Privacy policy

Data controller

Personal data collected on this site is processed by VESTIGIUM, a French sole trader (entrepreneur individuel), SIREN 978 617 801, registered office disclosed at official opening (summer 2026). Identity details are publicly available on annuaire-entreprises.data.gouv.fr.

Contact: contact@vestigiumfragrance.com

Data collected

As part of your order and browsing, we may collect:

• Identity: first name, last name
• Contact details: email, phone, postal address
• Order data: products purchased, amount, history
• Browsing data: IP address, browser type, pages visited (via cookies)
• Payment data: processed exclusively by our provider Shopify Payments / Stripe: we never have access to your full banking details

Processing purposes

• Order management and processing
• Shipping and invoicing
• Customer service and after-sales
• Sending commercial communications (with your consent)
• Site improvement (anonymised statistical analysis)
• Compliance with our legal and accounting obligations

Legal basis

Processing relies on the sales contract execution (order), your consent (newsletter, non-essential cookies), and our legal obligations (accounting documents retention).

Retention period

• Customer data: 3 years from last contact
• Invoicing data: 10 years (accounting obligation)
• Cookies: 13 months maximum

Recipients

Your data may be transmitted to our subcontractors for service needs:

• Shopify International Ltd (hosting, Dublin, Ireland)
• Stripe / Shopify Payments (payment processing)
• Carriers (Colissimo, Mondial Relay, Chronopost or equivalents)
• Tax and administrative authorities upon legal request

Your rights

Under GDPR and the French Data Protection Act, you have the following rights:

• Right of access and rectification
• Right to erasure
• Right to object and limit processing
• Right to data portability
• Right to define post-mortem directives
• Right to withdraw consent at any time

To exercise your rights: contact@vestigiumfragrance.com

Complaint

You have the right to lodge a complaint with the CNIL (www.cnil.fr) if you believe your rights are not respected.