Privacy Policy
Version 2.0 — Updated March 2026
1. Data Controller
GATHERLAB SAS — THE WRAPPIST™
22 rue de la Baraterie, 49000 Angers, France
SIREN : 908 326 739
Contact DPO : dpo@thewrappist.com
2. Data Collected
We collect only data necessary for providing our services:
- • Name — order identification
- • Email address — confirmation, tracking, support
- • Postal address — delivery
- • Phone (optional) — support contact
- • Payment data — processed exclusively by Stripe/Amazon Pay, never stored by THE WRAPPIST™
- • Browsing cookies — see section 5
3. Purposes & Legal Bases
Order processing and delivery
Contract performance (Art. 6.1.b GDPR)
After-sales and support
Legitimate interest (Art. 6.1.f GDPR)
Marketing emails
Explicit opt-in consent (Art. 6.1.a GDPR)
Accounting and tax obligations
Legal obligation (Art. 6.1.c GDPR)
4. Retention Period
• Active customer data: 3 years after last order
• Billing data: 10 years (legal accounting requirement)
• Marketing data (newsletter): until unsubscribe
• Analytics cookies: 13 months maximum (CNIL recommendation)
5. Cookies & Trackers
Essential cookies
Cart, session, security. No consent required.
Analytics cookies (Google Analytics / Plausible)
Anonymous audience statistics. Enabled after consent.
Advertising cookies (Meta Pixel, TikTok Pixel)
Ad retargeting. Enabled only after explicit consent.
Your preferences can be managed via the "Manage cookies" link in the footer. Compliant with ePrivacy Directive and CNIL decision n°2020-091.
6. Processors & Transfers
Our approved processors, subject to GDPR-compliant data processing agreements:
- • Stripe — Secure payments (USA, EU-US Data Privacy Framework)
- • Amazon — Marketplace and FBA (USA, EU-US DPF)
- • Vercel — Web hosting (USA, EU-US DPF)
- • Resend — Transactional emails (SOC 2 compliant)
7. Your Rights
Under the GDPR (Art. 15–22), you have the following rights:
- • Access to your personal data
- • Rectification of inaccurate data
- • Erasure ("right to be forgotten")
- • Data portability
- • Objection to marketing processing
- • Restriction of processing
To exercise your rights, contact us at: dpo@thewrappist.com
You may also lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr