Privacy and cookies

This English translation is provided for convenience. The French version prevails in the event of any discrepancy.

In short

• Your data is used to prepare, deliver and invoice your orders, and to answer you. Nothing else without your consent.
• The recipient's contact details and the note on the card are used only for the delivery.
• We never sell your data.
• Audience measurement and advertising: only if you accept them in the cookie banner. You can change your mind at any time.

Who is responsible for your data?

Dominique Gratens, entrepreneur individuel (EI), Au Delà des Fleurs, 29 Cours de Verdun, 33470 Gujan-Mestras. Phone: +33 5 56 66 05 27. For any question about your data: contact@audeladesfleurs.fr.

What data, what for, and for how long?

What for	What data	On what basis	For how long
Preparing, delivering and following up on your order	Your name, email, phone and address; the recipient's name, address and phone; note on the card; delivery date and method; contents of the order	Performance of the contract (your data); legitimate interest (the recipient's data, to hand your flowers to them)	For the duration of the order, then 3 years for follow-up (complaints, new orders)
Invoicing and accounting	Invoices and accounting documents	Legal obligation	10 years (French Commercial Code (Code de commerce), article L.123-22)
Payment and fraud prevention	Transaction data (we never see your full card number)	Performance of the contract; legitimate interest	For the duration of the payment and of any disputes (13 months)
Your customer account, if you create one	Email, name, addresses, order history	Performance of the contract	Until the account is deleted, or 3 years without activity
Answering your questions	Your contact details and your message (form, email, phone)	Legitimate interest	3 years after our last exchange
Sending you our news and holiday ideas, if you have asked for them	Email, first name	Consent	Until you unsubscribe (a link in every email), or 3 years without contact
Audience measurement and advertising, if you accept them	See “Cookies and trackers” below	Consent	About 13 months

The note on the card is read only by us, in order to write it on the card. It remains attached to the order in our sales tool: you can ask us to erase it at any time. The information marked as required on the forms is necessary to process your order: without it, we cannot deliver it.

Who is it shared with?

Only with the service providers that help us run the shop, each for its own part and according to our instructions:

• Shopify (Shopify International Limited, Ireland): site, online store, payment, order emails;
• the payment providers offered on the payment page;
• the apps built into the store: Zapiet (date and method of delivery or pickup), Globo (product options and note on the card), and our invoicing tool;
• Google (Google Ireland Limited), through our measurement server hosted by Stape, only if you accept audience measurement or advertising;
• government agencies and authorities, where the law requires it.

We never sell or rent your data.

Transfers outside the European Union

Some of these providers, or their own subcontractors, may process data outside the European Union, in particular in Canada and the United States. These transfers are governed by an adequacy decision of the European Commission (Canada; United States for companies participating in the Data Privacy Framework) or, failing that, by the European Commission's standard contractual clauses.

Your rights

You may at any time access your data, have it rectified or erased, restrict its use, object to its processing, request its portability, withdraw your consent and set directives on what happens to it after your death. Write to us at contact@audeladesfleurs.fr or at 29 Cours de Verdun, 33470 Gujan-Mestras: we reply within one month. If there is any doubt about your identity, we may ask you for proof.

If you believe your rights are not being respected, you may file a complaint with the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).

You can also register free of charge on the Bloctel telemarketing opt-out list (www.bloctel.gouv.fr).

Security

The site runs on an encrypted connection (HTTPS), payments go through specialized providers, and access to our tools is protected and restricted to the shop.

Cookies and trackers

A cookie is a small file placed on your device when you visit a site. Some are essential for the store to work. The others are placed only with your consent, given in the banner displayed on your first visit. Refusing is as simple as accepting, and you can change your mind at any time using the “Manage cookies” link at the bottom of every page.

Category	Cookies	What they are for	Duration
Essential (without consent)	cart, _shopify_essential, _tracking_consent, localization, cart_currency, keep_alive	Cart, payment, security, remembering your cookie choice	From the length of the visit to 1 year
Audience measurement (with your consent)	_shopify_analytics, _ga, _ga_J0Q504WY5Q, FPID, FPLC	Counting visits and understanding how the site is used, in order to improve it (Shopify and Google Analytics statistics)	About 13 months
Advertising (with your consent)	_shopify_marketing, FPAU, _gcl_au	Measuring the effectiveness of our Google ads	From 90 days to 1 year

Your choice is kept for up to 12 months, after which you will be asked again. If you refuse, no audience measurement or advertising cookies are placed and nothing is sent to Google.

Changes

This policy may change, for example if we change tools. The version online is always the one that applies.

Version dated October 6, 2026.