Privacy policy

Updated: 10 October 2026.

Data controller

MAITREVAPOTIER, SAS, 47 rue Vivienne, 75002 Paris, France, SIREN 105 094 015, is the controller for the processing carried out for its trade shop. Personal data contact: contact@maitrevapotier.com.

Data and purposes

We process business contacts’ contact details, company information, registration and VAT identifiers, addresses, enquiries and orders. These data are used to review account applications, manage the business relationship, prepare sales and follow them up. Operations necessary for an enquiry or a contract are based on pre-contractual measures or performance of the contract.

Invoicing, accounting and tax requirements, and retention of the required supporting documents are based on legal obligations. Security, prevention of misuse and verification of a contact’s connection to a business are based, depending on the processing concerned, on our legitimate interest in protecting the shop and its users.

Required fields are identified in the forms. Missing information may prevent the enquiry or order from being processed. Data are not sold.

SIREN searches and VAT checks

The SIREN number entered is used to query the public Recherche d’entreprises API to prefill the available information. The VAT number may be sent to the European Commission’s VIES service to check its validity. We retain the relevant result, its date and, where applicable, the information required for tax substantiation.

The validity of a company or number does not in itself establish that the applicant represents that company. Account approval may involve human review. Technical unavailability is not treated as fraud or definitive invalidity.

Franchise enquiries and contacts

The information supplied in these forms enables us to respond to enquiries and follow them up. It is not used to make an automated decision producing a legal effect on the applicant.

Recipients and hosting

Data are accessible to authorised personnel at MAITREVAPOTIER and, to the extent necessary for their tasks, its hosting, payment, transport, support and accounting providers. The main hosting is provided in France by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France.

Payment is by bank transfer; the website does not collect bank card numbers. Details needed for delivery are shared with Chronopost when arranging a shipment. Email is used to follow up enquiries and the business relationship. Authorised staff and service providers only access information needed for their duties.

Retailer map

The map displays OpenStreetMap tiles. Loading them sends technical information, including the IP address, to the provider. City and postcode searches send the entered place to Photon by Komoot. Account credentials and passwords are not sent to these services.

Provider information: OpenStreetMap Foundation and Komoot. Retailer websites you choose to visit apply their own policies.

Retention

Data relevant to the business relationship are retained for its duration, and then in accordance with the applicable obligations and limitation periods. Accounting documents and the data needed to support them are retained for ten years under the conditions required by law.

Contact and franchise enquiries are retained while they are processed and the project is followed up. Once closed or abandoned, only records needed to meet a legal obligation or defend a right are retained for the applicable period. Account data remains useful while the account is used; closure or erasure requests distinguish information to delete from supporting records that must be retained. Company and VAT lookup caches expire according to their technical lifetime; tax evidence linked to an order follows the retention period of the corresponding records.

Your rights

You may request access to your data, its rectification, its erasure where the conditions allow, restriction of processing, or data portability where applicable. You may object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing where it takes place. Consent may be withdrawn for processing based on consent.

Send your request to contact@maitrevapotier.com, including the information needed to identify it. Proportionate proof of identity may be requested where there is reasonable doubt about the applicant’s identity. You may also lodge a complaint with the CNIL, including via cnil.fr.