Privacy policy
https://www.heritagevictoire.fr/
March 30, 2026
This personal data management policy aims to inform and present to the various users of the website https://www.heritagevictoire.fr/ (hereinafter "the Website") how HERITAGE VICTOIRE processes the personal data collected as data controller.
Data concerning users and customers in connection with the use of the Website and orders is processed by HERITAGE VICTOIRE as data controller under the conditions detailed below.
HERITAGE VICTOIRE's contact details appear in the legal notices.
DESCRIPTION OF PROCESSING CARRIED OUT IN CONNECTION WITH USE OF THE WEBSITE AND ORDERS
Creating an account
Data collected : first name, last name, email address, password (not stored in plain text), login history, preferences, account creation date.
Where applicable, data collected in connection with the order and order history.
If you create your account or log in using the "Shop" feature from an existing account, your information will be pre-filled from this source.
Purposes: management of registration and the customer account.
Legal basis : legitimate interests of HERITAGE VICTOIRE in allowing the creation of an account and enabling users to retrieve their information.
Data retention period :
-
Active database: retention for the duration of the account's activity and until the account is deleted by the user or after a period of 2 years of inactivity. HERITAGE VICTOIRE will notify Users of any account inactive for more than 2 years of the upcoming deletion of the account if the User does not respond within 90 days. In the absence of a response from the User, HERITAGE VICTOIRE will delete the account and archive the data.
-
Archive database: the data may be retained for 5 years from the date the account is deleted, based on the legitimate interests of HERITAGE VICTOIRE for the purpose of establishing, exercising or defending a legal claim (limitation period).
By way of exception to the above, account login logs are kept only for the duration of the account's activity.
The mandatory or optional nature of providing the data is specified at the time of collection. The mandatory provision of certain personal data is necessary for HERITAGE VICTOIRE to fulfill the purposes specified above. Failing this, the User will not be able to create their account.
Ordering products
Data collected: account data if the user has created one and is logged in, plus first name, last name, billing and shipping address(es) if different, payment method, order details, delivery method, exchanges and correspondence relating to the order.
Purposes :
-
Performance of the obligations related to the order such as delivery, invoicing and warranty or after-sales service obligations, as applicable;
-
Management of returns and recalls;
-
Generation of sales statistics via Shopify Analytics. Data is anonymized for use for statistical purposes.
Legal basis :
-
Performance of the contract (general terms and conditions of sale) and legal obligations relating to invoicing, accounting and the enforcement of warranties;
-
Legitimate interests of HERITAGE VICTOIRE in producing statistics.
Data retention period :
-
Active database: see account retention.
-
Archive database: see account retention.
By way of exception to the above, invoices are kept for 10 years (accounting obligations). Contracts worth more than 120 euros are archived for 10 years (legal obligation).
The mandatory or optional nature of providing the data is specified at the time of collection. The mandatory provision of certain personal data is necessary for HERITAGE VICTOIRE to fulfill the purposes specified above. Failing this, the User will not be able to place an order.
Contact form
Data collected: last name, first name, email address, message.
Purposes: responding to messages sent via the form and building a contacts file.
Legal basis: legitimate interests of HERITAGE VICTOIRE in connection with its commercial prospecting activity.
Retention period: 3 years from the last contact or until objection.
The mandatory or optional nature of providing the data is specified at the time of collection. The mandatory provision of certain personal data is necessary for HERITAGE VICTOIRE to fulfill the purposes specified above. Failing this, the User will not be able to use the contact form.
Newsletter sending
Data collected: email address, first name, newsletters sent, open clicks and, if available (account creation or order placement), last name, first name, purchase history.
Purposes: sending news and promotional offer emails concerning HERITAGE VICTOIRE, via the Klaviyo platform.
Legal basis : legitimate interests of HERITAGE VICTOIRE in connection with its commercial prospecting activity for customers, consent for non-customers.
Retention period: 3 years from the last contact or until objection or withdrawal of consent.
Cookies and trackers
Data is collected via cookies placed in users' browsers when they visit the Website, as described in the cookie management console.
In addition, the user is informed that personal data may be collected and processed via cookies, in accordance with the procedures described below:
Technical cookies
Data collected: IP address, session ID, browsing data (pages visited, actions taken), device information (device type, operating system, browser type).
