Last updated: 8 October 2026
POETRO SARL ("POETRO", "we", "us") runs the online store https://poetro.store. This policy explains which personal data we collect when you visit the store, place an order, subscribe to our letters or write to us, why we collect it, who we share it with, how long we keep it and which rights you have.
We process personal data in accordance with Regulation (EU) 2016/679 (the GDPR) and the French Data Protection Act (Loi Informatique et Libertés). Some data is needed to deliver what you order; if you prefer not to provide it, we will not be able to process your order.
1. Who is responsible for your data
The data controller is POETRO SARL, 43 rue Paul Déroulède, 06000 Nice, France (SIRET 75237125200038, VAT FR10752371252). For any question about your personal data, write to contact@poetro.store. We are a small company and have not appointed a data protection officer; every request is handled by the owners.
2. Which data we collect
We do not collect sensitive data and we do not knowingly collect data from persons under 18. Our store is intended for adults.
3. Why we use your data, on which legal basis, and for how long
| Purpose | Legal basis | Retention |
|---|---|---|
| Processing your order: payment, preparation, delivery, tracking, returns and after-sales service | Performance of the contract between you and POETRO | For the duration of the order and the legal guarantee period; invoices and accounting records are kept for 10 years as required by French commercial law; other order records for 5 years as evidence |
| Managing your customer account | Performance of the contract | Until you delete the account, or after 3 years without an order or login |
| Answering your messages, handling claims, disputes and chargebacks | Performance of the contract and our legitimate interest in defending our rights | 5 years after the last contact |
| Preventing fraud and securing payments | Our legitimate interest and the legal obligations of our payment providers | Managed by the payment providers under their own policies |
| Sending our letters (new arrivals, care advice, offers) to customers who have ordered from us | Our legitimate interest in keeping in touch with our customers about similar products, as permitted by Article L34-5 of the French Postal and Electronic Communications Code; you can unsubscribe at any time | Until you unsubscribe, or 3 years after your last order or interaction with our letters |
| Sending our letters to subscribers who have not ordered yet | Your consent, given when you subscribe | Until you unsubscribe, or 3 years after your last interaction with our letters |
| Reminding you of an order you started but did not complete | Our legitimate interest in helping you complete an order you began; you can unsubscribe from these reminders at any time | Reminders are sent within a few days of the unfinished order and stop as soon as the order is completed or you unsubscribe; unfinished cart data is deleted after 3 years at the latest |
| Asking for a review after delivery and publishing reviews | Our legitimate interest in collecting feedback and informing other customers | One request per order; published reviews stay online until you ask us to remove them |
| Advertising on social media: showing our content to our existing customers and to people with similar interests | For customers: our legitimate interest in keeping in touch with the people who already buy from us. For subscribers who have not ordered: your consent. You may object at any time (see below) | Customer lists are refreshed when we run campaigns; a person who objects is removed from the lists within one month |
| Measuring the audience of the store and the results of our campaigns (analytics and advertising cookies) | Your consent (see section 8) | Cookie lifetimes are given in section 8; statistics are kept in aggregated form that does not identify you |
| Complying with legal obligations: accounting, tax, customs, consumer law, requests from public authorities | Legal obligation | The periods set by the applicable law (10 years for accounting records) |
| Handling your requests concerning your personal data | Legal obligation | Record of the request for 3 years; if we have to check your identity, the proof is deleted as soon as the check is done |
Advertising on social media. We may share your email address and phone number, in encrypted form, with Meta Platforms Ireland Ltd (Facebook, Instagram) and similar advertising platforms, in order to show our content to our existing customers and to people with similar interests. The platforms use this data only to match it against their own users and do not receive your order history. You may object to this at any time by writing to contact@poetro.store.
4. Who receives your data
We never sell your personal data. It is shared only with the providers we need to run the store, each bound by contract to use it only on our instructions and to protect it:
5. Transfers outside the European Union
Some of our providers are located outside the European Economic Area, in particular in the United States (Ecwid, Stripe, PayPal, Google, Meta, Apple). When your data is transferred outside the EEA, the transfer is based on a European Commission adequacy decision (including the EU-US Data Privacy Framework for providers certified under it) or on the European Commission's standard contractual clauses, with additional safeguards where necessary. Deliveries outside the European Union necessarily involve passing your delivery details to the carrier and the customs authorities of the destination country; this transfer is required to perform the contract (Article 49(1)(b) GDPR).
6. How long we keep your data
We keep personal data only for as long as needed for the purposes described in section 3, then delete or anonymise it. Data that we must keep by law (invoices, accounting records, customs documents) is archived with restricted access for the legal period and then deleted. Data may be kept longer only for the time needed to establish, exercise or defend a legal claim.
7. Your rights
Under the GDPR and French law you have the right to:
To exercise these rights, write to contact@poetro.store or use your customer account. You can unsubscribe from our letters through the link at the bottom of every email. We may ask you to confirm your identity before answering. We reply within one month; this period may be extended by two months for complex requests, in which case we will tell you.
If you believe your rights have not been respected, you can lodge a complaint with the French supervisory authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
8. Cookies and similar technologies
When you visit the store, small files called cookies and similar technologies may be stored on your device. We use three kinds:
When you first visit the store, a banner asks whether you accept audience measurement and advertising cookies; they are set only if you accept, and you can order and browse normally if you refuse. These cookies expire after a period set by each provider: 90 days for the Meta Pixel cookie, 13 months for the TikTok Pixel cookie and up to 2 years for the Google Analytics cookie. You can also refuse or delete them at any time through the settings of your browser, and through the tools offered by each provider: the Google Analytics opt-out add-on at tools.google.com/dlpage/gaoptout, your Facebook and Instagram ad preferences at facebook.com/ads/preferences, and the "Ads personalisation" setting in the TikTok app. Blocking non-essential cookies does not prevent you from browsing or ordering.
9. Security
The store is served over an encrypted connection (HTTPS). Payments are processed by providers certified under the PCI DSS standard; we never store card data. Access to customer data is limited to the people who need it to prepare and ship your order or to answer you, and every provider listed above is bound by confidentiality and security obligations.
10. Changes to this policy
We may update this policy to reflect changes in the law, in our providers or in the way the store works. The date at the top shows the latest version. If a change is significant, we will inform our customers by email or by a notice on the store.
Free delivery on leather care: EU and Switzerland from 150 €, UK from 200 €, US from 300 € ✦ New drop: vintage Hermès, Dior and Cartier silk scarves ✦ Every vintage piece comes with a Certificate of Authenticity ✦ Rated 4.97 out of 5 in 238 client reviews