Privacy Policy
Who we are
Lettres de France is operated by Nathalie Mathieu, a sole trader based in England. We are the data controller for the personal data described in this policy.
Address: 106 Alton House, 27–31 Grange Road, Darlington, DL1 5NA, UK
Email: nathalie@lettresdefrance.com
What data we collect — and why
Our website has no tracking scripts, advertising, or analytics cookies. When you subscribe, your payment is taken via Stripe's hosted checkout. Once payment is confirmed, we store the following subscriber data in our own secure database:
- Email address
- Subscription plan and age group (Kids 7–11 or Teens 12–18)
- Shipping address (for physical letter plans)
- Subscription status and start date
- A record of each monthly content email sent to you
Payment card details are never stored in our database — they are handled entirely by Stripe. We use the data we hold solely to fulfil your subscription and send subscription-related emails (dispatch notifications, billing updates). We do not sell or share your data with third parties for marketing purposes.
Our data processors
We use the following third-party services to process personal data on our behalf:
- Stripe — payment processing and billing management. PCI DSS Level 1 certified. stripe.com/privacy
- Supabase — secure cloud database where subscriber records are stored. supabase.com/privacy
- Resend — transactional email delivery (welcome emails, monthly content notifications). resend.com/legal/privacy-policy
Each of these processors is contractually bound to handle your data only on our instructions and in accordance with UK GDPR.
How long we keep your data
We retain your personal data for the duration of your active subscription and for as long as required by law thereafter (for example, to meet our tax and accounting obligations, typically 6 years under HMRC rules).
Children's data
Subscriptions are purchased by a parent or guardian — we do not knowingly collect personal data directly from children. The subscriber account (name, email, address) belongs to the adult who makes the purchase.
Your rights under UK GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — ask us to delete your data (where we have no legal obligation to retain it)
- Objection — object to how we process your data
- Portability — receive your data in a machine-readable format
- Complaint — lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any of these rights, email us at nathalie@lettresdefrance.com. We will respond within 30 days.