This Privacy Policy is intended to inform you about how your personal data is collected and processed when you use the website www.lamaisonfrancaise.com (hereinafter referred to as the “Website”), in accordance with the General Data Protection Regulation (GDPR) and the amended French Data Protection Act.
Last updated: 29 September 2026.
1. Data controller
The Website is operated under the La Maison Française brand by:
FOREAT
French simplified joint-stock company (Société par actions simplifiée)
Registered office: 3 place Forbin, 13100 Aix-en-Provence, France
SIREN: 988 217 352
RCS Aix-en-Provence
FOREAT is the data controller responsible for the processing of personal data carried out in connection with the operation of the Website.
If you have any questions regarding your personal data or wish to exercise your rights, you can contact us at: contact@lamaisonfrancaise.com.
2. Personal data collected
Depending on how you use the Website, we may collect the following categories of data.
Creation and management of a customer account
- identity data: title, surname, first name and date of birth where provided;
- email address;
- password, stored in a secure form;
- postal address and telephone number;
- company name, where provided;
- account preferences, including any newsletter subscription;
- products saved to favourites when this feature is used.
Orders placed on the Website
- customer identity and contact details;
- billing and delivery addresses;
- telephone number;
- shopping cart and order contents;
- order history;
- payment method and information relating to payment status;
- information required for delivery;
- gift messages or instructions entered by the customer, where applicable.
When you request delivery of a gift to a third party, certain personal data relating to the recipient may also be processed, including their name, address and, where necessary for delivery, telephone number.
Free-text fields, including gift messages, must not be used to provide sensitive personal data or information that is not necessary for processing the order.
Contact form
When you use the contact form, we may collect your surname, first name, email address, telephone number, the subject and content of your request and, where this feature is used, an attachment.
Quotation requests and business enquiries
Through the pages intended for business customers, we may collect in particular:
- surname and first name;
- company name;
- email address;
- telephone number;
- the content of the request or message, where provided.
As of the date of this Privacy Policy, requests submitted through the quotation request form are sent by email to the La Maison Française team.
Newsletter and marketing communications
When you subscribe to our newsletter, including through the form available on the Website or by selecting the relevant option when creating an account or placing an order, we collect your email address and the information required to manage and demonstrate your subscription.
Technical and browsing data
When you browse the Website, certain technical information may be processed, including:
- IP address;
- browser type and device used;
- operating system;
- pages viewed and interactions with the Website;
- date and time of connections and requests;
- website or campaign from which the visit originated;
- technical identifiers or cookies, depending on your consent choices.
3. Purposes and legal bases for processing
| Purpose | Legal basis |
|---|---|
| Creation and management of customer accounts | Performance of a contract or steps taken at your request prior to entering into a contract |
| Management of the shopping cart, orders, payments, delivery and after-sales service | Performance of a contract |
| Management of invoicing and compliance with accounting and tax obligations | Legal obligations |
| Responding to enquiries submitted through the contact form | FOREAT’s legitimate interest in responding to enquiries addressed to it |
| Processing quotation requests and commercial enquiries initiated by the user | Steps taken at your request prior to entering into a contract |
| Newsletter subscriptions and marketing communications where consent is required | Consent |
| Communications relating to similar products or services sent to existing customers, where permitted by applicable law | FOREAT’s legitimate interest in developing its commercial relationship, with the possibility to object to marketing communications at any time |
| Audience measurement and analysis of Website usage using non-essential trackers | Consent |
| Conversion measurement, advertising and tracking of marketing campaigns using advertising trackers | Consent |
| Website security, abuse prevention, error diagnosis and technical logging | FOREAT’s legitimate interest in ensuring the security and proper operation of its services |
4. Recipients and service providers
Personal data is accessible only to authorised persons within FOREAT and to service providers where access is necessary for the purposes described above.
