What we know about you
Privacy
What data we collect, why, how long we keep it, and who has access to it. The short answer: strictly what is needed, and nothing for advertising.
This page is under legal review. The passages highlighted in yellow have not been filled in yet.
The data controller
Dis maman, dis papa, whose registered office is at 19 rue Hooker Doolittle, 3e étage, appartement 8, Hédi Chaker, Bab El Bhar, 1002 Tunis, Tunisie, decides what is collected on this site and what is done with it.
For any question about your data, write to to be completed: dedicated contact address for personal data.
What we collect, and why
| When | What we keep | Why |
|---|---|---|
| You place an order | Surname, first name, email address, telephone, delivery address, governorate, and the contents of the order | To prepare the parcel, have it delivered, take payment, issue the invoice and reply if something goes wrong |
| You write through the contact form | Name, email address, subject, message, and any attachments if you are applying for a job | To reply to you |
| You sign up to the newsletter | Email address, first name and surname if given, date of consent | To send you the newsletter, and to show that you asked for it |
| You create an account | Email address, name, telephone, saved addresses, and the second factor if you switch it on | To let you find your orders again without typing everything in a second time |
| You answer a survey | Your answers, a fingerprint of your IP address and your browser | To stop the same person answering a hundred times, and nothing else |
A delivery address is frozen at the moment of the order: if you change it later in your account, the past order goes on showing the address the parcel was actually sent to. That is deliberate, and it is what allows a lost parcel to be traced.
Audience measurement, and why there is no cookie banner
We count visits with Umami, a tool we host ourselves, on our own server. The data goes to nobody.
Umami sets no cookie and leaves no fingerprint on your device. That is why this site displays no “do you accept cookies” banner: there is nothing to accept. We set no advertising tracker, no social network button that follows you around, and we sell nothing on.
What is recorded: the page opened, the site or search engine you came from, your browser, your operating system, the type of device and the country, worked out approximately. Nobody is identifiable, and we cannot link a visit to a person.
Who else sees your data
| Provider | What it receives | What for |
|---|---|---|
| Contabo | Everything stored on the server, since the machine sits on its premises | Hosting the site and the database |
| Brevo, a French company | Your email address and the contents of the message sent | Delivering the site’s emails: order confirmation, replies, newsletter |
| ClicToPay | The amount, the order number and your email address | Taking a card payment in dinars. Your card number is entered at their end, never at ours |
| Stripe | The amount, the order number and your email address | Taking a card payment in Swiss francs. Your card number is entered at their end, never at ours |
| The carrier | Your name, your address and your telephone number | Handing you the parcel |
We neither sell, rent nor exchange any data. Nobody outside the publishing house has access to the back office, and every action taken there is logged.
For how long
- Orders and invoices: for as long as accounting law requires a supporting document to be kept.
- Messages received through the contact form: for as long as it takes to deal with the request, then a reasonable period so an exchange can be found again.
- Newsletter sign-ups: until you unsubscribe. Every bulk mailing carries an unsubscribe link that works in one click, with no need to log in.
- Accounts: for as long as the account exists. Ask us to delete it and we will.
- to be completed: retention periods in figures, to be settled with the lawyer
Your rights
You may ask to see the data we hold about you, to have it corrected, to have it erased, and to stop receiving our mailings. A request for erasure cannot cover an invoice already issued, which the law requires us to keep.
Write to to be completed: dedicated contact address for personal data. We reply, and we say what we have done.
The processing of personal data in Tunisia falls under the national authority for the protection of personal data, with which you may lodge a complaint.
Security
The site is served over HTTPS from end to end. Account passwords are not stored: only a fingerprint is, computed with an algorithm designed to resist brute force attacks. Access to the back office is protected by a second factor and by an audit log.
Images uploaded to the back office are re-encoded, which wipes their metadata along the way, GPS position included. A photograph taken on a phone inside the publishing house therefore does not publish its address.
Last updated : 22 September 2026