Privacy policy
🔐 Privacy Policy — Luxury Market
Last updated: July 5, 2026
At Luxury Market, protecting your personal data is a top priority. This Privacy Policy is intended to inform you, in a clear, transparent and comprehensive manner, about how we collect, use, share and protect your personal data when you browse www.luxury-market.fr, make a purchase or contact us.
It complies with the General Data Protection Regulation (GDPR - EU 2016/679), French Law No. 78-17 of January 6, 1978 as amended (the "Data Protection Act"), and the recommendations of the French Data Protection Authority (CNIL).
1. Identity of the Data Controller
The controller of personal data collected on the website is:
- Name / Company name: GUIONGO / Luxury Market
- Legal form: SARL (French Limited Liability Company)
- Registered office address: 241 Cours Emile Zola, 69100 Villeurbanne — France
- SIRET number: 7528 4250 000023
- Contact e-mail: 📧 contact@luxury-market.fr
- Legal Representative: GUIONGO
2. Personal Data Collected
We only collect data that is strictly necessary for the purposes described below (data minimization principle — Art. 5 GDPR).
2.1. Data you provide directly
| Category | Examples of data |
|---|---|
| Identity | Last name, first name, title, date of birth (optional) |
| Contact details | Postal address, e-mail, phone number |
| Customer account | Login credentials, password (encrypted) |
| Order | Purchase history, cart, preferences, sizes |
| Payment | Cardholder name, billing address (banking details NEVER transit through our servers — see §5) |
| Communication | Messages via contact form, chat, e-mail, customer reviews |
2.2. Data collected automatically
| Category | Examples of data |
|---|---|
| Browsing data | IP address, browser type and version, operating system, language, pages visited, visit duration, connection date and time |
| Cookies & trackers | Session identifiers, preferences, statistical data (see Cookie Policy) |
| Location data | Approximate country / region (based on IP) |
3. Purposes & Legal Bases for Processing
Each data processing operation is based on a specific legal basis in accordance with Article 6 of the GDPR:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Order management (processing, delivery, invoicing, customer service) | Contract performance (Art. 6.1.b GDPR) | 10 years (accounting obligation — Art. L.123-22 French Commercial Code) |
| Customer account creation & management | Contract performance | Until account deletion + 3 years of inactivity |
| Payment processing | Contract performance + legal obligation | 13 months (card data, if stored by the provider) |
| Returns & refunds management | Contract performance + legal obligation | 10 years |
| Sending commercial newsletters | Consent (Art. 6.1.a GDPR) | Until unsubscription + 3 years |
| Commercial prospecting (existing customers) | Legitimate interest (Art. 6.1.f GDPR) | 3 years after last contact |
| Analytical & advertising cookies | Consent | 13 months maximum |
| Fraud prevention | Legitimate interest | 6 months to 5 years depending on the case |
| Compliance with legal & tax obligations | Legal obligation (Art. 6.1.c GDPR) | As required by law (10 years in general) |
| Response to contact requests | Legitimate interest | 3 years after last exchange |
| Customer reviews & moderation | Consent | 5 years |
4. Data Recipients
Your personal data is accessible only to authorized personnel within Luxury Market and to our processors duly bound by contracts compliant with Article 28 of the GDPR.
4.1. Internal recipients
- Luxury Market team: sales, customer service, accounting, logistics.
4.2. Processors (external recipients)
| Provider | Purpose | Location |
|---|---|---|
| [Shopify / WooCommerce / other] | Website hosting and e-commerce management | [Ireland / EU / USA with DPF] |
| [Stripe / PayPal / other] | Secure payment processing | EU / USA (PCI-DSS certified) |
| [Colissimo / Chronopost / Mondial Relay / DHL] | Order delivery | France / EU |
| [Mailchimp / Brevo / Klaviyo] | Newsletter and transactional e-mail sending | EU / USA (DPF) |
| [Google Analytics / Matomo] | Website traffic statistics | EU / USA (DPF) |
| [Meta / TikTok / Google Ads] | Targeted advertising (subject to consent) | USA (DPF) |
We never sell your personal data to third parties.
