Privacy Policy

1. Data controller
Personal data collected on paper-mint.fr is processed by PaperMint, a French SARL with a share capital of €10,000, registered with the Paris Trade and Companies Register under no. 509 760 955, 94 rue La Fayette, 75010 Paris, France. For any question or request regarding your data: contact@paper-mint.fr.

2. Data collected

  • Data you provide: first and last name, company, delivery and billing addresses, email, phone number, VAT number, order history, messages and quote requests.
  • Data collected automatically when you browse the site: IP address, browser and device type, pages viewed (see article 7, Cookies).
  • We do not store your bank card details: payments are processed directly by our secure payment provider.

3. Purposes and legal bases

  • Managing orders, deliveries, after-sales service, returns and invoices. Legal basis: performance of a contract.
  • Responding to contact, quote and showroom appointment requests. Legal basis: pre-contractual measures.
  • Managing payments and preventing fraud. Legal basis: performance of a contract and legitimate interest.
  • Complying with accounting and tax obligations. Legal basis: legal obligation.
  • Handling complaints and disputes. Legal basis: legitimate interest.
  • Sending marketing by email or SMS to existing customers about products similar to those already ordered. Legal basis: legitimate interest. You may object at any time via the unsubscribe link in each message or by writing to us.
  • Newsletter and marketing to non-customers. Legal basis: consent, obtained through voluntary sign-up.
  • Satisfaction surveys. Legal basis: legitimate interest.
  • Audience measurement and targeted advertising. Legal basis: consent (see article 7).

4. Recipients
Your data is intended for PaperMint's internal departments. It is never sold or rented. It may be shared, strictly within the scope of their services, with our service providers:

  • website hosting: BM Services (France);
  • payment: Up2Pay e-Transactions (Crédit Agricole);
  • delivery: Chronopost, La Poste, Boxtal;
  • email and SMS sending: Brevo;
  • audience measurement and advertising: Google (Google Analytics, Google Ads) and Meta (Meta Pixel);
  • showroom appointment booking: Calendly.

It may also be disclosed to the authorities where required by law.

5. Transfers outside the European Union
Some providers, notably Google, Meta and Calendly, may process data in the United States. These transfers are governed by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

6. Retention periods

  • Customers: for the duration of the business relationship, then 3 years after the last purchase for marketing purposes.
  • Prospects and newsletter subscribers: 3 years after the last contact, or until unsubscription.
  • Invoices and accounting records: 10 years (legal obligation).
  • Data relating to a dispute: until the applicable limitation periods have expired.
  • Cookies: 13 months maximum; your cookie preferences are kept for 6 months.

7. Cookies
On your first visit, a banner lets you accept, refuse or customise cookies.

  • Strictly necessary cookies (shopping cart, account login, security, language, storing your cookie preferences): these are exempt from consent and cannot be disabled.
  • Audience measurement cookies (Google Analytics): placed only with your consent.
  • Advertising cookies (Google Ads): used to show you advertising tailored to your interests, and placed only with your consent.

You can change your preferences at any time from the cookie management panel, available by clicking the icon at the bottom right of every page, or in your browser settings.

8. Your rights
You have the following rights: access, rectification, erasure, restriction, objection (including to marketing, at any time and without justification), data portability, withdrawal of consent, and the right to set instructions regarding your data after your death.
To exercise these rights, write to contact@paper-mint.fr. If there is reasonable doubt about your identity, we may ask for proof of identity. We will respond within one month.
You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

9. Security
PaperMint and its service providers implement technical and organisational measures designed to protect your data against unauthorised access, loss or alteration.

10. Minors
This website is intended for adults. In France, processing the data of a minor under 15 on the basis of consent requires the agreement of their legal guardian.

11. Changes
This policy may be updated at any time. The version in force is the one published on this page. Last updated: 10/2026.