We only request information useful for orders, replies and the optional parent account, and we do not sell personal data.
Data and purposes
Orders: customer identity, contact and delivery address to execute the contract, deliver and meet accounting obligations.
Contact and professional requests: information supplied in the form to answer the request.
Newsletter: email, optional first name, segment, consent date and source until withdrawal.
Optional parent account: verified parent email, optional first name and language; child pseudonym, avatar, reading range and minimal journey progress.
Security: short-lived, pseudonymous counters protect public forms against abuse.
Anonymous audience measurement
First-party audience measurement records pages and useful actions with a random identifier that disappears with the browser session. It uses no advertising cookie and stores no IP address, name, email, delivery address, reading answer or child data. Data is not combined across websites and is removed after no more than twenty-five months. You can opt out from the footer at any time.
Optional parent account and children’s journey
The Roots Route remains available without an account. If a parent chooses to protect the scroll, we synchronise only the child’s pseudonym, avatar, reading range, route and completed stops, activated books, completion date and technical version data. Free-form reading answers, oral exercises, adult-listening confirmations, memories, drawings and texts stay on the device and are never synchronised.
Creating a profile requires the adult to confirm that they are the parent or authorised legal guardian. The interface also prompts them to explain to the child, in age-appropriate words, that the scroll will be saved and can be recovered on another device.
Birth day and month, and optionally the year, are requested only when the parent chooses to save the birthday in the profile. No message is sent unless birthday surprises are enabled separately. The date is not required to read and is not used for advertising profiling. The parent can disable the feature or erase the date at any time.
Legal basis and separate choices
Account security and requested synchronisation provide the service selected by the parent. Reading summaries, the cultural birthday surprise, and news or offers are three separate, optional and unticked choices. Each can be withdrawn at any time from the parent area without losing access to the scroll. Birthday messages contain no commercial offer; marketing is sent only with the corresponding consent.
Recipients and retention
Access is limited to authorised Le Buntu Village administrators and strictly necessary providers such as hosting, email, delivery and the selected payment provider. Payment card details are not stored by Le Buntu Village.
Orders and invoices: statutory accounting retention period.
Unfinished orders: automatically removed after the configured operational period.
Contact and B2B leads: up to three years after the last useful exchange.
Newsletter: until unsubscribing or prolonged inactivity.
Technical copies of automated emails: up to 30 days after delivery or final delivery failure.
Parent account, profiles and synchronised progress: until deletion, followed by removal from the active database. Residual technical copies follow the documented security rotation cycle, remain isolated and are not reused in normal operations, unless law or security requires otherwise.
Your rights
You may request access, correction, erasure, restriction, portability or objection where applicable. A parent may request a readable export, delete one child profile or the whole account, and change each communication preference separately from the parent area or by emailing contact@lebuntuvillage.com. You may also contact your competent data protection authority.
