Privacy Policy
Last updated: 1 October 2026. In the event of any discrepancy, the French version prevails.
Maison René Veyrat attaches particular importance to the protection of your personal data. This policy describes how we collect and use it, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
RENÉ VEYRAT FLEURISTE, SAS, 168 boulevard Haussmann, 75008 Paris, France — RCS Paris 562 032 045.
Contact: rgpd@reneveyrat.fr
Data collected
- Identity and contact details: surname, first name, postal address, email, telephone, company name and VAT number where applicable;
- Order recipient: name, address, telephone, access details, accompanying message;
- Order: products, amounts, delivery date and time slot, purchase history;
- Payment: card data is processed directly by our payment providers; we do not have access to it;
- Quote and contact requests: the information you provide (event, date, number of guests, message);
- Browsing: technical data and cookies, as described on the Cookies page.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Processing, preparing and delivering orders; customer service | Performance of the contract |
| Responding to quote and contact requests | Pre-contractual measures |
| Invoicing and accounting | Legal obligation |
| Fraud prevention and site security | Legitimate interest |
| Sending commercial information and our newsletter | Consent (or legitimate interest for products similar to those already purchased, with the right to object at any time) |
| Audience measurement and personalised advertising | Consent |
| Personalised advertising to our subscribers (customer list targeting) | Consent, given when you agree to receive our commercial information |
Personalised advertising to our subscribers
If you have agreed to receive our commercial information, in particular by ticking the box provided when placing an order or by subscribing to our newsletter, your email address and telephone number may be shared with Google Ireland Limited so that we can show you the Maison's advertisements on Google services (Search, YouTube, Gmail).
This data is encrypted (hashed) before it is shared. Google uses it solely to match it with existing accounts and does not keep it for any other purpose. Customers who have not given their consent are never included.
You may object at any time by unsubscribing from our communications (a link is included in every message) or by writing to rgpd@reneveyrat.fr. You can also manage your advertising preferences from your Google account.
Recipients
Your data is intended for authorised staff of the Maison and, to the extent necessary, for our processors:
- Shopify International Limited (site hosting and order management);
- payment processors: Stripe Payments Europe Ltd., PayPal (Europe) S.à r.l. et Cie S.C.A., Adyen N.V.;
- Google Ireland Limited (email, audience measurement and advertising);
- transactional email providers (confirmations, invoices);
- where applicable, our delivery partner, for the information strictly required for delivery.
We never sell or rent your data.
Transfers outside the European Union
Some providers may process data outside the European Union, in particular in the United States and Canada. These transfers are governed by an adequacy decision of the European Commission (including the EU–US Data Privacy Framework) or by standard contractual clauses.
Retention periods
- Order and customer relationship data: duration of the commercial relationship, then 5 years for evidential purposes;
- Invoices and accounting records: 10 years;
- Marketing: 3 years from the last contact or purchase;
- Quote requests not followed by an order: 3 years;
- Cookies: 13 months maximum.
Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data, to withdraw your consent at any time, and to give instructions regarding your data after your death.
To exercise these rights: rgpd@reneveyrat.fr or by post to 168 boulevard Haussmann, 75008 Paris, France. We will reply within one month.
You may also lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.