Privacy policy

Last updated: 5 September 2026.

This document is separate from the terms and conditions (CGV). It describes personal-data processing on the Fibre Lab and Co. Site (fibrelabandco.com; current hosting is stated in the legal notice).

1. Data controller

The controller of data collected on the Site is Filature de la Vallée des Saules, SAS, publisher of the Site under the brand / trading name Fibre Lab and Co. (also Fibrelab & Co), an animal and plant fibre analysis laboratory (including OFDA2000 testing).

Full company identity (RCS Douai 790 388 763, VAT FR 40 790 388 763, registered office 59227 Saulzoir) appears in the Legal notice.

Data contact: fibrelabandco@gmail.com — or via the Site contact form. No dedicated phone number is published here.

No Data Protection Officer (DPO) has been appointed. The contact above is sufficient to exercise your rights.

2. Data we collect

We only collect what is necessary to operate the laboratory and the Site.

  • Customer account: title, name, e-mail, phone if provided
  • Analysis order: contact details, order contents, amounts, sample-related information
  • Delivery of results: e-mail for the PDF report
  • Payment: card data are processed by Systempay (Banque Populaire); Fibre Lab and Co. does not receive them
  • Customer relations: e-mails and contact-form messages
  • Browsing: IP address, technical logs, cookies and pixels (see the Cookie policy)

Fields marked with an asterisk on forms are mandatory.

3. Purposes and legal bases (GDPR)

  • Account management, analysis order, PDF report delivery, support — performance of a contract (Art. 6.1.b)
  • Invoicing, accounting, tax duties — legal obligation (Art. 6.1.c)
  • Fraud prevention, Site security — legitimate interest (Art. 6.1.f)
  • Replies to messages outside an order — legitimate interest / pre-contractual steps
  • Audience measurement, marketing, pixels — consent via the cookie banner (Art. 6.1.a), only if tools are configured
  • Rights requests, disputes — legal obligation / legitimate interest

We do not sell your data.

4. Retention periods

  • Customer account: while active, then 3 years after last activity; limited archiving afterwards if legally required
  • Orders, invoices, analysis reports linked to billing: 10 years (accounting duty)
  • Prospects without an order: 3 years from last contact
  • Cookie consent proof: consent duration + proof (CNIL recommends asking again after about 6 months)
  • Technical logs: limited, proportionate to security
  • Rights requests: 1 year after closure (proof)

5. Recipients and processors

Internal recipients: authorised staff of Filature de la Vallée des Saules.

Processors / providers that may access data, depending on the service:

  • Hosting: OVH SAS, 2 rue Kellermann, 59100 Roubaix (EU)
  • E-commerce platform: PrestaShop
  • Payment provider: Systempay / Banque Populaire
  • Consent banner: Site script (“Cookie settings”)

No advertising pixel IDs (Meta, Pinterest, TikTok, Google Ads) are configured today. If they are later, they will load only after consent, as described in the Cookie policy.

6. Transfers outside the European Union

Order data and the Site are hosted in the EU (OVH).

If an audience tool or social pixel is enabled after consent, a transfer to the United States may occur and must be framed (standard contractual clauses and, where applicable, the Data Privacy Framework). None of these tools load until an ID is provided and you have consented.

7. Cookies and pixels

See the Cookie policy. No non-essential tracker is set before your choice. You can change it via Cookie settings in the footer (live control that reopens the banner).

8. Security

HTTPS, restricted PrestaShop back-office access, passwords stored securely by the platform, Systempay for payment. Fibre Lab and Co. does not store card data.

9. Your rights

Under the GDPR and French Data Protection Act you have rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and post-mortem instructions.

Response time: one month (extendable by two months in complex cases, with notice). Proof of identity may be requested if reasonably needed.

Complaint: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

10. Minors

The Site is intended for capable adults (terms of sale). No targeting of minors.

11. Changes

The update date appears at the top. Material changes will be announced on the Site.