Privacy Policy

Privacy policy
Last updated: September 26, 2026

1. Who we are
The controller of your data is LA PALETTE DU PARFUMEUR, SARL, SIRET 979 627 080 00018, 16 rue Charles de Gaulle, 57950 Montigny-lès-Metz, France. Contact: contact@lapaletteduparfumeur.com

2. Data we collect
- When you order or create an account: last name, first name, shipping and billing addresses, email address, phone number, order history. Bank card data is processed directly by our payment providers; we never have access to it.
- When you subscribe to our newsletter: email address and preferences.
- When you contact us or leave a review: the content of your messages and reviews.
- When you browse the site: technical and browsing data (IP address, device, browser, pages viewed, products added to the cart), collected through cookies and similar technologies, under the conditions described in section 6.

3. Why we use your data
- To process and deliver your orders, manage returns and customer service (performance of the contract).
- To meet our legal obligations, in particular accounting and tax obligations (legal obligation).
- To send you our news and offers by email, only if you have agreed (consent).
- To measure site audience and improve our services (consent).
- To show you relevant advertising on other sites and apps and measure its effectiveness (consent).
- To prevent fraud and secure the site (legitimate interest).

4. Who we share your data with
We never sell your data. We share it only with providers who help us run the shop:
- Shopify: shop hosting and order processing.
- Our payment providers (Shopify Payments, PayPal): secure payment processing.
- Our carriers (Colissimo, DHL): delivery of your orders.
- Klaviyo: sending our emails and newsletters.
- Judge.me: collection and publication of customer reviews.
- Google (Google Ads, Google Merchant Center, Google Analytics): displaying our products on Google, advertising and measuring its effectiveness. When you place an order, and if you have accepted advertising cookies, an encrypted (hashed) version of your email address may be sent to Google so that it can measure the results of our ads more accurately (“enhanced conversions”). Google does not receive your address in plain text.
- Meta (Facebook, Instagram) and TikTok: displaying our products on their platforms, advertising and measuring its effectiveness, through their pixels and measurement tools.
These partners process your data according to our instructions or, for advertising, according to their own privacy policies.

5. Transfers outside the European Union
Some of our providers (notably Shopify, Google, Meta and Klaviyo) may process your data outside the European Union, in particular in the United States and Canada. These transfers are covered by safeguards recognized by the European Commission (adequacy decision, including the EU–US Data Privacy Framework, or standard contractual clauses).

6. Cookies
We use cookies that are necessary for the site to function and, with your consent, audience measurement and advertising cookies (Google, Meta, TikTok). You can accept, refuse or change your choices at any time via the cookie banner. For more details, see our Cookie Policy.

7. Retention period
- Customer data: for the duration of the commercial relationship, then 3 years after your last purchase so that we can send you our offers (if you have consented).
- Invoices and accounting data: 10 years, as required by law.
- Newsletter: until you unsubscribe.
- Cookies: 13 months maximum; your choices are kept for 6 months.

8. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time (for example via the unsubscribe link in every email, or via the cookie banner). To exercise these rights, write to us at contact@lapaletteduparfumeur.com. We reply within one month.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL (www.cnil.fr).

9. Security
We and our providers take technical and organizational measures to protect your data (secure connection, restricted access). As no system is completely infallible, we recommend that you never send us sensitive information through unsecured channels.

10. Minors
Our site is not intended for people under 16, and we do not knowingly collect their data.

11. Changes
We may update this policy. The date of the last update appears at the top of this page.