Privacy

Data controller

Itinerarium Éditions, French micro-enterprise, SIRET 809 830 201 00020 (INPI record). Contact: contact form

What we do not do

No customer account, no audience measurement, no advertising, no cookies. We never sell or rent any data.

Data we process

• Paperback orders: name, delivery address, email, phone number (required by the carrier), order contents. To print, ship, invoice and answer your questions. Legal basis: performance of the contract.
• Ebook orders: email, order reference, number of downloads. To deliver the book, let you download it again and personalise it against unlawful copying. Legal bases: performance of the contract and legitimate interest.
• Payment: handled directly by Stripe. We never see your card number.
• Browsing: Cloudflare uses your IP address to determine your country, to preselect the delivery country and show prices in your currency. We do not keep it. Our hosts keep technical logs for security.

Service providers

• Stripe: payment and receipts (Link for ebook-only orders).
• Lulu Press: printing and shipping of paperbacks.
• Cloudflare: online shop (passes paperback orders on to Lulu without keeping them) and storage of ebook orders (email, reference, number of downloads).
• Resend: sending emails.
• Netlify: website hosting and contact form (name, email, message; spam filtering by Akismet).

These providers are based in, or process data in, the United States. Transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

Retention periods

• Accounting records (orders, invoices): 10 years.
• Ebook delivery data: as long as the download link is active, 10 years at most.
• Correspondence with us: 3 years after the last contact.

Storage in your browser

This site uses no cookies. It stores in your browser (local storage), only to run the shop: itin_cart, itin_country, itin_geo, itin_q, itin_pending. That is your cart, the delivery country you chose, the detected country and exchange rates (12 h), shipping costs already calculated (12 h) and the order being paid. These items are strictly necessary for the service you request and do not require consent. They stay on your device; you can delete them in your browser settings. Stripe's payment page sets its own cookies, needed for payment security.

Your rights

You may ask to access, correct or erase your data, restrict or object to its processing, or receive it in a readable format: use our contact form. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with the authority of your country.