This English version is provided for convenience; in case of discrepancy, the French version prevails. · Version française · Deutsche Fassung · Versión en español · Versione italiana
Last updated: 5 September 2026.
This document is separate from the terms and conditions of sale.
1. Data controller
The controller of the data collected on the Fibre Lab and Co. Site (fibrelabandco.com) is Filature de la Vallée des Saules, SAS, publisher of the Site under the brand / trading name Fibre Lab and Co. (also Fibrelab & Co), an animal and plant fibre analysis laboratory (including OFDA 2000 testing).
The Company's full identity (RCS, SIRET, VAT, registered office) is given in the Legal notice.
E-mail (data contact): fibrelabandco@gmail.com
Contact via the Site form - no dedicated phone number is published here.
No Data Protection Officer (DPO) has been appointed. The contact above is sufficient to exercise your rights.
2. Data we collect
We only collect what is necessary to operate the laboratory and the Site.
- Customer account: title, last name, first name, e-mail, password (hashed), phone
- Analysis order: contact details, order contents, amounts, sample-related information
- Payment: card data are processed by the payment provider Systempay (Banque Populaire); Fibre Lab and Co. does not receive them
- Customer relations: e-mail messages, after-sales requests
- Browsing: IP address, technical log, cookies and pixels (see the Cookie policy)
Fields marked with an asterisk on forms are mandatory. Without them, the order or the account cannot be completed.
3. Purposes and legal bases (GDPR)
- Account creation and management, analysis order, PDF report delivery, after-sales support - performance of a contract (Art. 6.1.b)
- Invoicing, accounting, tax duties - legal obligation (Art. 6.1.c)
- Fraud prevention, Site security - legitimate interest (Art. 6.1.f)
- Replies to messages outside an order - legitimate interest / pre-contractual steps
- Newsletter, commercial offers by e-mail - consent (Art. 6.1.a), except marketing of similar products to an existing customer, with the right to object
- Audience measurement, marketing, social networks, pixels - consent via the cookie banner (Art. 6.1.a and Art. 82 of the French Data Protection Act)
- Exercise of rights, disputes - legal obligation / legitimate interest
We do not sell your data.
4. Retention periods
- Customer account: while the account is active, then 3 years after the last activity (marketing); limited archiving afterwards if legally required
- Orders, invoices: 10 years (accounting obligation)
- Prospects without an order: 3 years from the last contact
- Cookie consent proof: consent duration + proof (in practice, the CNIL recommends asking again after about 6 months)
- Technical logs: limited duration, proportionate to security
- Exercise of rights: 1 year after the request is closed (proof)
5. Recipients and processors
Internal recipients: authorised staff of Filature de la Vallée des Saules.
Processors / providers that may access data, depending on the service:
- Site hosting: OVH SAS, 2 rue Kellermann, 59100 Roubaix (EU)
- E-commerce platform: PrestaShop (Fibre Lab and Co. Site)
- Delivery of results: PDF report by e-mail
- Payment provider: Systempay / Banque Populaire
- Consent banner: Site script ("Cookie settings")
No advertising pixel ID (Meta, Pinterest, TikTok, Google Ads) is configured to date. If they are one day, they will load only after consent, as described in the Cookie policy.
6. Transfers outside the European Union
Order data and the Site are hosted in the EU (OVH).
If an audience tool (e.g. Google Analytics) or a social network pixel is enabled after consent, a transfer to the United States may take place. It must then be framed (standard contractual clauses and, where applicable, the Data Privacy Framework). None of these tools loads until an ID is provided and you have consented.
The contact mailbox (fibrelabandco@gmail.com) is used for laboratory-related requests.
7. Cookies and pixels
See the Cookie policy. No non-essential tracker is set before your choice. You can change it via Cookie settings (footer control that reopens the banner - not a simple page).
8. Security
HTTPS, restricted access to the PrestaShop back office, passwords stored securely by the platform, selected payment provider (Systempay). Fibre Lab and Co. does not store any card data.
9. Your rights
Under the GDPR and the French Data Protection Act, you have the rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and to set post-mortem instructions.
Response time: one month (extendable by two months in complex cases, with notice). Proof of identity may be requested in case of reasonable doubt.
E-mail: fibrelabandco@gmail.com
Post: at the registered office address given in the Legal notice
Complaint: Commission nationale de l'informatique et des libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 - www.cnil.fr.
10. Minors
The Site is intended for adults with full legal capacity (terms of sale). No targeting of minors.
11. Changes
The update date appears at the top. In the event of a material change, information will be given on the Site.