PRIVACY POLICY

Last updated: 23 August 2026

1 – Purpose

This policy explains what personal data we collect when you use https://www.garconsjeunes.com, why we collect it, who we share it with, and what rights you have over it.

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of 6 January 1978, as amended.

2 – Data controller

GARÇONS JEUNES SAS
110 rue Beauvoisine, 76000 Rouen, France
Rouen Trade and Companies Register: 100 775 071

contact@garconsjeunes.com — +33 6 52 64 58 27

3 – Data we collect

When you place an order

  • first and last name
  • billing and delivery address
  • email address
  • telephone number
  • the products ordered, order history, returns and refunds

When you pay

Payment is handled by our payment provider. We receive confirmation that the payment succeeded, together with the payment method type and the last four digits of the card. We never receive or store your full card number.

When you create an account

Your email address and the orders linked to it. Creating an account is optional.

When you browse the site

  • IP address
  • browser and device type
  • pages viewed and browsing activity

When you subscribe to the newsletter

Your email address, and the record of your consent.

4 – Why we collect it, and on what legal basis

Performance of the contract — processing and delivering your order, managing returns and refunds, answering your questions, managing your account.

Legal obligation — issuing and keeping invoices, meeting our accounting and tax obligations.

Legitimate interest — preventing fraud, keeping the site secure, and improving it. We only rely on this basis where it does not override your rights.

Your consent — the newsletter, advertising cookies, and audience measurement. You may withdraw your consent at any time, and doing so is as easy as giving it.

5 – Who we share it with

We never sell or rent your personal data.

We share it only with the providers we need to run the shop:

  • Shopify — hosting and operation of the online store, and the customer account system.
  • Shopify Payments — processing your payment and preventing fraud.
  • Carriers — your name, address and telephone number, solely in order to deliver your parcel.
  • Meta Platforms (Facebook, Instagram) — measuring the performance of our advertising and showing you relevant ads. This uses the Meta Pixel on the site, and Meta's Conversions API, which sends purchase data directly from Shopify's servers to Meta, including your email address and telephone number in hashed form. This only happens if you have accepted advertising cookies. If you refuse, nothing is sent.

Each provider may only use the data for the service we ask of them.

6 – Transfers outside the European Union

Some of these providers process data outside the European Union, in particular in Canada and the United States.

Those transfers rely on the safeguards provided by the GDPR: an adequacy decision of the European Commission where one exists, or otherwise the standard contractual clauses adopted by the Commission.

7 – How long we keep it

  • Order and invoice data — 10 years, as required by accounting and tax law.
  • Customer account data — for as long as the account exists, then 3 years after your last contact with us.
  • Newsletter data — until you unsubscribe, then 3 years at most.
  • Cookies and browsing data — 13 months at most.

8 – Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration and disclosure. The site and the checkout are encrypted; access to the administration is restricted and protected.

No system can guarantee absolute security, and we will not pretend otherwise. Should a breach affect your data and present a risk to you, we will inform you as required by Article 34 of the GDPR.

9 – Your rights

You have the right to:

  • access your data and obtain a copy
  • rectify it if it is inaccurate
  • erase it, subject to the retention periods we are legally required to observe
  • object to processing based on our legitimate interest
  • restrict processing
  • portability — receive your data in a reusable format
  • withdraw your consent at any time, for the newsletter and for cookies
  • give instructions on what should happen to your data after your death

Write to contact@garconsjeunes.com. We reply within one month.

If our answer does not satisfy you, you may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

10 – Cookies

Cookies and similar technologies are described in our Cookie Policy. On your first visit, a banner lets you accept, refuse or configure them. Refusing is exactly as easy as accepting.

11 – Changes

We may amend this policy to reflect legal or technical developments. The current version is always the one published here, with its date at the top of the page.