Legal

Privacy Policy

Last updated: July 2026

1. Purpose of this policy

The purpose of this policy is to inform you about how we process your personal data.

In this respect, we comply, in the collection and management of your data, with the 1978 French law known as "Informatique et Libertés", and now with the European Regulation of 27 April 2016 (the "GDPR").

2. Definition and nature of personal data

When you use the website (www.petcheri.com) (the "Site"), we may ask you to provide us with personal data about you in order to use our services (our "Services").

The term "personal data" refers to any data that allows you to be identified as an individual.

As part of our business, we may collect a number of pieces of information about you, including your first and last name, company name, username, photographs, city, presentation text, gender, year of birth, phone number, email address, contacts, data relating to your transactions on the Site, and data relating to your presence on social networks. We may also collect information about your pet, including up-to-date vaccinations, identification, and other information relevant to the requested service.

3. Identity of the data controller

The controller responsible for collecting your personal data is Tout pour le Toutou, a French simplified joint-stock company (SAS) registered with the Nanterre Trade and Companies Register under number 842582777, with its registered office at 103 rue Perronet, 92200 Neuilly-sur-Seine, France ("We" or the "Company").

4. Use of your personal data

The legal basis for our collection of your personal data is as follows:

  • Collecting your personal data is necessary to perform the contract entered into when you use our Services on the Site.
  • Our legitimate interest, when you voluntarily provide us with personal data while visiting our Site, which we collect in order to better respond to your requests for information about our Services.
  • Your consent, with regard to social network cookies, advertising cookies and Google Analytics cookies used by the Site.
  • Where the processing of your data is necessary to comply with a legal obligation to which we are subject.

Your personal data is collected to fulfil one or more of the following purposes:

  • Managing your access to, and use of, certain services available on the Site,
  • Carrying out customer-management operations relating to contracts, orders, deliveries, invoices, loyalty programmes, and customer-relationship follow-up,
  • Building a file of registered members, users, customers and prospects,
  • Sending newsletters, offers and promotional messages,
  • Sending proposals to connect with other users of the Site,
  • Managing reviews left by individuals on products, services or content,
  • Personalising our responses to your requests for information,
  • Complying with our legal and regulatory obligations.

You may refuse to provide us with your data; we will then inform you of any consequences of this refusal where the data is mandatory.

5. Recipients of the data collected

The following will have access to your personal data:

  • the staff of our company, the departments responsible for oversight, and our subcontractors;
  • partners with whom we may work to carry out our missions, with your agreement.

Public bodies may also receive your personal data, exclusively to fulfil our legal obligations, as may legal officers, ministerial officers, and organisations responsible for debt collection.

Your personal data will not be sold, rented or exchanged for the benefit of third parties.

6. Data retention period

a) Data relating to the management of customers and prospects

Your personal data is kept for as long as is strictly necessary to manage our business relationship with you.

With regard to any prospecting operations that may be aimed at you, your data may be kept for a period of 3 (three) years from the end of the business relationship.

Data required to establish proof of a right or a contract, which must be kept in order to comply with a legal obligation, will be kept for the period provided for by applicable law.

Personal data relating to a prospect who is not a customer may be kept for a period of 3 (three) years from its collection or from the prospect's last contact with us. At the end of this period, we may contact you again to find out whether you wish to continue receiving commercial offers.

b) Identity documents

If you exercise your right of access or rectification, data relating to identity documents may be kept for the period provided for in Article 9 of the French Code of Criminal Procedure, i.e. 1 (one) year. If you exercise your right to object, this data may be archived for the limitation period provided for in Article 8 of the French Code of Criminal Procedure, i.e. 3 (three) years.

c) Bank card data

Financial transactions relating to payment for purchases and fees via the Site are entrusted to a payment service provider, which ensures they run smoothly and securely.

For the purposes of the services, this payment service provider may receive your personal data relating to your bank card numbers, which it collects and stores in our name and on our behalf. We do not have access to this data.

To allow you to make regular purchases or pay related fees on the Site, your bank card data is kept for as long as you remain registered on the Site, and at least until your last transaction. By ticking the box provided for this purpose on the Site, you give your express consent to this retention.

Data relating to the visual cryptogram, or CVV2, printed on your bank card is not stored.

If you refuse to have your personal data relating to your bank card numbers retained under the conditions described above, we will not keep this data beyond the time necessary to carry out the transaction.

