Privacy Policy (GDPR)
Last updated: 04/14/2026
Who is responsible for your data?
Lucien Esnault — Atelier Giverny Email: contact.ateliergiverny@gmail.com
What data do we collect?
As part of your browsing and purchases on the Site, we collect the following data:
- Identification data: surname, first name, email address
- Delivery data: postal address, telephone number
- Payment data: processed directly and secured by Shopify Payments — we do not have access to your full bank details
- Browsing data: IP address, browser type (automatically collected by Shopify)
Why do we collect this data?
| Purpose | Legal Basis |
|---|---|
| Processing and shipping your order | Contract execution |
| Communication regarding your order (confirmation, tracking) | Contract execution |
| Managing returns and customer service | Contract execution / Legal obligation |
| Retention of invoices and accounting data | Legal obligation (10 years) |
With whom do we share your data?
Your data is shared only with third parties necessary for processing your order:
- Shopify Inc. — store hosting and management
- Printful Inc. — order fulfillment and shipping (privacy policy: printful.com/policies/privacy-policy)
- Carriers — delivery of your package
No data is sold or transferred for commercial purposes to third parties.
How long do we keep your data?
- Order data: 10 years (legal accounting obligation)
- Customer account data: until account deletion or 3 years of inactivity
- Browsing data: session duration (managed by Shopify)
Your rights
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access to your personal data
- Right to rectification in case of error
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object to processing
To exercise these rights, please contact us at: contact.givernystore@gmail.com
You can also lodge a complaint with the CNIL (www.cnil.fr).