Privacy Policy

Last updated: June 2026

This Privacy Policy describes how Margaux & Co (“we,” “us,” or “our”) collects, uses, and protects your personal data when you visit our online store or place an order. We are committed to respecting your privacy and processing your information transparently, in accordance with the General Data Protection Regulation (GDPR).

1. Who Is the Data Controller?

The data controller responsible for processing your personal data is Margaux & Co, which operates the online store accessible through our website. For any questions regarding your personal data, you can contact us at: bonjour@margauxandco.com.

2. What Data Do We Collect?

• Identification data: first name, last name, email address, and telephone number (optional).

• Shipping and billing data: full postal address.

• Payment data: securely processed by our payment service provider, Stripe. We never store your bank card details.

• Browsing data: collected through Shopify Analytics (pages viewed, visit duration, traffic source) to improve your experience.

• Order history: products purchased, amounts, and dates.

3. Why Do We Collect This Data? (Legal Basis — GDPR Article 6)

• Performance of a contract (Article 6(1)(b)): processing and shipping your orders, customer service, and return management.

• Legal obligation (Article 6(1)(c)): retaining invoices for accounting and tax purposes.

• Legitimate interest (Article 6(1)(f)): improving our website, ensuring security, and preventing fraud.

• Consent (Article 6(1)(a)): sending newsletters and using marketing and analytics cookies.

4. Cookies

Our website uses essential cookies (such as shopping cart and session cookies), as well as analytics and marketing cookies that require your consent. For more information, please refer to our Cookie Policy.

5. How Long Do We Retain Your Data?

• Active customer data: 3 years from your last contact or order.

• Invoices and accounting data: 10 years, in accordance with French legal requirements.

• Browsing data: maximum of 13 months.

6. Who Do We Share Your Data With?

We share your data only with trusted service providers that are strictly necessary for the proper operation of our online store:

• Shopify Inc.: hosting and operation of our online store.

• Stripe: secure payment processing.

• Klarna / Alma: interest-free installment payments in three installments.

• Colissimo: delivery of your orders.

• Meta Platforms: if you have consented to marketing cookies, for advertising retargeting purposes.

We never sell your personal data to third parties.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: obtain a copy of the data we hold about you.

• Right to rectification: correct inaccurate information.

• Right to erasure: request the deletion of your data.

• Right to object: object to the processing of your data.

• Right to restriction of processing: temporarily restrict the processing of your data.

• Right to data portability: receive your data in a structured format.

• Right to withdraw your consent at any time.

8. How Can You Exercise Your Rights?

To exercise any of these rights, send us an email at bonjour@margauxandco.com specifying your request. We will respond within a maximum of 30 days.

9. Complaints to the Supervisory Authority

If you believe that your rights have not been respected, you may lodge a complaint with the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés — CNIL): www.cnil.fr.

10. Hosting Provider

Our online store is hosted by:

Shopify Inc.
33 New Montgomery Street, Suite 750
San Francisco, CA 94105, USA

11. Changes to This Policy

This Privacy Policy may be updated to reflect legal or technical developments. In the event of a material change, we will inform you by email or through a notification on our website.