In any event, this data may be kept, for evidentiary purposes in the event of a transaction being disputed, in intermediate archives, for the period provided for in Article L 133-24 of the French Monetary and Financial Code, namely 13 (thirteen) months following the debit date. This period may be extended to 15 (fifteen) months to account for the possible use of deferred-debit payment cards.

d) Management of opt-out lists for prospecting

Information enabling us to take your right to object into account is kept for at least 3 (three) years from the date you exercise that right.

e) Cookies

Cookies are kept for a period of 13 (thirteen) months.

7. Security

We take all useful precautions and appropriate organisational and technical measures to preserve the security, integrity and confidentiality of your personal data, and in particular to prevent it from being distorted, damaged, or accessed by unauthorised third parties. We also use secure payment systems that comply with best practice and applicable regulations.

8. Hosting

We inform you that your data is kept and stored on servers located in France. Your data may also be hosted on the servers of providers such as Trello, Inc., Dropbox, Inc., Hubspot and Stripe, located in the United States.

These transfers of data outside the European Union are governed in accordance with the GDPR, in particular via the EU-US Data Privacy Framework, adopted by the European Commission's adequacy decision of 10 July 2023, which replaced the previous "Privacy Shield" framework invalidated by the Court of Justice of the European Union. For more information on the protection offered by this framework, you may consult the European Commission's website.

9. Access to your personal data

In accordance with French law n°78-17 of 6 January 1978 on information technology, data files and civil liberties, and the GDPR, you have the right to obtain communication of, and where applicable rectification or erasure of, the data concerning you by contacting us at:

Email address

concierge@petcheri.com

Postal address

103 Rue Perronet, 92200 Neuilly Sur Seine

Persons whose data is collected on the basis of our legitimate interest are reminded that they may object at any time to the processing of data concerning them. We may nonetheless continue processing where there are legitimate grounds for doing so that override your rights and freedoms, or where processing is necessary to establish, exercise or defend our legal rights.

10. Right to issue directives on the processing of your data after your death

You have the right to issue directives regarding the retention, erasure and disclosure of your personal data after your death.

These directives may be general, i.e. covering all of the personal data concerning you. In that case, they must be registered with a certified digital trusted third party (approved by the CNIL).

Directives may also be specific to the data processed by our company. In that case, please send them to us at the contact details below. By sending us such directives, you expressly consent to them being retained, transmitted and carried out in accordance with the terms set out herein.

You may designate in your directives a person responsible for carrying them out. That person will then be entitled, once you have passed away, to take note of the directives and ask us to implement them. Failing such a designation, your heirs will be entitled to take note of your directives on your death and ask us to implement them. You may amend or revoke your directives at any time by writing to us at the contact details above.

11. Portability of your personal data

You have a right to the portability of the personal data you have provided to us, meaning data you have actively and knowingly provided in the course of accessing and using the services, as well as data generated by your activity in using the services. Please note that this right does not apply to data collected and processed on a legal basis other than consent or the performance of our contract with you.

This right may be exercised free of charge, at any time, in particular when closing your account on the Platform, in order to retrieve and keep your personal data.

In this context, we will send you your personal data, by any means deemed appropriate, in a commonly used, machine-readable, open standard format, in line with best practice.

12. Lodging a complaint with a supervisory authority

You are also informed that you have the right to lodge a complaint with a competent supervisory authority (the Commission Nationale de l'Informatique et des Libertés, or CNIL, for France), in the Member State of your habitual residence, place of work, or the place where the alleged infringement of your rights occurred, if you consider that the processing of your personal data referred to in this policy constitutes a breach of applicable law.

This remedy may be exercised without prejudice to any other administrative or judicial remedy. Indeed, you also have the right to an effective administrative or judicial remedy if you consider that the processing of your personal data referred to in this policy constitutes a breach of applicable law.

13. Restriction of processing

You have the right to obtain the restriction of the processing of your personal data in the following cases:

  • During the period we take to verify your data, when you contest the accuracy of your personal data,
  • Where the processing of this data is unlawful and you wish to restrict rather than erase your data,
  • Where we no longer need your personal data, but you wish it to be kept so that you can exercise your rights,
  • During the period we take to verify legitimate grounds, when you have objected to the processing of your personal data.

14. Amendments

We reserve the right, at our sole discretion, to amend this policy at any time, in whole or in part. Any such amendments will take effect upon publication of the new policy. Your continued use of the Site after such amendments take effect will constitute acknowledgement and acceptance of the new policy. Otherwise, if the new policy does not suit you, you should no longer access the Site.

Tout pour le Toutou — Pet Cheri

103 Rue Perronet, 92200 Neuilly-sur-Seine, France

concierge@petcheri.com