Privacy Policy

PRIVACY POLICY

Last updated: 15 July 2026

ARTISANS DU LEVANT (hereinafter "ADL", "we") attaches great importance to the protection of your personal data. This policy informs you of the processing carried out as part of your browsing and purchases on artisansdulevant.org (hereinafter "the Site").

1. Data controller

ARTISANS DU LEVANT, SAS, registered with the Paris RCS under no. 106338601, registered office 28 boulevard de Vaugirard, 75015, Paris, is the controller of your personal data within the meaning of Regulation (EU) 2016/679 (GDPR).

For any question, contact: contact@artisansdulevant.org

2. What data do we collect?

  • Identity and contact data: last name, first name, postal address, email address, telephone number.
  • Order data: purchase history, products ordered, amounts, delivery address, billing address.
  • Payment data: processed directly by our secure payment provider; ADL does not retain any banking data.
  • Browsing data: pages viewed, products viewed/added to cart, technical data (IP address, browser type), collected via cookies (see section 8).
  • Professional Access-specific data: company name, legal form, SIRET, intra-Community VAT number, bank details (for deferred payment terms where applicable), professional contact details, details of recipients in the case of delivery to third parties (works councils, points of sale).

3. Purposes, legal bases and retention periods

Processing Purpose Legal basis Data concerned Retention period
Order management Process, deliver and track orders; handle claims Performance of the contract Identity, contact, order 1 year in active database after delivery; archiving for 10 years (legal accounting obligation)
Payment Process the transaction, prevent fraud Performance of the contract Payment data (via provider) Time required for the transaction
Customer account Create and manage the account Consent / Performance of the contract Identity, contact Until the account is closed, or 3 years after the last contact
Newsletter and marketing (via Mailchimp) Send commercial communications, manage subscriptions/unsubscriptions Consent Email, last name, first name 3 years after the last contact, or until consent is withdrawn
Professional accounts (Professional Access) Manage the B2B commercial relationship, invoicing, payment terms Performance of the contract / Legitimate interest Company data, bank data, contact Duration of the commercial relationship + 10 years (accounting obligations)
Browsing and security of the Site Ensure operation and security, measure audience Legitimate interest / Consent (non-essential cookies) Browsing data 13 months maximum
Exercise of your rights Respond to your GDPR requests Legal obligation Identity, contact Duration of processing of the request + 5 years as evidence

4. Recipients of your data

Your data is intended for:

  • ADL's authorised teams, within the limits of their duties;
  • our technical service providers, in particular:
    • Shopify (hosting and operation of the Site);
    • for the secure processing of payments;
    • Mailchimp (Intuit Inc.), for the management of our emailing campaigns and our CRM - see section 5 on transfers outside the EU;
    • Colissimo/La Poste via Sendcloud, for the organisation of the delivery of your orders;
    • Axeptio, for the management of your cookie consent preferences;
  • the competent authorities, on request and under the conditions provided by law.

Your data is neither sold nor rented to third parties for advertising purposes.

5. Transfers of data outside the European Union

Some of your data may be transferred outside the European Union, in particular to the United States, as part of our use of Mailchimp (Intuit Inc.) for the management of our CRM and our emailing campaigns.

This transfer is governed by:

  • Mailchimp's certification under the EU-US Data Privacy Framework (DPF); and
  • in the alternative, the European Commission's Standard Contractual Clauses (SCCs), incorporated into the data processing agreement (DPA) concluded with Mailchimp.

You can obtain a copy of the safeguards in place by contacting us at the address indicated in section 1.

6. Your rights

In accordance with the GDPR, you have the following rights over your personal data:

  • right of access;
  • right to rectification;
  • right to erasure ("right to be forgotten");
  • right to restriction of processing;
  • right to data portability;
  • right to object, in particular to commercial prospecting;
  • right to set directives regarding the fate of your data after your death;
  • right to register free of charge on the BLOCTEL telephone canvassing opt-out list (www.bloctel.gouv.fr).

To exercise these rights, contact us at contact@artisansdulevant.org or by post at 28 boulevard de Vaugirard, 75015, Paris. Proof of identity may be requested if there is any doubt about your identity.

If you consider that your rights are not being respected, you may lodge a complaint with the CNIL (www.cnil.fr).

7. Security

ADL implements appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.

8. Cookies

The Site uses cookies and similar technologies. A consent management banner, powered by Axeptio, allows you to accept, refuse or customise your preferences by category (preferences, audience measurement, marketing). You can change your choices at any time via the "Manage my cookies" link available in the footer of the Site.

The details of the cookies used (name, purpose, lifespan, publisher) can be viewed directly in the Axeptio preferences panel.