Depending on the services used, the main recipients or service providers may include:
- O2switch, for hosting the Website and its data;
- Stripe, for processing card payments;
- PayPal, where this payment method is used;
- the relevant banking institutions in the case of payment by bank transfer;
- Colissimo / La Poste, for preparing, shipping and tracking deliveries;
- Brevo, where newsletter subscriptions and marketing communications are managed or synchronised using this service;
- Google, for audience measurement and tag management services used on the Website;
- Meta, in connection with the Meta Pixel and Conversions API used to measure advertising campaigns;
- technical service providers involved in the operation, maintenance or security of the Website, to the extent necessary for their services.
Depending on the nature of the service, some of these providers may act as processors on behalf of FOREAT or as independent data controllers for certain processing activities of their own.
Payment data
FOREAT does not store full bank card numbers used for online payments. Information required for payment is processed directly by the relevant secure payment providers, including Stripe and PayPal.
5. Transfers of data outside the European Economic Area
Some service providers used by the Website are international groups that may process certain data from countries located outside the European Economic Area.
Where such transfers take place, they are governed in accordance with the GDPR, including through an adequacy decision of the European Commission, the EU–US Data Privacy Framework where applicable to the relevant recipient, or standard contractual clauses approved by the European Commission.
You can obtain further information about the safeguards applicable to such transfers by contacting us at contact@lamaisonfrancaise.com.
6. Data retention periods
Personal data is retained only for as long as necessary for the purposes for which it was collected and, where necessary, subsequently archived for the periods required or permitted by applicable law.
| Data category | Retention period |
|---|---|
| Customer account data | For the duration of use of the account and the commercial relationship, then for up to 3 years from the last contact or the end of the commercial relationship, subject to any data that must be retained for a longer period to comply with legal obligations or establish, exercise or defend legal claims. |
| Order data | For the period necessary to manage the commercial relationship, followed by archiving of the data required to comply with legal obligations. |
| Invoices and accounting records | 10 years in accordance with applicable accounting obligations. |
| Card payment data | Not stored directly by FOREAT; such data is processed by payment service providers in accordance with their own legal obligations. |
| Contact requests and quotation requests submitted by prospective customers | Up to 3 years from the latest contact initiated by the individual concerned. |
| Data used for marketing purposes concerning an existing customer | For the duration of the commercial relationship and up to 3 years from the end of the relationship or the latest relevant contact. |
| Newsletter | Until consent is withdrawn or the user unsubscribes and, for inactive prospective customers, for no more than 3 years from collection or the latest contact initiated by the individual concerned. |
| Cookie preferences | Up to 6 months before a new choice may be requested, unless a change requires renewed consent sooner. |
| Technical and security logs | Generally between 6 months and 1 year depending on their nature and security requirements, unless a longer period is necessary in connection with an incident or legal dispute. |
7. Your rights
Subject to the conditions laid down by applicable law, you may have the following rights:
- right of access to your personal data;
- right to rectification of inaccurate or incomplete data;
- right to erasure of your personal data where the legal requirements are met;
- right to restriction of processing;
- right to object to processing based on legitimate interests, under the conditions provided for by the GDPR;
- right to object to direct marketing at any time;
- right to data portability where applicable;
- right to withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before consent was withdrawn;
- the right, under the conditions provided for by French law, to issue instructions concerning the use of your personal data after your death.
You can exercise your rights by contacting us:
- by email: contact@lamaisonfrancaise.com;
- by post: FOREAT – 3 place Forbin – 13100 Aix-en-Provence – France.
We may request additional information only where necessary to verify your identity and process your request.
You also have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the French data protection authority.
8. Mandatory information
Fields identified as mandatory in our forms are necessary to process your request or provide the relevant service.
If certain required information is not provided, we may be unable to create your account, process your order, arrange delivery or respond to a quotation request.
9. Data security
FOREAT implements technical and organisational measures designed to preserve the confidentiality, integrity and availability of personal data and to reduce the risks of unauthorised access, alteration, loss or disclosure.
Access to personal data is limited to persons and service providers who require it for the performance of their duties or services.
As no IT system can guarantee absolute security, FOREAT adapts its security measures to identified risks and to developments in security practices.
10. Cookies and other trackers
A cookie is a small file or identifier that may be stored on or read from your device when you visit a website.
