Fleuron attaches particular importance to the protection of your personal data. This policy sets out what data we collect, why we process it, who has access to it, how long we keep it and what rights you have.
Data controller
The data controller is FLEURON PARIS, a société par actions simplifiée with a share capital of €31,486.80, having its registered office at 3 rue Saint-Fiacre, 75002 Paris, France, registered with the Paris Trade and Companies Register under number 853 928 927.
For any question relating to your personal data, you may write to us at hello@fleuron.paris or by post to the address above.
For orders delivered outside France, our partner GLOBAL-E handles payment, invoicing, customs and tax formalities and delivery. In doing so it processes certain data relating to you on its own behalf, under its own privacy policy, available at www.global-e.com.
In addition, for the collection and transmission of data through the Meta pixel and the Conversions API, Fleuron and Meta Platforms Ireland Limited act as joint controllers, each in respect of the operations concerning it. The terms of this joint controllership are set out in the controller addendum published by Meta.
Data we collect
Data you provide to us
Your first and last name, delivery and billing address, email address, telephone number, and the content of your exchanges with our Client Services team.
Order-related data
Details of the products ordered, amount, date, delivery method, shipment tracking, together with any return, withdrawal or warranty request.
Payment data
The information required to process payment for your order, handled directly by our payment providers. We never have access to your card number and do not store it.
Browsing data
Your IP address, browser and device type, pages viewed and the date of your visits, collected through cookies under the conditions set out in section 6.
Why we process your data
Order management
Processing, preparation, dispatch, delivery tracking, and handling of returns, withdrawals and legal warranties.
Legal basis: performance of the contract entered into with you.
Retention: for the duration of the commercial relationship, then three years from your last contact with us.
Invoicing and accounting obligations
Issuing and retaining invoices and supporting documents.
Legal basis: legal obligation.
Retention: ten years from the end of the relevant financial year.
Payment and fraud prevention
Verifying and securing transactions.
Legal basis: performance of the contract and our legitimate interest in preventing non-payment and fraudulent use.
Retention: in accordance with the periods applied by our payment providers, and thirteen months for transaction traceability data.
Client Services
Answering your questions, handling complaints and following up on your requests.
Legal basis: performance of the contract and our legitimate interest in maintaining the quality of our service.
Retention: three years from your last contact.
Marketing communications by email
Sending our newsletter and information about our products, new arrivals and events.
Legal basis: your consent where you are not a customer, obtained through a separate opt-in checkbox. Our legitimate interest where you are already a customer and the communications relate to products similar to those you have purchased. In both cases you may object at any time.
Retention: until you withdraw your consent or object, and in any event no later than three years after your last contact with us.
Website audience measurement
Understanding site traffic and improving our website.
Legal basis: your consent, obtained through our cookie banner.
Retention: thirteen months for the cookies placed, twenty-five months for audience data.
Targeted advertising and campaign measurement
Serving personalised advertisements on our advertising partners' platforms, measuring their performance and attributing sales.
Legal basis: your consent, obtained through our cookie banner.
Retention: thirteen months for the trackers placed, twenty-five months for the associated data.
Building advertising audiences
Transmitting pseudonymised identifiers to our advertising partners, such as your email address in hashed form, in order to send you relevant communications, exclude certain categories of recipients or build similar audiences.
Legal basis: your consent.
Retention: until you withdraw your consent, and in any event no later than three years after your last contact with us.
Requesting and publishing customer reviews
Inviting you to rate your experience after a purchase, and publishing the reviews collected.
Legal basis: our legitimate interest in gathering and sharing feedback on our products and service. You may object at any time.
Retention: three years from your last contact.
We do not take any decision producing legal effects concerning you based solely on automated processing.
Who has access to your data
Your data is accessible to authorised Fleuron staff, within the limits of their duties, and to the following providers, which act on our instructions or for the specific purposes of the service concerned:
Shopify Inc.
For hosting our website and processing payments for orders delivered in France, whose registered office is at 151 O'Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada.
GLOBAL-E
For the processing of orders delivered outside France, including payment, invoicing, customs and tax formalities and logistics.
Klaviyo, Inc.
For sending our marketing communications by email.
Google, for audience measurement on our website and for serving and measuring our advertising campaigns, subject to your consent.
