The Bones Vault respects your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it.
This policy applies to thebonesvault.com and any orders placed through it.
Who we are
The data controller responsible for your personal data is:
THE BONES VAULT 521 Route De Charenton, Lieu Dit La Petite Prade, 18200 Saint-Amand-Montrond, France Email: Sales@thebonesvault.com Phone: +33 7 55 52 22 71
If you have any question about this policy or about how we handle your data, contact us using the details above.
What data we collect
We collect the following categories of personal data.
Information you give us
- Name, billing address and delivery address
- Email address and telephone number
- Order details and purchase history
- Any information you include in an enquiry or message to us
- Where required for a restricted specimen, documentation confirming your eligibility to receive it
Information collected automatically
- IP address and approximate location
- Browser type, device type and operating system
- Pages viewed, time on site and referring website
- Cookie data (see the Cookies section below)
Payment Information: We do not store your full card details. Payments are processed by our payment provider, [PAYMENT PROCESSOR, e.g., Stripe / PayPal], who handles your card data under their own privacy policy and security standards.
Why we collect it, and our legal basis
Under the General Data Protection Regulation (GDPR) we must have a lawful basis for processing your data. Ours are as follows.
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Taking payment and preventing fraud | Contract and legitimate interests |
| Responding to your enquiries | Legitimate interests |
| Confirming that we may lawfully ship a specimen to you | Legal obligation |
| Keeping records for tax and accounting | Legal obligation |
| Sending marketing emails | Consent |
| Improving our website and service | Legitimate interests |
You can withdraw consent for marketing at any time by using the unsubscribe link in any email or by contacting us.
Who we share your data with
We share personal data only where necessary, and only with:
- Shipping and courier partners, so we can deliver your order
- Our payment provider, to process your payment
- Our website and hosting providers, who maintain the site
- Professional advisers, such as accountants or lawyers, where required
- Authorities or regulators, where we are legally obliged to do so, including in connection with the lawful movement of regulated specimens
We do not sell your personal data. We do not share it for third-party advertising.
International transfers
Some of our service providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards, such as standard contractual clauses or an adequacy decision, to protect your data to the same standard.
How long we keep it
We keep personal data only as long as necessary:
- Order and transaction records: for as long as required by tax and accounting law in our jurisdiction, typically [X] years
- Documentation relating to regulated specimens: for as long as required by the applicable regulations
- Enquiry correspondence: years from your last contact
- Marketing data: until you unsubscribe
After that, data is securely deleted or anonymized.
Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data, where there is no overriding legal reason for us to keep it
- Restrict how we process your data
- Object to processing based on legitimate interests, and to direct marketing
- Data portability, receiving your data in a portable format
- Withdraw consent at any time, where consent is our basis
To exercise any of these rights, contact us at Sales@thebonesvault.com. We will respond within one month.
If you are unhappy with how we handle your data, you may complain to your national data protection authority. In France this is the CNIL (cnil.fr).
Cookies
We use cookies to make the site work and to understand how it is used.
- Essential cookies keep your basket and session working. The site cannot function without them.
- Analytics cookies help us see how visitors use the site so we can improve it.
- Preference cookies remember your settings.
You can control cookies through your browser settings and through our cookie banner. Disabling essential cookies may prevent parts of the site from working.
Security
We use appropriate technical and organizational measures to protect your data, including encrypted connections (SSL), restricted access to personal data, and secure payment processing through a certified provider. No system is completely secure, but we take these responsibilities seriously.
Discretion
We understand that purchases from our store are often private. We ship in plain, unmarked packaging and we do not disclose the nature of your purchase to third parties beyond what is legally required for shipping and customs.
Children
Our site and products are not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. The current version is always shown on this page, with the date it was last updated at the top.
Contact
For any privacy question or request: Sales@thebonesvault.com · 521 Route De Charenton, Lieu Dit La Petite Prade, 18200 Saint-Amand-Montrond, France