What we know about you
Privacy
What data we collect, why, how long we keep it, and who has access to it. The short answer: strictly what is needed, and nothing for advertising.
The data controller
Dis maman, dis papa, whose registered office is at 19 rue Hooker Doolittle, 3e étage, appartement 8, Hédi Chaker, Bab El Bhar, 1002 Tunis, Tunisie, decides what is collected on this site and what is done with it.
For any question about your data, and for any request to access, correct or erase it, write to signalement@dismamandispapa.com. For everything else, contact@dismamandispapa.com and +41 78 960 63 73.
What we collect, and why
| When | What we keep | Why |
|---|---|---|
| You place an order | Surname, first name, email address, telephone, delivery address, governorate, and the contents of the order | To prepare the parcel, have it delivered, take payment, issue the invoice and reply if something goes wrong |
| You write through the contact form | Name, email address, subject and message | To reply to you |
| You send us an application | The same details, plus the files you attach: manuscript, CV, portfolio | To read your proposal and reply to you |
| You sign up to the newsletter | Email address, first name and surname if given, date of consent | To send you the newsletter, and to show that you asked for it |
This site opens no visitor account, and that is not an oversight. You order without signing up: there is no password to choose, no customer area, no saved address book. The only accounts that exist are those of the publishing house team, created from the back office; no page of the public site lets anyone open one.
The delivery address is therefore frozen at the moment of the order, with it. A past order goes on showing the address the parcel actually went to, even if you give us another one afterwards: that is what allows a lost parcel to be traced.
What we store on your device
Four small things, and nothing else. They are set by this site, they stay on your device, and they only serve to make work what you asked for. The law does not require your consent for those, because without them the site stops working; we are telling you about them anyway.
| What is stored | What it contains | What for | How long |
|---|---|---|---|
| dmdp_panier | The list of what you put in the basket | Keeping your basket as you move from page to page | One month |
| dmdp_promo | The discount code you entered | Not making you type it again on every page | One month |
| dmdp_langue | Three letters: fr, en or ar | Never sending you to a language you did not choose. It is only written if you click in the language menu yourself | One year |
| Your answer about audience measurement | “accepted” or “refused” | Not asking you again on every visit | Until you clear this site’s data |
We count visits with Umami, a tool we host ourselves, on our own server. The data goes to nobody.
Umami sets no cookie and leaves no fingerprint on your device. That is still not a reason to ask you nothing: the script reads the page you opened, the site you came from, your browser, your screen and your language, and our server works out an approximate country from your address. So we ask for your consent before loading it, and as long as you have not said yes, it is not downloaded at all.
You can change your mind whenever you like: the “Cookies and audience measurement” link, at the bottom of every page, reopens the question. Refusing is a button, the same size as accepting, right next to it.
What is recorded, if you accept: the page opened, the site or search engine you came from, your browser, your system, the device type and the country, worked out approximately. Nobody is identifiable, and we cannot link a visit to a person.
We set no advertising tracker, no social network button that follows you around, and we sell nothing on.
Who else sees your data
| Provider | What it receives | What for |
|---|---|---|
| Contabo GmbH | Everything stored on the server, since the machine sits on its premises | Hosting the site and the database |
| Brevo, a French company | Your email address and the contents of the message sent | Delivering the site’s emails: order confirmation, replies, newsletter |
| ClicToPay | The amount, the order number and your email address | Taking a card payment in dinars. Your card number is entered at their end, never at ours |
| Stripe | The amount, the order number and your email address | Taking a card payment in Swiss francs. Your card number is entered at their end, never at ours |
| The carrier | Your name, your address and your telephone number | Handing you the parcel |
We neither sell, rent nor exchange any data. Nobody outside the publishing house has access to the back office, and every action taken there is logged.
For how long
- Orders and invoices: for as long as accounting law requires a supporting document to be kept. An invoice already issued cannot be erased on request, and that is the one exception to your right of erasure.
- Messages received through the contact form: for as long as it takes to deal with the request, then for as long as it takes to find the exchange again if you write to us about it. Ask us to erase a message and we erase it.
- Applications and the files that come with them: for as long as it takes to consider the proposal and answer it. Those files are never public; they open only from the back office, to someone in the house. Ask us to erase them and we erase them.
- Newsletter sign-ups: until you unsubscribe. Every bulk mailing carries a link that works in one click, with no need to log in. After you unsubscribe we keep your address and the date, and nothing else, so as not to write to you again by mistake.
- Audience measurement: nothing to keep that concerns you. Visits are counted without an identifier and attach to nobody, so there is nothing to erase and nothing to ask for.
Your rights
You may ask to see the data we hold about you, to have it corrected, to have it erased, and to stop receiving our mailings. A request for erasure cannot cover an invoice already issued, which the law requires us to keep.
Write to signalement@dismamandispapa.com. We reply, and we say what we have done.
The processing of personal data in Tunisia falls under the national authority for the protection of personal data, with which you may lodge a complaint.
Security
The site is served over HTTPS from end to end. The team accounts are the only ones on the site, and their passwords are not stored: only a fingerprint is, computed with an algorithm designed to resist brute force attacks. Access to the back office is protected by a second factor and by an audit log.
Images uploaded to the back office are re-encoded, which wipes their metadata along the way, GPS position included. A photograph taken on a phone inside the publishing house therefore does not publish its address.
Last updated : 24 September 2026