Purposes: to ensure the proper functioning and security of the Website (authentication, cart maintenance, fraud prevention).
Legal basis: legitimate interests of HERITAGE VICTOIRE in connection with the operation and security of the Website.
Retention period: duration of the session or up to 2 years depending on the cookie.
Session cookie
Data collected: anonymous session ID, cart contents.
Purposes: maintaining the user's session and preserving the cart during browsing.
Legal basis: legitimate interests of HERITAGE VICTOIRE in connection with the operation of the Website.
Retention period : duration of the user's session on the Website.
Functional cookies
Data collected: language preferences, region, currency, display settings.
Purposes: storing users' choices and settings to provide a personalized experience.
Legal basis: legitimate interests of HERITAGE VICTOIRE (storage of language only); consent for the other preferences.
Retention period: up to 1 year.
Audience measurement cookies (Shopify Analytics)
Data collected : pages visited, traffic source, visit duration, conversion rate, anonymized identifiers.
Purposes: measuring the audience of the Website, understanding user behavior and optimizing the content and performance of the Website.
Legal basis: consent.
Retention period : up to 2 years.
Targeting cookies (Klaviyo)
Data collected: email address (if provided), browsing behavior on the Website, purchase history, tracking identifiers.
Purposes: tracking the behavior of identified users (customers or newsletter subscribers) to personalize marketing communications, measure the effectiveness of email campaigns and tailor offers to interests.
Legal basis: consent.
Retention period: up to 2 years.
Regarding third-party cookies: HERITAGE VICTOIRE and its partners act as joint controllers for the processing of personal data collected via its partners' cookies. Information about the partners can be found in the cookie management console.
RECIPIENTS OF PERSONAL DATA
Data controller: the data controller is the company HERITAGE VICTOIRE, whose full contact details are set out in the legal notices.
Recipients: in compliance with the purposes set out above, the User's personal data may be communicated:
-
To HERITAGE VICTOIRE staff for the management of accounts and Website features, as well as commercial management, contract monitoring and the performance of orders and after-sales service;
-
To HERITAGE VICTOIRE's technical providers (host Shopify International Limited, emailing platform Klaviyo), as well as to payment institutions, delivery providers and its advisors if necessary.
USER RIGHTS REGARDING THEIR PERSONAL DATA
Individuals whose data is collected by HERITAGE VICTOIRE have the following rights regarding their personal data at all times:
-
Right of access: obtain confirmation of the processing of their personal data as well as certain information about the processing, it being understood that this information is in any event provided in this personal data protection policy;
-
Right of rectification: obtain the rectification of their personal data when it is inaccurate or incomplete;
-
Right to erasure ("right to be forgotten"): obtain the erasure of their personal data when it is no longer necessary in light of the purposes for which it was collected or in the event of opposition to the processing of their personal data.
The right to erasure does not apply in the cases provided for in Article 17.3 of the GDPR. In particular, this right is not available as long as the user wishes to use the platform, this personal data being necessary for HERITAGE VICTOIRE to provide the service.
-
Right to restriction of processing: obtain the restriction of the processing of their personal data, in particular in the event of a dispute over the accuracy of the data, when the retention period for the data has expired but the person whose data is processed still needs to keep this personal data for the establishment, exercise or defense of a legal claim;
-
Right to portability: obtain the communication of the personal data provided to HERITAGE VICTOIRE in a readable format, or ask HERITAGE VICTOIRE to transmit the personal data provided to another data controller;
-
Right to object: object at any time, for reasons relating to their particular situation, to the processing of their personal data based on HERITAGE VICTOIRE's legitimate interest, except for compelling grounds invoked by HERITAGE VICTOIRE;
-
Right to withdraw consent: withdraw consent for data processing based thereon, the withdrawal of consent being applicable for the future;
-
Right to lodge a complaint: lodge a complaint with the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés) if the person whose data is processed considers that the processing carried out by HERITAGE VICTOIRE constitutes a breach of their personal data;
-
Right to define the directives relating to the fate of their personal data after their death.
These rights may be exercised at any time with HERITAGE VICTOIRE:
-
By email at the following address: domaine@heritagevictoire.fr
-
By post at the following address: 37 boulevard Aristide Briand 13100 Aix-en-Provence