Privacy policy

Privacy Policy / RGPD / GDPR

Last updated: August 18, 2026

This Privacy Policy describes how Léonie Mauchant (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from leoniemauchant.com (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site and update the "Last updated" date.

What Personal Information We Collect

Information You Provide Directly

  • Contact details: name, address, phone number, and email.
  • Order information: name, billing address, shipping address, payment confirmation, email address, and phone number.
  • Account information: username, password, and other information used for account security, if you create an account.
  • Customer support information: information you choose to share when contacting us.

Information Collected Automatically

When you browse the Site, we automatically collect certain information about your device and interaction with the Site ("Usage Data"), using cookies and similar technologies. This includes device and browser information, your IP address, and pages viewed. See the Cookies section below for full detail and how to manage your preferences.

Information from Third Parties

We may receive information from service providers who support the Site, such as Shopify (hosting and store infrastructure) and our payment processor (to process and confirm payment).

How We Use Your Personal Information and Legal Basis (GDPR)

  • Providing our products and services (processing orders, payment, shipping, customer support, managing your account) — necessary to perform our contract with you (Art. 6(1)(b) GDPR).
  • Marketing communications (newsletters, promotional emails about new collections or offers) — based on your consent (Art. 6(1)(a) GDPR), given when you subscribe. You may withdraw this consent at any time via the unsubscribe link in any email, or by contacting us directly.
  • Security and fraud prevention — based on our legitimate interest in keeping the Site secure (Art. 6(1)(f) GDPR).
  • Legal compliance — where necessary to comply with a legal obligation (e.g., accounting and tax record-keeping) (Art. 6(1)(c) GDPR).

Cookies

We use cookies and similar technologies on the Site for the following purposes:

  • Strictly necessary cookies: required for the Site to function (e.g., shopping cart, checkout, security), including cookies set by our hosting provider Shopify. These do not require your consent.
  • Analytics and performance cookies: used to understand how visitors use the Site and improve it. These are only set with your consent.
  • Marketing/advertising cookies: if used (e.g., for social media or advertising pixels), these are only set with your consent.

When you first visit the Site, you are asked to accept or decline non-essential cookies via a cookie banner. You can change your preferences at any time via the cookie settings link in the footer of the Site.

For more detail on cookies used by our hosting platform, see Shopify's cookie policy: https://www.shopify.com/legal/cookies.

Most browsers let you remove or block cookies through their settings. Please note that blocking essential cookies may prevent parts of the Site from working properly, including your shopping cart.

How We Disclose Personal Information

We may share your personal information with:

  • Service providers who support our business operations (e.g., Shopify for hosting, payment processors, shipping carriers, email/newsletter tools), solely to the extent necessary to provide the Services.
  • Legal authorities, where required to comply with a legal obligation, or to protect our rights.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes without your consent.

Data Retention

We keep your personal information only as long as necessary for the purposes described above:

  • Order and invoicing data: retained for the legal accounting/tax retention period (currently 10 years under French law).
  • Marketing/newsletter data: retained until you unsubscribe, or for 3 years of inactivity, whichever comes first.
  • Customer support correspondence: retained for up to 3 years after our last exchange with you.

International Transfers

Some of our service providers (including Shopify) may process or store data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards recognized under GDPR, such as the European Commission's Standard Contractual Clauses, or transfers to countries recognized as providing an adequate level of data protection.

Your Rights

Under the GDPR, you have the right to:

  • Access the personal information we hold about you.
  • Rectify inaccurate personal information.
  • Erase your personal information, in certain circumstances.
  • Restrict or object to our processing of your personal information.
  • Data portability, i.e., receive your data in a structured, commonly used format.
  • Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at leoniemauchant.contact@gmail.com. We may need to verify your identity before responding, and will respond within the timeframes required by law.

Complaints

If you have concerns about how we handle your personal information, please contact us first at leoniemauchant.contact@gmail.com. You also have the right to lodge a complaint with the French data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertés) — https://www.cnil.fr — or with the supervisory authority in your country of residence within the EEA.

Children's Data

The Services are not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

Security

We take reasonable technical and organizational measures to protect your personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Contact

For any question about this Privacy Policy or to exercise your rights, contact us at:

leoniemauchant.contact@gmail.com
Rue de la Convention, Paris, 75015, France

For the purposes of applicable data protection law, we are the data controller of your personal information.