Privacy policy
We are pleased that you are visiting our shop and thank you for your interest in us. We take the protection of your personal data very seriously. The information below explains how we collect and use your data, in accordance with the General Data Protection Regulation (GDPR).
Last updated: September 16, 2026
1. Data Controller
The data controller is Vincent Garagnon.
Email: contact@vintagewatchspirit.com
For any questions regarding the protection of your data, please contact us at the address above. All data transmissions on our website are encrypted via the SSL/TLS protocol (recognizable by the padlock icon in your browser's address bar).
2. Hosting
Our shop is hosted on the Shopify platform, operated by Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. All data collected on our site is processed on Shopify's servers. As part of this service, certain data may also be transferred to Shopify Inc. (Ottawa, Canada) or its US subsidiaries for processing on our behalf.
The transfer to Canada is governed by an adequacy decision of the European Commission. To learn more about Shopify's privacy policy: https://www.shopify.com/legal/privacy
3. Data Collected During Your Visit
When you browse our site without making a purchase, we only collect the data that your browser automatically transmits: IP address (in anonymized form), browser type, operating system, pages visited, and access time. This data is used exclusively to ensure the proper functioning and security of the site, based on our legitimate interest (Art. 6.1.f GDPR).
4. Orders and Customer Account
When you place an order or create an account, we collect the data necessary to fulfill it: first name, last name, shipping and billing address, email address, and phone number. This data is processed exclusively to fulfill your order, issue your invoice, and provide after-sales service (Art. 6.1.b GDPR).
You may request the deletion of your account at any time by contacting us. After termination, your data will be retained for as long as necessary to comply with our legal obligations (10 years for accounting and tax data), then permanently deleted.
5. Payment Processing
Your payment data is never stored on our servers. It is processed directly and securely by our PCI-DSS certified payment providers, in accordance with Art. 6.1.b GDPR.
5.1 Shopify Payments
Our primary payment solution is Shopify Payments. Technical processing is handled by Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. The data transmitted (name, address, amount, transaction number) is only shared to the extent necessary to process your payment. To learn more: https://stripe.com/fr/privacy
5.2 PayPal
If you choose PayPal, your payment data is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. To learn more: https://www.paypal.com/fr/webapps/mpp/ua/privacy-full
5.3 Apple Pay
Payments via Apple Pay are processed by Apple Distribution International, Hollyhill Industrial Estate, Cork, Ireland. Your data is encrypted and transmitted securely. Apple only retains anonymized transaction data. To learn more: https://support.apple.com/fr-fr/HT203027
5.4 Google Pay
Payments via Google Pay are processed by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, Ireland. To learn more: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=privacynotice&ldl=fr
5.5 Bank Card
Payments by standard bank card are processed via Shopify Payments / Stripe under the same conditions as point 5.1 above.
6. Online Chat (Shopify Inbox)
Our site offers an online chat service, managed by members of our team, via the Shopify Inbox application. Data exchanged in this chat (message content, as well as your email address or any other contact details you provide during the conversation) is processed in order to respond to your questions and follow up on our exchanges, based on the performance of pre-contractual measures or the contract (Art. 6.1.b GDPR) or, as applicable, our legitimate interest in handling your requests (Art. 6.1.f GDPR).
As Shopify Inbox is an application developed by Shopify, this data is hosted and processed under the same conditions as those described in Section 2 (Hosting) of this policy. Your conversation history is retained for as long as necessary to process your request, unless a longer retention period is required to respond to a claim or a legal obligation.
7. Blog
Our site features a blog. If you wish to leave a comment, the data entered in the form (name, email) as well as your IP address are collected to help us prevent unwanted comments. This data is used solely for this purpose and is not shared with third parties. Your comment and contact information are retained until you request their deletion.
8. Newsletter
If you subscribe to our newsletter, we use your email address to send you our news and offers.
Our newsletters are sent via Shopify Email, an application developed by Shopify. This data is therefore hosted and processed under the same conditions as those described in Section 2 (Hosting) of this policy. You may unsubscribe at any time via the link included in each email.
9. Online Advertising and Audience Analysis
9.1 Google Analytics
We use Google Analytics (Google Ireland Limited, Dublin) to analyze traffic to our shop. This tool uses cookies and anonymizes your IP address before any processing. It is only activated with your explicit consent (Art. 6.1.a GDPR). You may withdraw your consent at any time via our cookie manager.
9.2 Google Ads
We run advertisements via Google Ads to offer you ads related to your interests. This service uses targeting cookies, only with your prior consent.
9.3 Meta Pixel (Facebook / Instagram)
We use the Meta pixel to measure the effectiveness of our advertising campaigns and build custom audiences. This processing is subject to your explicit consent (Art. 6.1.a GDPR). Data may be transferred to Meta's servers in the United States under appropriate contractual safeguards.
10. Cookies
Our site uses cookies to ensure its proper functioning and improve your experience. Shopify also places its own technical cookies (cart management, session, anti-fraud security) essential to the operation of the shop.
— Necessary cookies: Shopify cookies (cart, session, security). Always active, they do not require your consent.
— Analytics cookies: Google Analytics, activated only with your agreement.
— Advertising cookies: Google Ads and Meta Pixel, activated only with your agreement.
You can manage your preferences at any time via our cookie management banner or in your browser settings.
11. Data Transfer to Third Parties
Your personal data is only shared with third parties when strictly necessary: carriers for the delivery of your orders, payment providers for financial transactions, and Shopify as the host of our shop. We never sell or rent your data to third parties for commercial purposes.
Some of our providers are based outside the European Union (United States, Canada). These transfers are governed by standard contractual clauses approved by the European Commission or by an adequacy decision.
12. Your Rights
In accordance with the GDPR, you have the following rights regarding your personal data at any time:
— Right of access: obtain a copy of the data we hold about you.
— Right to rectification: correct inaccurate or incomplete information.
— Right to erasure: request the deletion of your data (subject to legal obligations).
— Right to restriction: restrict processing in certain cases.
— Right to portability: receive your data in a machine-readable format.
— Right to object: object to processing based on legitimate interest or for marketing purposes.
— Right to withdraw consent: at any time, for any processing based on your consent.
To exercise your rights, please contact us at: contact@vintagewatchspirit.com. We will respond within 30 days. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
13. Retention Period
We only retain your data for as long as necessary for the purposes for which it was collected. Order and invoicing data is retained for 10 years in accordance with legal obligations. Data related to your consent (newsletter, cookies) is deleted as soon as it is withdrawn. Browsing data is deleted no later than 13 months after collection.