From $14 to the USA. No subscription. No hidden fees. 15 days free storage.

VoilàShipGet started

Legal

Privacy policy

Forwarding a parcel means handling your address, your phone number and a list of what you bought. This page says exactly what we do with it.

Who is responsible

MAISON YILDIRIM, SAS (société par actions simplifiée), 44 rue Pasquier, 75008 Paris, France — SIREN 106970932 — trading as VoilaShip. We are the data controller. Because we are established in France, the GDPR applies to what we do with your data, wherever you live. Write to hello@voilaship.com for anything on this page.

What we collect, and why

Your account. Email address and password. We need these to give you a French address with a suite number, and to show you your packages. Without them there is no service.

Your US delivery address and phone number. FedEx will not accept an international shipment without a contact phone number for the recipient — that is a carrier requirement, not a marketing one.

What is in your packages. Description, quantity, declared value, weight and photographs taken on arrival. US customs law requires an accurate declaration for every parcel entering the country, and the photos are how you check that what arrived is what you ordered.

Identity documents, when we ask for them. Some shipments need the recipient's identity confirmed before they can be exported. That check runs inside Stripe Identity: they hold the document, and we only ever see whether the check passed.

Payment records. Amount, currency, date and a payment reference. Card numbers are entered directly into Stripe's own fields and never touch our servers.

How you use the site. Pages viewed, approximate location from your IP address, device type, and which advertisement or link brought you here.

The legal grounds

  • Performing our contract with you — the account, the addresses, the package records, the payment. We cannot ship a parcel without them.
  • Legal obligation — customs declarations, export controls, and the ten years of accounting records French law requires us to keep.
  • Legitimate interest — understanding which pages and campaigns bring us customers, and keeping the service secure against fraud and abuse.

Who else receives it

We do not sell your data, and we do not share it with anyone who is not needed to move your parcel or run the business. The full list:

  • Supabase — Database, accounts and file storage

    Holds your account, addresses, package records and the photos we take on arrival.

  • Stripe — Payments and identity verification

    Takes the payment and, where we need it, verifies identity. Card numbers go straight to Stripe — they never reach our servers, and we cannot see them.

  • Resend — Transactional email

    Sends the arrival notices, quotes and tracking emails. Receives your email address and the contents of those messages.

  • FedEx — Carrier

    Receives the delivery address, phone number and the customs declaration — the description, quantity and declared value of what is in the box. Customs authorities require this.

  • Google (Analytics and Ads) — Audience measurement and advertising

    Receives site usage data and, when a shipment is paid, the amount and a hashed form of your email address so a sale can be matched to the ad that led to it.

  • Vercel — Hosting

    Serves the site and keeps short-lived server and security logs.

Several of these companies are based in the United States, so your data crosses the Atlantic. Those transfers rely on the EU–US Data Privacy Framework where the company is certified under it, and on the European Commission's standard contractual clauses otherwise.

Measurement and advertising

The site loads Google Analytics and the Google Ads tag. They set cookies that let Google recognise a returning browser, so we can tell whether an advertisement produced a shipment rather than just a visit. When a shipment is paid for, we report the transport revenue and, where available, an irreversibly hashed version of your email address — Google can use it to match the sale to a click, but cannot read the address from it.

If you would rather not be counted, the Google Analytics opt-out add-on blocks it across every site you visit, and blocking third-party cookies in your browser has the same effect here. Nothing about the service changes if you do — the calculator, your dashboard and your shipments work identically.

How long we keep it

  • Account data — while your account exists, then deleted within 30 days of your asking us to close it.
  • Shipment and customs records — kept as part of the accounting record.
  • Invoices and accounting — ten years, as required by article L123-22 of the French Commercial Code. This one we cannot shorten at your request.
  • Package photographs — kept with the shipment record, so that a damage or loss claim can still be evidenced after the fact.
  • Analytics — Google retains event-level data for 14 months.

Your rights

You can ask for a copy of everything we hold about you, have it corrected, have it deleted, take it elsewhere in a portable format, or object to us using it for measurement. Email hello@voilaship.com and we will answer within one month. The one limit is the accounting record above: a deletion request cannot remove an invoice we are legally required to keep.

If you think we have handled this badly, you can complain to the CNIL, the French data protection authority, at cnil.fr. You are also free to tell us first — it is usually faster.

Children

The service is not intended for anyone under 16, and we do not knowingly create accounts for them.

Changes

If we add a service that handles your data differently, this page changes with it and the date below changes too. Material changes are emailed to account holders rather than quietly published.

Last updated 1 August 2026. See also the terms of service and the legal notice.