Last updated: 26 September 2026
Who we are
This shop is run by Elle Montrose, an independent artist working in Paris under the artiste-auteur and auto-entrepreneur regimes. Elle Montrose is the data controller for personal data collected through ellemontrose.com and shop.ellemontrose.com.
- Trading name: Elle Montrose
- Address: 76 rue du Vertbois, 75003 Paris, France
- Contact: elle.montrose@gmail.com
- SIRET: [ADD YOUR SIRET NUMBER HERE]
What we collect, and why
When you place an order
We collect your name, email address, billing address, delivery address and the contents of your order. We need this to take payment, have your print made and posted, and keep the accounting records the law requires of us. The legal basis is performance of the contract between us, and our legal obligations as a French business.
When you pay
Payments are handled by Stripe. Your card number is entered directly into Stripe and never reaches this website or our own systems. Stripe processes your payment details as an independent controller under its own privacy policy, at stripe.com/privacy.
When your print is made
Prints are produced and shipped on demand by Printful, which receives your name, delivery address, email address and the details of what you ordered so that it can fulfil and dispatch your parcel. Printful acts as our processor. Its privacy policy is at printful.com/policies/privacy.
When you join the print waiting list
If you give us your email address to be told when a print is released, we store that address and nothing else. The legal basis is your consent, which you gave by entering the address and submitting the form. Sign-ups are collected through Formspree, whose privacy policy is at formspree.io/legal/privacy-policy. You can withdraw your consent at any time by using the unsubscribe link in any email we send, or by writing to the address above. Withdrawing consent does not affect anything we sent before you withdrew it.
When you simply browse
Our hosting provider, Hostinger, keeps standard server logs, which include IP addresses, for security and troubleshooting. We do not run advertising trackers or third party analytics on this site.
Cookies
This site sets only the cookies it needs in order to work. WooCommerce uses cookies to remember what is in your basket and to keep you signed in while you check out. Stripe sets cookies on the payment step for fraud prevention. Our caching plugin may set a short lived cookie to serve you the right version of a page. None of these are used to build a profile of you or to show you advertising.
Who your data is shared with
We share personal data only with the providers listed above, and only so far as each one needs it: Stripe for payment, Printful for production and delivery, Hostinger for hosting, and Formspree for the print waiting list. We never sell personal data, and we do not pass it to advertisers.
Some of these providers are based outside the European Union, or use infrastructure outside it. Where personal data is transferred outside the EU, the transfer is covered by the European Commission standard contractual clauses or by an adequacy decision.
How long we keep it
Order and invoice records are kept for ten years, which is the retention period French commercial law requires for accounting documents. Email addresses on the print waiting list are kept until you unsubscribe, or until we stop running the list. Server logs are kept for a short period by our host and then deleted.
Your rights
Under the General Data Protection Regulation you have the right to ask us for a copy of the personal data we hold about you, to have it corrected if it is wrong, to have it erased, to have our use of it restricted, to receive it in a portable format, and to object to our use of it. Where we rely on your consent, you can withdraw that consent at any time.
To exercise any of these rights, write to elle.montrose@gmail.com. We will respond within one month. Please bear in mind that we may not be able to erase data we are legally required to keep, such as invoices.
If you are not satisfied with how we have handled your data, you have the right to complain to the French data protection authority, the Commission Nationale de l Informatique et des Libertes, at www.cnil.fr.
Changes to this policy
If this policy changes, the revised version will be posted on this page with a new date at the top.