Legal Center
01. Purpose of this policy
Purpose of this policy
This Privacy Policy (the “Policy”) is intended to inform users of the website https://vs-goods.store/ (the “Website”) about how VS Goods collects and processes their personal data.
It supplements the information provided in our Legal Notice and our Cookies Policy.
By using the Website, you agree to the collection and processing of your personal data under the conditions described in this Policy.
02. Data controller and contact details
Data controller and contact details
The data controller is:
VENDREDI SOCIETY, a French simplified joint-stock company (SAS) with a share capital of EUR 2,000, registered with the Trade and Companies Register under number 889 281 192 RCS Toulouse, having its registered office at Lieu-dit Faubios, Place du 19 mars 1962, 31460 Cambiac, France, represented by Mr Raffael VELLUTI, President, operating under the commercial brand name “VS Goods”.
VS Goods has not appointed a Data Protection Officer (DPO).
For questions or to exercise your rights:
Email: hello@vs-goods.store
Postal address: VS Goods – Place du 19 mars 1962, Lieu-dit Faubios, 31460 CAMBIAC, France
03. Data we collect
We only collect data that is strictly necessary for the purposes described in Section 4.
3.1 Data you provide directly
You may provide personal data when you:
• create a customer/user account;
• place an order (including free products) via WooCommerce;
• make a payment via Stripe/PayPal/Google Pay/Apple Pay;
• subscribe to our newsletter;
• download content;
•fill in the contact/support form;
• take part in marketing campaigns (promotions, contests, ambassador programs, etc.);
• collaborate with us as a freelance designer/author or ambassador.
Categories of personal data may include:
• Identification data: first name, last name, username/display name, company name, country, intra-community VAT number (if purchasing as a business).
• Contact details: email address, billing address, country, postal code, city, phone number (if provided).
Account data: login (email), encrypted password, order history, downloads, licence information attached to purchases.
• Order and billing data: products ordered, amounts, currency, discounts, invoice number, order status.
Payment data: we do not store full card numbers. Payments are processed by providers acting as independent controllers for card data. We may receive partial information (card type, last 4 digits, token, status, method).
• Customer relationship data: exchanges via form/email, claims, after-sales support.
Marketing data: newsletter subscription, segmentation (client/prospect), preferences, campaign participation.
• Freelance designers/ambassadors data: identification/contact details and contractual information (agreements, compensation, reporting) where applicable.
• Mandatory fields are indicated. If not provided, some services may not be possible.
3.2 Data collected automatically
When browsing, we may collect (in accordance with our Cookies Policy):
• Connection and browsing data: IP address (may be truncated/anonymised), browser type, pages visited, time on site, actions, referrer URL, etc.
Device technical data: device type, OS, browser language.
• This data may be collected via cookies/trackers (GA4, Clarity, Meta Pixel, LinkedIn Insight Tag, Google Ads, etc.) depending on your choices via Tarteaucitron.io
04. Purposes and legal bases of processing
Purpose: Website and account management
Examples: Account creation, authentication, downloads/licences, support
Legal basis: Contract
Purpose: Order and billing management
Examples: Orders incl. free, invoicing, accounting/tax
Legal basis: Contract + Legal obligation
Purpose: Payment processing
Examples: Payments, fraud prevention, incidents
Legal basis: Contract + Legitimate interest
Purpose: Customer relationship and support
Examples: Contact form, emails, claims
Legal basis: Contract/pre-contract + Legitimate interest
Purpose: Newsletter and marketing
Examples: Product news, offers, events, segmentation
Legal basis: Consent and/or Legitimate interest (existing customers)
Purpose: Transactional emails
Examples: Order/account confirmations, technical notices
Legal basis: Contract
Purpose: Audience measurement and improvement
Examples: Traffic stats, UX analysis, A/B tests
Legal basis: Consent
Purpose: Targeted advertising / retargeting
Examples: Audiences, measurement, retargeting
Legal basis: Consent
Purpose: Partnerships, freelancers, ambassadors
Examples: Contracts, contribution tracking, compensation
Legal basis: Contract + Legal obligation + Legitimate interest
Purpose: Security and fraud prevention
Examples: Logs, anomaly detection, securing access
Legal basis: Legitimate interest
05. Recipients of the data
Data is intended for:
VS Goods internal teams on a need-to-know basis (associates, growth/marketing, support, accounting);
service providers acting as processors or independent controllers.
Main processors (on our behalf):
Hostinger (hosting);
WordPress + WooCommerce;
Brevo (emailing and light CRM);
Tarteaucitron.io (CMP);
technical service providers (maintenance/development) under confidentiality;
external accountant/accounting firm.
Independent controllers for certain processing:
Stripe, PayPal, Google Pay, Apple Pay (payment data and disputes);
Google (GA4, Google Ads), Microsoft (Clarity), Meta, LinkedIn depending on cookie choices.
We may share data with authorities where required and with advisors (lawyers) in case of dispute.
We do not sell personal data.
06. Data transfers outside the European Union
Some providers may process data outside the EU (notably in the US). Transfers are governed by appropriate safeguards (SCCs, adequacy decisions where applicable, contractual commitments, additional measures). Residual risks may remain.
07. Data retention periods
Indicative retention:
Account data: as long as the account is active; inactive accounts may be deleted/anonymised after 3 years of inactivity, subject to legal retention.
Order and billing: 10 years.
Prospects/marketing: 3 years from last active contact or until withdrawal/objection.
Support/contact: time needed + archive 2–3 years.
Freelancers/ambassadors: term of relationship + legal archiving.
Logs/security: generally 6–12 months.
Cookie retention is detailed in the Cookies Policy.
08. Your rights
You have rights of access, rectification, erasure, restriction, objection (including marketing), portability (where applicable), and withdrawal of consent.
Contact: hello@vs-goods.store or postal address above.
We may request identity verification if necessary. We aim to reply within 1 month (extendable to 3 months in complex cases).
You may lodge a complaint with the CNIL www.cnil.fr or your local authority.
09. Security
We implement appropriate technical and organisational measures (secure hosting, HTTPS, access control, password encryption, provider security measures). No system is infallible.
10. Use by minors
Not intended for minors. We do not knowingly collect data from minors. If we learn a minor under 15 provided data without parental authorisation, we will delete it.
11. Links to third-party websites
We may link to third-party websites. We are not responsible for their privacy practices. Review their policies.
12. Changes to this Policy
This Policy may be updated for operational, legal or regulatory reasons. The applicable version is the one in force at the time of visit.