Privacy policy

Last updated: June 25, 2026

This policy describes how GREENECLAT SAS collects, uses and protects your personal data when you visit or place an order on www.greeneclat.com (the "Site"), in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data controller

The data controller is GREENECLAT SAS, a French SAS with a share capital of €10,000, whose registered office is at 55 avenue de Saint-Germain, 78600 Maisons-Laffitte, France (Versailles Trade and Companies Register, SIREN 929 628 196). Contact: info@greeneclat.com — +33 6 67 60 25 65.

2. Data we collect

• Identity and contact data: last name, first name, email address, postal address, phone number.
• Order data: products ordered, amount, purchase history, shipping and billing addresses.
• Payment data: transactions are processed by our payment provider; GREENECLAT SAS does not store your card numbers.
• Browsing data: IP address, browser type, pages visited, cookie identifiers (see our Cookie policy).
• Communication data: content of the messages you send us (email, contact form, chat).

3. Purposes and legal bases

• Order management, delivery and customer service — performance of the contract.
• Invoicing and accounting obligations — legal obligation.
• Sending commercial communications and newsletters — your consent, or legitimate interest for existing customers regarding similar products or services.
• Audience measurement, Site improvement, advertising and retargeting — your consent (non-essential cookies and trackers).
• Security, fraud prevention and maintenance — legitimate interest.

4. Recipients and processors

Your data may be shared with the following categories of recipients, strictly to the extent necessary for these purposes:

• Shopify — hosting of the Site and technical order management;
• our payment provider — secure payment processing;
• our carriers and logistics providers — order preparation and delivery;
• our accounting provider — invoicing and compliance with legal obligations;
• our audience measurement and advertising tools, in particular Google and Meta (Pixel), only after obtaining your consent.

5. Transfers outside the European Union

Some of our processors (in particular Shopify, Google and Meta) may process data outside the European Union, particularly in the United States. These transfers are governed by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or recognised certification mechanisms.

6. Retention periods

• Account and order data: for the duration of the commercial relationship, then archived in accordance with legal obligations (in particular 10 years for accounting records);
• Prospecting data: 3 years from your last contact;
• Cookies and trackers: periods specified in the Cookie policy (consent retained for a maximum of 13 months).

7. Cookies and trackers

The Site uses cookies and trackers whose details, purposes and consent management options are set out in our Cookie policy. Non-essential cookies (audience measurement, advertising) are only placed after your consent, given via the dedicated banner.

8. Your rights

Under the GDPR, you have the rights of access, rectification, erasure, objection, restriction of processing and portability of your data, as well as the right to withdraw your consent at any time and to set directives regarding the fate of your data after your death. You may exercise these rights by writing to info@greeneclat.com, providing proof of your identity.

9. Complaints

If you consider that the processing of your data does not comply with the regulations, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

10. Security

GREENECLAT SAS implements appropriate technical and organisational measures (TLS encryption of communications, access controls, backups) to protect your data against unauthorised access, alteration or disclosure.

11. Changes

This policy may be updated at any time to reflect changes in our practices or in the regulations. The date of the last update appears at the top of this document.