Privacy Policy

Bastidon du Marquis is committed to protecting the privacy of its users. This policy describes how we collect, use and protect your personal data, in accordance with the General Data Protection Regulation (GDPR).

Data Controller

Data Collected

Through the contact form

• First and last name
• Email address
• Phone number (optional)
• Message

Through wine orders

• First and last name
• Email address
• Delivery address
• Phone number
• Order details (products, quantities, amount)

No banking data is stored on our website. Payments are securely processed by Stripe.

Purpose of Processing

• Responding to your inquiries and booking requests
• Processing and shipping your wine orders
• Managing the customer relationship

Legal Basis

• Contact form: consent (Article 6.1.a GDPR)
• Wine orders: performance of a contract (Article 6.1.b GDPR)
• Accounting obligations: legal obligation (Article 6.1.c GDPR)

Data Retention

• Correspondence (contact form): 3 years from the last exchange
• Order data: 10 years (French accounting requirement)

Third-Party Processors

Your data may be shared with the following service providers, solely for the purposes described above:

• Vercel Inc. (website hosting)
• Stripe (payment processing)
• Formspree (contact form processing)

No data is sold or shared with third parties for marketing purposes.

Cookies

This website only uses essential cookies required for secure payment processing (Stripe). These cookies are strictly functional and are not used for advertising or tracking purposes. Under GDPR, essential cookies do not require prior consent.

No analytics, advertising or tracking cookies are used on this website.

Your Rights

Under the GDPR (Articles 15 to 21), you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to restriction: request restriction of processing

To exercise these rights, contact us at bastidondumarquis@gmail.com. We will respond within 30 days.

Complaints

If you believe that the processing of your data does not comply with applicable regulations, you may file a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.