Privacy Policy — Thierry Colson

Last updated: 7 July 2026

1. Introduction

Thierry Colson operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Thierry Colson is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used, and disclosed.

2. Personal Information We Collect or Process

We may collect or process the following categories of personal information, depending on how you interact with the Services:

• Contact details — name, address, billing and shipping address, phone number, email address.
• Financial information — payment card information, transaction details, payment confirmation.
• Account information — username, password, preferences and settings.
• Transaction information — items viewed, added to cart or wishlist, purchased, returned, exchanged or cancelled, and past transactions.
• Communications with us — content of customer support and other inquiries.
• Device information — device, browser, network connection, IP address, and other identifiers.
• Usage information — how and when you interact with the Services.

3. Personal Information Sources

We collect personal information:

• Directly from you — when you create an account, place an order, or contact us.
• Automatically through the Services — via your device and through cookies and similar technologies.
• From our service providers — payment processors, hosting, logistics, and marketing platforms acting on our behalf.
• From our partners or other third parties, where applicable.

4. How We Use Your Personal Information, and Our Legal Basis

You may withdraw consent-based processing (e.g. marketing) at any time — see Section 10.

5. How Long We Keep Your Information

We keep personal information only as long as necessary for the purposes above, or as required by law:

• Invoices and accounting records: 10 years, as required under Article L123-22 of the French Commercial Code.
• Customer account and order data: for the duration of your relationship with us, then a further 5 years from your last interaction, aligned with the French civil limitation period for commercial claims (Article 2224 of the Civil Code).
• Marketing consent and related data: 3 years from your last interaction with us, after which we will seek renewed consent before further marketing contact.
• Cookies: a maximum of 13 months from being set (see Section 9).

6. Who We Share Your Information With

We share personal information only to the extent necessary to operate the Services:

• Shopify, our ecommerce platform provider, which hosts our store and processes transactions.
• Payment processors (e.g. card and PayPal providers), to process payments securely under PCI-DSS standards.
• Shipping and logistics providers (e.g. La Poste/Colissimo), to fulfill and deliver orders.
• Marketing and analytics providers — Google Analytics, Meta Pixel, and Omnisend — used respectively for site analytics, advertising measurement, and email marketing (see Section 9 for current cookie practices).
• Legal or regulatory authorities, where required by law.

Some of these providers may process data outside the European Economic Area. Where this occurs, we rely on their compliance with recognized data transfer safeguards (such as the EU Standard Contractual Clauses).

We do not sell your personal information to third parties.

7. Security

We take reasonable technical and organizational precautions to protect your personal information from loss, misuse, unauthorized access, disclosure, or alteration. Payment information is encrypted and handled in accordance with PCI-DSS standards. No method of transmission or storage is completely secure, but we follow generally accepted industry practices to minimize risk.

8. Age of Consent

By using this site, you confirm that you are at least the age of majority in your country of residence, or that you have appropriate parental or guardian consent to use the Services.

9. Cookies

A cookie is a small text file saved to your device when you visit our site. We use the following categories:

• Strictly necessary cookies — required for the site to function (e.g. cart, checkout).
• Functional cookies — remember your preferences and settings.
• Performance/analytics cookies — provided by Google Analytics, help us understand how visitors use the site.
• Advertising cookies — provided by Meta Pixel, used to measure and personalize advertising.
• Email marketing tracking — provided by Omnisend, used to measure engagement with marketing emails you've opted into.

We are currently working to implement a consent management tool that will let you choose which non-essential cookies to accept before they are set. Until this is in place, please note that some of the cookies above may be set as you browse the site. You can manage or block cookies at any time through your browser settings, and you can opt out of Google Analytics tracking using Google's browser add-on, available at https://tools.google.com/dlpage/gaoptout.

If you have questions about our use of cookies, contact us at assistant@thierrycolson.com.

10. Your Rights

Under GDPR, you have the right to:

• Access the personal information we hold about you.
• Rectify inaccurate or incomplete information.
• Erase your personal information, subject to our legal retention obligations (see Section 5).
• Restrict or object to certain processing, including marketing.
• Data portability — receive your data in a structured, commonly used format.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at assistant@thierrycolson.com. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted here with an updated "Last updated" date. We encourage you to review this page periodically.

12. Contact Us

Questions about this policy, or requests relating to your personal information, can be sent to assistant@thierrycolson.com.