Meta Platforms Ireland Limited
For measuring our campaigns, serving personalised advertising and building advertising audiences, subject to your consent.
TikTok and Pinterest
For serving and measuring our advertising campaigns, subject to your consent.
Trustpilot
For collecting and publishing customer reviews.
Axeptio SAS
For collecting and storing the record of your cookie preferences.
Our carriers, La Poste and DHL
For the delivery of your orders and the handling of returns.
Our accounting and legal advisers
In the course of their engagements and under a duty of confidentiality.
Your data may also be disclosed to administrative or judicial authorities where we are required by law to do so.
We do not sell your personal data. Apart from the transmissions to our advertising partners described in section 3, which are subject to your consent and which you may withdraw at any time, we do not transfer your data to any third party for that party's own marketing purposes.
Transfers outside the European Union
Some of our providers are established outside the European Union.
Transfers to Canada, where Shopify is established, are covered by an adequacy decision of the European Commission recognising a level of protection equivalent to that of European law.
Transfers to the United States, in particular to Klaviyo, Google, Meta, TikTok and Pinterest, are governed either by the adequacy decision relating to the EU-US Data Privacy Framework or by the standard contractual clauses adopted by the European Commission, supplemented where appropriate by additional security measures.
Trustpilot is established in Denmark, within the European Union, and gives rise to no transfer in this respect.
You may obtain a copy of the applicable safeguards by writing to us at hello@fleuron.paris.
Cookies
A cookie is a small file placed on your device when you visit our website. Some cookies are strictly necessary for the site to function, in particular to remember the contents of your basket or to secure your session. These are placed without your consent, as the site could not operate without them.
All other cookies and trackers, in particular those used for audience measurement and advertising, are placed only after obtaining your consent through the banner displayed on your first visit. You may accept or refuse these cookies, category by category, and change your choice at any time through the cookie management tool accessible from the website.
Refusing non-essential cookies has no effect on your browsing or on your ability to place an order.
The collection and storage of your choice is handled by Axeptio, a solution operated by Axeptio SAS, a company established in France. You may reopen the preference management tool at any time from the widget displayed on the website.
Cookies subject to consent are kept for a maximum of thirteen months. Once that period expires, your consent is requested again.
You may also configure your browser to refuse some or all cookies, bearing in mind that blocking strictly necessary cookies may prevent certain features of the site from working.
Security
We implement appropriate technical and organisational measures to protect your data against loss, alteration, disclosure or unauthorised access. Our providers are selected for the safeguards they offer in terms of data protection and are bound by corresponding contractual commitments.
For your part, we encourage you to keep your login details confidential and not to disclose them to third parties.
Your rights
In accordance with Regulation (EU) 2016/679 and French Act No. 78-17 of 6 January 1978 as amended, you have the following rights:
Right of access
To obtain confirmation that your data is being processed and to receive a copy of it.
Right to rectification
To have inaccurate or incomplete data corrected.
Right to erasure
To request the deletion of your data, subject to our legal retention obligations.
Right to restriction
To request the temporary suspension of processing, in particular while the accuracy of contested data is verified.
Right to object
To object to processing based on our legitimate interest, and to object without condition to direct marketing.
Right to data portability
To receive the data you have provided to us in a structured, machine-readable format, or to have it transmitted to another controller.
Withdrawal of consent
To withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.
Post-mortem instructions
To issue instructions regarding the fate of your data after your death.
These rights may be exercised by writing to hello@fleuron.paris, or by post to FLEURON PARIS, 3 rue Saint-Fiacre, 75002 Paris, France. We may ask you for proof of identity where there is reasonable doubt as to your identity. We will respond within one month, which may be extended by two further months for complex requests, in which case we will inform you.
If, having contacted us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority: Commission Nationale de l'Informatique et des Libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at www.cnil.fr.
Links to third-party websites
Our website may contain links to websites operated by third parties. This policy does not apply to those websites, and we encourage you to consult their own privacy policies.
This does not concern the providers listed in section 4, which act on our behalf and in respect of which we remain your point of contact.
Changes to this policy
We may amend this policy to reflect changes in our processing activities or in applicable regulations. The version in force is the one published on our website, bearing the update date shown at the top of this document. Where a change is substantial, we will inform you by appropriate means.
Contact
For any question, request or complaint relating to the processing of your personal data: hello@fleuron.paris
Last updated: August 2026