Privacy policy

We are pleased that you are visiting our store and thank you for your interest. We take the protection of your personal data very seriously. The information below explains how we collect and use your data in accordance with the General Data Protection Regulation (GDPR).

Effective May 26, 2026

 

1. Data Controller

The data controller is Vincent Garagnon.

Email: contact@vintagewatchspirit.com

If you have any questions regarding the protection of your data, please contact us at the address above. All data transmissions on our website are encrypted using the SSL/TLS protocol (indicated by the padlock icon in your browser’s address bar).

 

2. Hosting

Our store is hosted on the Shopify platform, operated by Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, Ireland. All data collected on our site is processed on Shopify’s servers. As part of this service, certain data may also be transferred to Shopify Inc. (Ottawa, Canada) or its U.S. subsidiaries for processing on our behalf.

The transfer to Canada is governed by an adequacy decision from the European Commission. To learn more about Shopify’s privacy policy: https://www.shopify.com/legal/privacy

 

3. Data Collected During Your Visit

When you browse our site without making a purchase, we collect only the data that your browser automatically transmits: IP address (in anonymous form), browser type, operating system, pages visited, and time of access. This data is used exclusively to ensure the proper functioning and security of the site, based on our legitimate interest (Art. 6.1.f GDPR).

 

4. Orders and Customer Accounts

When you place an order or create an account, we collect the data necessary to process your order: last name, first name, shipping and billing addresses, email address, and phone number. This data is processed solely for the purpose of fulfilling your order, issuing your invoice, and providing customer service (Art. 6.1.b GDPR).

You may request the deletion of your account at any time by contacting us. After termination, your data will be retained for the time necessary to comply with our legal obligations (10 years for accounting and tax data), then permanently deleted.

 

5. Payment Processing

Your payment data is never stored on our servers. It is processed directly and securely by our PCI-DSS certified payment service providers, in accordance with Art. 6.1.b GDPR.

5.1 Shopify Payments
Our primary payment solution is Shopify Payments. Technical processing is handled by Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. The data transmitted (name, address, amount, transaction number) is shared only to the extent necessary to process your payment. For more information: https://stripe.com/privacy

5.2 PayPal
If you choose PayPal, your payment information is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. For more information: https://www.paypal.com/us/legalhub/paypal/privacy-full

5.3 Apple Pay
Payments via Apple Pay are processed by Apple Distribution International, Hollyhill Industrial Estate, Cork, Ireland. Your data is encrypted and transmitted securely. Apple retains only anonymized transaction data. For more information: https://www.apple.com/legal/privacy/data/en/apple-pay/

5.4 Google Pay
Payments via Google Pay are processed by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, Ireland. For more information: https://payments.google.com/legaldocument?family=0.privacynotice&hl=en

5.5 Credit Card
Payments made with standard credit cards are processed via Shopify Payments / Stripe under the same terms as in section 5.1 above.

 

6. Blog

Our website features a blog. If you wish to leave a comment, the information you enter in the form (name, email address) as well as your IP address will be collected to help us prevent spam. This data is used solely for this purpose and is not shared with third parties. Your comment and contact information will be retained until you request its deletion.

 

7. Newsletter

If you subscribe to our newsletter, we use your email address to send you our news and offers. Subscription is done via a double opt-in process: you will receive a confirmation email that you must confirm before we send you any messages (Art. 6.1.a GDPR).

Our newsletters are sent via Mailchimp (The Rocket Science Group, LLC, Atlanta, USA) or Brevo. These service providers process your data on our behalf under a GDPR-compliant processing agreement and are obligated not to share it with third parties. You can unsubscribe at any time using the link provided in each email.

 

8. Online Advertising and Audience Analytics

8.1 Google Analytics
We use Google Analytics (Google Ireland Limited, Dublin) to analyze traffic to our store. This tool uses cookies and anonymizes your IP address before processing it. It is only activated with your explicit consent (Art. 6.1.a GDPR). You can withdraw your consent at any time via our cookie manager.

8.2 Google Ads
We run ads via Google Ads to show you ads related to your interests. This service uses targeting cookies, only with your prior consent.

8.3 Meta Pixel (Facebook / Instagram)
We use the Meta Pixel to measure the effectiveness of our advertising campaigns and create custom audiences. This processing is subject to your explicit consent (Art. 6.1.a GDPR). Data may be transferred to Meta’s servers in the United States under appropriate contractual safeguards.

 

9. Cookies

Our website uses cookies to ensure it functions properly and to enhance your experience. Shopify also sets its own technical cookies (shopping cart management, session management, anti-fraud security) that are essential for the store to function.

• Necessary cookies: Shopify cookies (shopping cart, session, security). These are always active and do not require your consent.
• Analytical cookies: Google Analytics, enabled only with your consent.
• Advertising cookies: Google Ads and Meta Pixel, enabled only with your consent.

You can manage your preferences at any time via our cookie management banner or in your browser settings.

 

10. Sharing Data with Third Parties

Your personal data is shared with third parties only when strictly necessary: carriers for the delivery of your orders, payment service providers for financial transactions, and Shopify as the host of our store. We never sell or rent your data to third parties for commercial purposes.

Some of our service providers are based outside the European Union (United States, Canada). These transfers are governed by standard contractual clauses approved by the European Commission or by an adequacy decision.

 

11. Your Rights

In accordance with the GDPR, you have the following rights regarding your personal data at any time:

• Right of access: to obtain a copy of the data we hold about you.
• Right to rectification: to correct inaccurate or incomplete information.
• Right to erasure: to request the deletion of your data (subject to legal obligations).
• Right to restriction: to restrict processing in certain cases.
• Right to data portability: to receive your data in a machine-readable format.
• Right to object: to object to processing based on legitimate interests or for marketing purposes.
• Right to withdraw consent: at any time, for any processing based on your consent.

To exercise your rights, contact us at: contact@vintagewatchspirit.com. We will respond within 30 days. You also have the right to file a complaint with the CNIL (www.cnil.fr).

 

12. Retention Period

We retain your data only for as long as necessary to fulfill the purposes for which it was collected. Order and billing data are retained for 10 years in accordance with legal obligations. Data related to your consent (newsletter, cookies) are deleted as soon as consent is withdrawn. Browsing data are deleted no later than 13 months after collection.