PRIVACY POLICY
astiervillatte.com

1. DATA CONTROLLER

Astier de Villatte, operating through astiervillatte.com, acts as data controller under GDPR regulations.

2. COLLECTED DATA

We may process:
• Identity Data: Name, delivery/billing address
• Transaction Data: Purchase history, payment details
• Technical Data: IP address, browser type
• Preferences: Wishlists, product interests

3. PROCESSING PURPOSES

Your data enables us to:
✓ Process orders and payments
✓ Personalize your shopping experience
✓ Improve our products and services
✓ Comply with legal obligations

Processing relies on:
• Contractual necessity (order fulfillment)
• Legitimate interest (website security)
• Consent (marketing communications)

5. DATA RECIPIENTS

Information may be shared with:

  • Payment processors (Stripe, PayPal)
  • Luxury shipping partners
  • IT service providers (under strict contracts)

6. INTERNATIONAL TRANSFERS

Data remains within the EU/EEA, except for:
→ US-based services under Privacy Shield framework
→ Other jurisdictions with adequacy decisions

7. RETENTION PERIODS

• Active customer data: 5 years from last activity
• Order records: 10 years (legal requirement)
• Marketing data: Until consent withdrawal

8. YOUR RIGHTS

You may request:
→ Access to your personal data
→ Rectification of errors
→ Erasure (“right to be forgotten”)
→ Portability of your data
→ Restriction of processing

We use:
▸ Essential cookies (shopping cart functionality)
▸ Performance cookies (analytics)
▸ Marketing cookies (with explicit consent)

Manage preferences via our Cookie Settings panel.

10. SECURITY MEASURES

We implement:
• TLS 1.3 encryption
• PCI-DSS compliant payments
• Regular penetration testing

11. CHILDREN’S PRIVACY

We do not knowingly collect data from individuals under 16 without parental consent.

12. POLICY UPDATES

Changes will be notified via:
✓ Website banners
✓ Account holders’ email
✓ Updated revision date