The Website uses different types of cookies and similar technologies. Some are essential to the operation of the Website and do not require your consent. Audience measurement and advertising cookies that require consent are used only in accordance with the choices you make through the cookie management banner.
Strictly necessary cookies
These cookies are used in particular to:
- ensure the technical operation of the Website;
- create and retain your shopping cart;
- allow you to log in to your customer account;
- secure your session;
- remember your cookie preferences.
These cookies are necessary to provide the service requested and cannot be disabled using the consent management tool.
| Service / cookies | Purpose | Duration |
|---|---|---|
| PrestaShop – technical session cookie / cookie whose name may begin with “PrestaShop-” | Session management, shopping cart, authentication and Website operation | Session or the period required for the operation of the session and account, depending on the relevant cookie |
| Advanced Cookie Banner – consent cookie | Remember your choices regarding cookie categories | Up to 6 months |
Audience measurement – Google Analytics 4
Subject to your consent, the Website uses Google Analytics 4 (GA4) to measure Website traffic and usage, including pages viewed, browsing events, traffic sources, conversions and associated technical data.
| Service | Cookies | Purpose | Indicative maximum duration |
|---|---|---|---|
| Google Analytics 4 | _ga, _ga_ | Audience measurement, traffic statistics and conversion analysis | Up to 2 years depending on the cookie and service configuration |
Google tags are managed using Google Tag Manager. Google Tag Manager is a tag management tool and does not, by itself, set cookies intended to measure your browsing activity.
The Website also uses Google Consent Mode v2. When you refuse analytics or advertising cookies, Google tags adapt their behaviour according to the consent status transmitted by the Website, and cookies corresponding to the categories you have refused should not be stored. Depending on the technical operation of Consent Mode, limited technical requests without cookies may nevertheless be transmitted to Google, in particular to enable aggregated or modelled measurement.
Google Analytics data may also be used to measure conversions originating from Google Ads campaigns. As of the date of this Privacy Policy, the Website does not use a standalone Google Ads tag intended to directly set a separate advertising cookie on the Website.
For more information about how Google processes personal data: Google Privacy Policy.
Meta advertising cookies and measurement
Subject to your consent to advertising trackers, the Website uses the Meta Pixel to measure visits and conversions associated in particular with advertising campaigns on Facebook and Instagram and to improve measurement of their effectiveness.
| Service | Cookies | Purpose | Indicative maximum duration |
|---|---|---|---|
| Meta Pixel | _fbp and, where applicable, _fbc | Conversion measurement, campaign attribution and Meta advertising features | Up to 3 months |
The Website also uses the Meta Conversions API, which allows certain conversion events to be transmitted to Meta on the server side. This mechanism does not itself constitute a cookie stored in your browser, but may involve the processing and transmission of data to Meta for advertising measurement purposes, in accordance with the consent choices applied on the Website.
For more information: Meta Privacy Policy.
Managing your choices
When you first visit the Website, a banner allows you to accept, refuse or configure the categories of non-essential cookies.
You may modify or withdraw your consent at any time: Change or withdraw my cookie preferences.
Refusing audience measurement or advertising cookies does not prevent you from using the essential features of the Website.
You can also delete cookies already stored on your device directly through your browser settings. Deleting technical cookies while browsing may, however, result in the loss of your shopping cart or cause you to be logged out of your account.
For more information about cookies and how to manage them, you can consult the CNIL information on cookies and other tracking devices.
11. Links to third-party services and websites
The Website may contain links to services operated by third parties, including social networks, an external gift card platform or, where applicable, a messaging service such as WhatsApp.
The presence of a simple external link on the Website does not in itself result in cookies from that third party being stored on your device. When you click such a link and leave the Website, the processing of your data is governed by the terms and privacy policies of the relevant third-party service.
12. Updates to this Privacy Policy
FOREAT may amend this Privacy Policy to reflect changes to the Website, the services used or applicable laws and regulations.
The date of the latest update shown at the top of this page identifies the version currently in force.