Privacy Policy

Who we are

Lettres de France is operated by Nathalie Mathieu, a sole trader based in England. We are the data controller for the personal data described in this policy.

Address: 106 Alton House, 27–31 Grange Road, Darlington, DL1 5NA, UK
Email: bonjour@lettresdefrance.com

What data we collect — and why

Our website has no tracking scripts, advertising, or analytics cookies. If you join the newsletter, we store your email address so we can send occasional Lettres de France updates; you can ask us to remove it at any time. When you subscribe, your payment details are handled via Stripe's hosted checkout. Once checkout is confirmed, we store the following subscriber data in our own secure database:

• Email address
• Subscription plan and age group (Kids 7–11 or Teens/Adults 12+)
• Shipping address (for physical letter plans)
• Subscription status and start date
• A record of each monthly content email sent to you

Payment card details are never stored in our database — they are handled entirely by Stripe. We use the data we hold solely to fulfil your subscription and send subscription-related emails (dispatch notifications, billing updates). We do not sell or share your data with third parties for marketing purposes.

Our data processors

We use the following third-party services to process personal data on our behalf:

• Stripe — payment processing and billing management. PCI DSS Level 1 certified. stripe.com/privacy
• Supabase — secure cloud database where subscriber records are stored. supabase.com/privacy
• Resend — transactional email delivery (welcome emails, monthly content notifications). resend.com/legal/privacy-policy

Each of these processors is contractually bound to handle your data only on our instructions and in accordance with UK GDPR.

How long we keep your data

We retain your personal data for the duration of your active subscription and for as long as required by law thereafter (for example, to meet our tax and accounting obligations, typically 6 years under HMRC rules).

Children's data

Subscriptions are purchased by an adult — we do not knowingly collect personal data directly from children. The subscriber account (name, email, address) belongs to the adult who makes the purchase.

Your rights under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data (where we have no legal obligation to retain it)
• Objection — object to how we process your data
• Portability — receive your data in a machine-readable format
• Complaint — lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, email us at bonjour@lettresdefrance.com. We will respond within 30 days.