privacy_policy
Privacy Policy
Website: champagnecarbon.com Last updated: 23/05/2026
Preamble
CHAMPAGNE CARBON places particular importance on the protection of your personal data and the respect of your privacy. This Privacy Policy describes how we collect, use, store and protect information about you when you use the website champagnecarbon.com (the “Website”).
It complies with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (“GDPR”) and French Data Protection Act No. 78-17 of 6 January 1978, as amended.
1. Data controller
The data controller for the personal data collected on the Website is:
CHAMPAGNE CARBON, a French SARL (limited liability company with a single shareholder) with a share capital of €1,555,550, registered with the Trade and Companies Register of Reims under number 819 205 915, whose registered office is at 38 Rue Pasteur, 51160 Champillon, France.
Contact for any matters relating to personal data: - Email: jb.prevost@champagnecarbon.com - Phone: +33 3 26 59 46 21 - Post: CHAMPAGNE CARBON, 38 Rue Pasteur, 51160 Champillon, France
2. Data collected and purposes
We collect and process the following categories of data for the purposes specified below:
2.1 Data collected when placing an order
- Identity: title, surname, first name, date of birth (for age verification)
- Contact details: shipping and billing address, email address, phone number
- Order data: products ordered, amounts, purchase history
- Payment data: this data is processed exclusively by our payment service providers and is not retained by us
Purposes: - Processing and execution of orders - Delivery of products - Issuing invoices - Customer relationship management and after-sales service - Handling returns, refunds and disputes - Compliance with our legal obligations (including tax, accounting, and the prohibition of alcohol sales to minors)
2.2 Data collected when creating a customer account
In addition to the above: - Login credentials (email, encrypted password) - Any preferences (language, communication format)
2.3 Data collected for newsletter or “Private Access” list
- First name (optional)
- Stated interests (optional)
Purpose: sending marketing information, invitations to private events or launches, and news about our products.
2.4 Data collected via cookies and trackers
See our Cookie Policy for details of the cookies used.
3. Legal bases for processing
In accordance with Article 6 of the GDPR, the processing is based on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Processing and execution of orders | Performance of a contract (Art. 6.1.b) |
| Invoicing and accounting obligations | Legal obligation (Art. 6.1.c) |
| Age verification (alcohol sales) | Legal obligation (Art. 6.1.c) |
| Customer account management | Performance of a contract (Art. 6.1.b) |
| Newsletter and marketing | Consent (Art. 6.1.a) |
| Audience measurement and statistics | Legitimate interest or consent depending on cookies (Art. 6.1.a / 6.1.f) |
| Fraud prevention | Legitimate interest (Art. 6.1.f) |
4. Recipients of the data
Your data is accessible to the following persons and entities, strictly to the extent necessary to carry out their missions:
- Authorised CHAMPAGNE CARBON personnel: commercial team, customer service, accounting
-
Technical and operational service providers:
- Shopify International Limited (Ireland / United States) — website hosting and online store management
- Shopify Payments / Stripe — payment processing
- Klaviyo, Inc. (United States) — email communications and CRM
- Meta Platforms Ireland Ltd / Meta Platforms, Inc. — advertising tools and audience measurement (subject to consent to marketing cookies)
- Mail Boxes Etc. (MBE) as well as UPS and DHL depending on destinations — delivery carriers
- Administrative and judicial authorities upon legal request, including the French tax administration and indirect contributions services
5. Transfers of data outside the European Union
Some of our service providers are established or operate infrastructure in the United States (including Shopify, Klaviyo, Meta). When personal data is transferred outside the European Union, we ensure that these transfers are governed by appropriate safeguards within the meaning of Articles 44 et seq. of the GDPR:
- European Commission adequacy decision of 10 July 2023 establishing the EU - US Data Privacy Framework (DPF) for certified providers
- Standard Contractual Clauses adopted by the European Commission for transfers not covered by the DPF
- Additional technical and organisational measures where necessary
You may contact us to obtain a copy of the safeguards applicable to a specific transfer.
6. Data retention periods
Your data is retained for the following periods:
| Type of data | Retention period |
|---|---|
| Order data (invoicing, delivery) | 10 years from the order (accounting obligation) |
| Active customer account | Duration of the commercial relationship + 3 years from the last purchase or contact |
| Inactive customer account | Deletion or anonymisation after 3 years of inactivity |
| Newsletter / “Private Access” list | Until unsubscription, then 3 years in archive |
| Commercial prospecting data | 3 years from the last contact initiated by the prospect |
| Cookies and trackers | Maximum 13 months (except cookies essential to the operation of the Website) |
| Connection logs | 1 year (LCEN obligation) |
After these periods, the data is deleted or anonymised.
7. Security
CHAMPAGNE CARBON implements appropriate technical and organisational measures to protect your personal data against loss, alteration, disclosure or unauthorised access:
- Encryption of connections to the Website (HTTPS / TLS)
- Strong authentication for administrative access
- Hosting by a certified provider (Shopify International Limited)
- Selection of service providers offering strong contractual security guarantees
- Regular backups and continuity plans
As no system is infallible, in the event of a data breach likely to result in a risk to your rights and freedoms, you will be informed in accordance with Article 34 of the GDPR.
8. Your rights
In accordance with Articles 15 to 22 of the GDPR and Articles 38 et seq. of the French Data Protection Act, you have the following rights regarding your personal data:
- Right of access: obtain confirmation that your data is being processed and obtain a copy
- Right of rectification: have inaccurate or incomplete data corrected
- Right to erasure (“right to be forgotten”): obtain the deletion of your data in the cases provided for by law
- Right to restriction of processing: temporarily suspend the processing of your data
- Right to data portability: receive your data in a structured format and transmit it to another controller
- Right to object: object to processing for reasons relating to your particular situation, and at any time to processing for marketing purposes
- Right to withdraw consent at any time, where processing is based on consent
- Right to give instructions regarding the fate of your data after your death
To exercise your rights, contact us: - By email: jb.prevost@champagnecarbon.com - By post: CHAMPAGNE CARBON, 38 Rue Pasteur, 51160 Champillon, France
A response will be provided within one month of receipt of your request, possibly extended by two months for complex requests.
Proof of identity may be requested in case of reasonable doubt about the identity of the requester.
Complaint to the supervisory authority: if you believe that your rights are not respected, you may lodge a complaint with the French National Commission for Information Technology and Civil Liberties (CNIL): - Website: www.cnil.fr - Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France - Phone: +33 1 53 73 22 22
9. Cookies
The Website uses cookies and trackers. For more information about the cookies used and managing your preferences, please refer to our Cookie Policy.
10. Minors
The Website is strictly intended for persons of legal age (18 and over). We do not knowingly collect data concerning minors. If you are a parent or guardian and believe that a minor has provided us with personal data, please contact us: we will delete the data as soon as possible.
11. Changes to this policy
This Privacy Policy may evolve in line with legal, judicial or technical developments. The version in force is the one published on the Website on the date of your consultation. In the event of a substantial change, users with an account or subscribers to the newsletter will be informed by email at least 30 days before the new provisions enter into force.
In case of discrepancy between the French and English versions of this Privacy Policy, the French version shall prevail.
Last updated: 23/05/2026
Video
