Privacy policy

The data controller is SCEA Clos Saint Conti, whose registered office is located at 1292 chemin de Beauvezet, 34570 Montarnaud, France.

Contact for personal data requests: form available from the Contact page.

For orders: full name, email, phone, billing address, shipping address where applicable, cart contents, age confirmation, delivery method, payment references and order history.

For contact requests: name, email, optional phone, message content and technical metadata required for security.

Data is used to process orders, payments, stock, pickup or delivery, invoices, contact requests, website security and legal obligations.

Orders are processed for contract performance. Invoices and some records are kept for legal obligations. Security relies on legitimate interest. Non-essential cookies rely on consent.

Data may be shared with authorised estate staff and necessary providers: hosting (Vercel), database (Supabase), payment (SumUp), delivery, transactional email, maintenance and accounting.

Orders and invoices: 10 years from the order date (French accounting and tax obligation).

Contact form messages: maximum 12 months, then automatic deletion.

Admin audit log: 3 years (legal-dispute evidence).

Cookie-consent choice: maximum 13 months, renewed at expiry.

You may request access, rectification, erasure, restriction, objection and portability under GDPR conditions.

To exercise these rights, contact us via the Contact page, mentioning the email used for your order. We handle erasure requests within 30 days: your name, email, phone and addresses will be anonymized on your account and across your past orders; orders and invoices themselves are retained 10 years for accounting purposes, without personal identifiers.

You may withdraw consent where processing is based on consent. You may lodge a complaint with the CNIL if you believe your rights are not respected.