← Back to home

Privacy Policy

Last updated: March 2026

1. Data Controller

The data controller for personal data collected on iconicversailles.com is:

InformationDetail
CompanyICONIC VERSAILLES (SARL)
SIREN990 970 071
Address7 Passage de la Geôle, 78000 Versailles, France
Email[email protected]
Phone+33 6 13 22 36 13

2. Data Collected

As part of its commercial activity, ICONIC VERSAILLES may collect the following categories of personal data:

CategoryData concernedPurpose
IdentificationSurname, first nameOrder management and customer relations
Contact detailsPostal address, email, phoneDelivery, invoicing, after-sales service
Transaction dataPurchase history, amountsAccounting and tax tracking
Browsing dataIP address, pages visitedWebsite improvement (if analytics enabled)

ICONIC VERSAILLES is committed to collecting only the data strictly necessary for the performance of its services (data minimisation principle, Article 5 of the GDPR).

3. Legal Bases for Processing

The processing carried out by ICONIC VERSAILLES is based on the following legal grounds:

  • Performance of a contract: processing orders, deliveries and payments.
  • Legal obligation: retention of accounting and tax data in accordance with French legal obligations.
  • Legitimate interest: improving services and preventing fraud.
  • Consent: sending commercial communications (newsletter), if you have expressly consented.

4. Data Retention Period

Type of dataRetention period
Customer data (orders)3 years from last purchase
Accounting and tax data10 years (legal obligation)
Browsing data13 months maximum
Marketing data3 years from last contact

5. Data Recipients

Personal data collected is intended exclusively for ICONIC VERSAILLES and is not sold to third parties for commercial purposes. However, it may be shared with the following service providers, strictly for the performance of the service:

  • Payment service providers (secure card transaction processing)
  • Carriers and delivery services
  • IT service providers hosting the website (MBC / Ikoula)

These providers act as sub-processors and are contractually bound to respect the confidentiality and security of your data.

6. Transfers Outside the European Union

ICONIC VERSAILLES is committed to not transferring your personal data outside the European Union without appropriate safeguards. If such a transfer were to occur (e.g. via an international payment provider), it would be governed by the standard contractual clauses approved by the European Commission.

7. Your Rights

In accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679), you have the following rights:

RightDescription
Right of accessObtain a copy of your personal data
Right to rectificationCorrect inaccurate or incomplete data
Right to erasureRequest the deletion of your data
Right to restrictionTemporarily suspend processing
Right to portabilityReceive your data in a structured format
Right to objectObject to processing based on legitimate interest
Right to withdraw consentWithdraw your consent at any time

To exercise these rights, you can send your request by email to [email protected] or by post to the registered office address. ICONIC VERSAILLES undertakes to respond within a maximum of 30 days. If you believe your rights are not being respected, you have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr.

8. Data Security

ICONIC VERSAILLES implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or disclosure. Financial transactions are secured by SSL/TLS encryption.

9. Changes to this Policy

ICONIC VERSAILLES reserves the right to modify this privacy policy at any time. Any substantial change will be notified by updating the date at the top of this document. We encourage you to check this page regularly.

Document prepared by MBC for ICONIC VERSAILLES — March 2026