Politique de confidentialité
Last updated: August 2026
We are committed to protecting your privacy and handling your data in compliance with the General Data Protection Regulation (GDPR) and applicable French law.
Information We Collect
We collect the following types of personal data when you interact with our website:
Order information: name, billing address, shipping address, email address, phone number, and payment details (card type, last four digits, but never the full number – we do not store CVV codes).
Account information: if you create an account, we store your login credentials (password is hashed) and your order history.
Communication data: any information you share when you contact us via email, phone, or our contact form.
Browsing data: via cookies and similar tracking technologies – see the Cookie section below.
How We Use Your Data
We use your personal data for the following purposes:
To process and fulfil your orders (including payment verification, order confirmation, shipping updates, and delivery notifications).
To respond to your customer service inquiries and manage returns or complaints.
To send you marketing communications, but only if you have given explicit consent (you can opt out anytime via the “unsubscribe” link in our emails or by contacting us).
To improve our website, product selection, and overall customer experience by analysing aggregated browsing behaviour.
To comply with legal obligations (e.g., tax reporting, fraud prevention).
Legal Basis for Processing
We rely on the following legal grounds under GDPR:
Performance of a contract: to process your orders and deliver services you request.
Legitimate interests: to improve our services and prevent fraud.
Consent: for marketing communications and certain cookie usage.
Legal compliance: for tax and accounting records.
Information Sharing
We never sell, rent, or trade your personal data to third parties. We do share necessary data with trusted service providers who help us run our business, strictly limited to:
Payment processors: Stripe or PayPal (we do not store your full card details).
Shipping carriers: La Poste, Chronopost (to deliver your order).
Email service provider: for sending order updates and marketing emails (only with consent).
All these third parties are contractually bound to keep your data confidential and use it solely for the specific tasks we assign them.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:
Order data: retained for 5 years from the end of the financial year (to comply with French tax and accounting requirements).
Account data: retained until you request deletion of your account.
Marketing data: retained until you withdraw your consent or after 3 years of inactivity.
Customer inquiry data: retained for 2 years after the last contact.
You may request deletion of your data at any time, subject to legal retention periods.
Cookies and Consent
We use cookies to enhance your browsing experience, analyse site traffic, and personalise content. When you first visit our website, a cookie banner appears where you can choose to accept or reject non‑essential cookies (e.g., analytics and marketing cookies). Essential cookies (e.g., for cart functionality) are set automatically and do not require consent.
You can change your cookie preferences at any time via the “Cookie Settings” link in our footer. You may also disable cookies through your browser settings, but please be aware that some features of our website may not function properly.
Your Rights
Under GDPR, you have the following rights:
Right to access: you can request a copy of the personal data we hold about you.
Right to rectification: you can correct inaccurate or incomplete data.
Right to erasure (“right to be forgotten”): you can ask us to delete your personal data, unless we are legally required to retain it.
Right to restrict processing: you can limit how we use your data.
Right to data portability: you can receive your data in a structured, machine‑readable format.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: you can withdraw your marketing consent at any time.
To exercise any of these rights, please contact us at info@decortieliving.com. We will respond within 30 days.
Automated Decision‑Making
We do not use automated decision‑making (including profiling) that produces legal effects or significantly affects you. All order reviews and customer service decisions are made by our team members.
Data Security
We implement technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include SSL encryption for al