who help us run the website can access it, and only for that purpose:

  • Hostinger: website hosting (servers in France);
  • Stripe: online payment;
  • OVHcloud: email (France);
  • Brevo: sending the newsletter (France);
  • Google (Google Analytics): visitor statistics, if you accept them;
  • Meta (Facebook, Instagram): advert measurement, if you accept it;
  • La Poste and its partners: the child’s name and address are on the envelope.

6. Transfers outside the European Union

Stripe, Google and Meta may process some data in the United States. These transfers are covered by the EU-US Data Privacy Framework and/or the European Commission’s standard contractual clauses.

7. How long we keep it

  • Orders and invoices: 10 years (accounting obligation), including the order details.
  • Child’s data: used for the duration of the order or subscription, then kept only in the order archive.
  • Customer data for our business relationship: 3 years after your last purchase.
  • Customer account: until it is deleted, or after 3 years without activity.
  • Newsletter: until you unsubscribe.
  • Messages received: at most 3 years after our last exchange.
  • Copies of emails sent by the website (order confirmations, etc.): 6 months.
  • Your cookie choice: 6 months, after which the banner is shown to you again.

8. Your rights

At any time, you can ask to access your data, correct it, delete it, restrict its use, object to its processing, receive it (portability), withdraw your consent, and give instructions on what happens to it after your death. Write to us at hello@escargotpost.com; we reply within one month. If we are unsure of your identity, we may ask you for proof.

If you feel your rights are not being respected, you can complain to the CNIL, the French data protection authority (www.cnil.fr).

9. Security

The website is protected by an encrypted connection (HTTPS), payments are handled by Stripe, and access to the administration area is restricted and protected.

10. Changes

This policy may change; the current version is always on this page. Version of 26 October 2026.