Privacy policy
Updated 20 September 2026
Who is responsible
FAMILLE GRASSE PARFUMS, SAS, RCS Grasse 848 366 738, 29 rue Amiral de Grasse, 06130 Grasse, France, is responsible for the personal data processed for this store. Contact: office@grasseparfum.com.
Data and purposes
- Orders and customer service: name, contact and delivery details, order and payment information, and messages are used to process purchases, deliveries, returns and requests. Legal basis: performing a contract or taking requested steps before a contract.
- Legal records: invoices and transaction records are retained to meet accounting and tax obligations. Legal basis: legal obligation.
- Security and disputes: technical connection data, transaction information and relevant correspondence help protect the store, prevent fraud and handle claims. Legal basis: our legitimate interests in security and defending our rights, subject to your rights.
- Marketing: your contact details and preferences are used with your consent or, for permitted communications about similar products to existing customers, our legitimate interest in promoting our products, with an opt-out. You can unsubscribe at any time. Optional analytics and advertising trackers require your consent.
We receive data from you, your device and the providers involved in your transaction. Fields marked as required are needed to process the relevant order or request; without them we may be unable to provide it.
Recipients and international transfers
Access is limited as needed to our authorised team and service providers for hosting, checkout, payments, delivery, customer support, withdrawal requests, consent management, and consented analytics or advertising. These include Shopify and payment providers such as PayPal, as applicable. Relevant records may also be shared with our professional advisers or authorities when required by law.
Shopify and other providers may process data outside the EEA. Where required, transfers must rely on an adequacy decision or safeguards such as the European Commission's standard contractual clauses. Contact us for information about the safeguards applicable to your data. See Shopify's Consumer Privacy Policy for its own processing and privacy choices.
Retention
We keep data for the time needed to fulfil its purpose: the customer relationship and handling of orders or requests, then the applicable legal retention or limitation period where records must be kept. Accounting documents are retained for 10 years. Marketing contact data are kept for up to three years after the end of the customer relationship or your last contact, unless you unsubscribe sooner. We retain minimal opt-out information to avoid contacting you again. Dispute records are retained for the claim and applicable limitation period. Cookie lifetimes are shown in the consent settings.
Cookies and your rights
Essential cookies support functions such as the cart, security and your consent choices. You may accept, refuse or change optional cookies using the site's cookie consent control. Withdrawing consent does not affect earlier lawful processing.
Subject to the applicable conditions, you may request access, correction, erasure, restriction or portability, object to processing, and give instructions for your data after death. Email us to exercise your rights; we may request proportionate proof of identity if needed. We respond within one month, extendable by two months for complex requests with notice and reasons. You may complain to the CNIL or your local data protection authority.