4.3. Public authorities
Your data may be disclosed to administrative or judicial authorities, solely upon legal request (injunction, summons, etc.).
5. Payment Security
Luxury Market does not collect or store any banking data (card number, security code, expiration date). This information is directly transmitted and processed by our PCI-DSS Level 1 certified payment providers:
- 💳 Shopify Payments / Stripe / PayPal / [Other provider]
All transactions are encrypted using SSL/TLS protocol and secured by strong 3D-Secure 2.0 authentication (PSD2).
6. Data Transfers Outside the European Union
Some of our processors are established outside the EU (particularly in the United States). These transfers are governed by:
- The EU-USA Data Privacy Framework (DPF) in force since July 2023;
- Standard Contractual Clauses (SCC) approved by the European Commission;
- Additional technical and organizational measures (encryption, pseudonymization).
You may obtain a copy of these safeguards by contacting: 📧 contact@luxury-market.fr
7. Your Rights Regarding Your Personal Data
In accordance with Articles 15 to 22 of the GDPR, you have the following rights:
| Right | Description |
|---|---|
| 🔍 Right of access | Obtain confirmation that your data is being processed and receive a copy |
| ✏️ Right to rectification | Correct inaccurate or incomplete data |
| 🗑️ Right to erasure ("right to be forgotten") | Request the deletion of your data, unless legal obligation applies |
| ⏸️ Right to restriction | Temporarily suspend the processing of your data |
| ❌ Right to object | Object to processing, particularly for prospecting purposes |
| 📤 Right to data portability | Retrieve your data in a structured, machine-readable format |
| 🔒 Right to withdraw consent | At any time, for processing based on consent |
| ⚰️ Post-mortem directives | Define the fate of your data after your death |
| ⚖️ Right to lodge a complaint | With the CNIL (www.cnil.fr) |
How to exercise your rights?
📧 By e-mail: contact@luxury-market.fr 📮 By post: Luxury Market — 241 Cours Emile Zola, 69100 Villeurbanne, France
Please attach a copy of an identity document to your request in case of reasonable doubt about your identity (Art. 12 GDPR). We undertake to respond within a maximum period of one (1) month, extendable by two months in the event of a complex request.
If our response is unsatisfactory, you may refer the matter to the CNIL: 🏛️ Commission Nationale de l'Informatique et des Libertés 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — France 📞 +33 1 53 73 22 22 — 🌐 www.cnil.fr
8. Data Security
Luxury Market implements appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, disclosure, alteration or destruction, in accordance with Article 32 of the GDPR:
- 🔐 End-to-end SSL/TLS encryption;
- 🛡️ Firewall, antivirus and intrusion detection systems;
- 🔑 Strong password policy and two-factor authentication;
- 👥 Restricted data access based on the need-to-know principle;
- 📊 Regular backups and business continuity plans;
- 📚 Continuous training of our teams on data protection.
In the event of a data breach likely to result in a high risk to your rights and freedoms, we undertake to inform you as soon as possible and to notify the CNIL within 72 hours (Art. 33 & 34 GDPR).
9. Cookies and Trackers
The website uses cookies and similar technologies to improve your experience, measure audience and offer personalized content/advertisements. You may manage your preferences at any time via our cookie management banner or by consulting our dedicated [Cookie Policy].
10. Data of Minors
The luxury-market.fr website is intended for an adult audience (18+). We do not knowingly collect personal data from minors under 15 years of age without the consent of the parental authority holder. If you notice that a minor has provided us with data without authorization, please inform us at contact@luxury-market.fr — we will proceed with immediate deletion.
11. Modifications to the Privacy Policy
Luxury Market reserves the right to modify this Privacy Policy at any time, particularly to adapt to any legislative, regulatory, jurisprudential or technological developments. Any substantial modification will be notified to you by e-mail and/or by a visible notice on the website.
The version in force is the one published on this page on the date of your consultation.
12. Contact
For any questions relating to this Privacy Policy or the exercise of your rights:
📧 contact@luxury-market.fr 🌐 www.luxury-market.fr 📮 Luxury Market — 241 Cours Emile Zola, 69100 Villeurbanne, France