Privacy policy

The purpose of this privacy policy is to inform users of the website https://georgeslaurence.com about how their personal data is collected, used, and protected, in accordance with the General Data Protection Regulation (GDPR) and applicable French legislation.

Information regarding the website publisher and hosting provider is available on the Legal Notice page.
Updated last on march 16th 2026.

1. Personal data collected

As part of the use of the website, personal data may be collected through:

• the contact form

• the newsletter subscription form

• the creation of a customer account

• the placement of an order on the online store

The data collected may include:

• first name

• last name

• email address

• password (stored in encrypted form)

• billing address

• shipping address

• order-related data (products, amounts, order history)

• IP address

• language used during browsing

This data is collected only when necessary and, where applicable, with the explicit consent of the user.

2. Purposes of data collection

The personal data collected is used exclusively for the following purposes:

• responding to requests sent via the contact form

• managing newsletter subscriptions

• creating and managing customer accounts

• processing and tracking orders

• managing billing and deliveries

• providing after-sales service (customer support, returns, refunds)

• ensuring the proper functioning, security, and technical improvement of the website

• complying with legal and accounting obligations

The data is never sold, rented, or transferred to third parties for commercial purposes.

3. Legal basis for processing

The processing of personal data is based on:

• the performance of a contract, in particular for order processing, payments, and deliveries

• the user’s consent, in particular for newsletter subscriptions and communications

• compliance with legal obligations, particularly accounting and tax obligations

• the legitimate interest of the data controller, notably for website security and fraud prevention

4. Data recipients

Certain personal data may be transmitted to technical service providers strictly necessary for the operation of the website and the execution of the services offered, including:

• secure payment service providers

• delivery service providers

• the website hosting provider

• technical tools related to the management of the online store

These service providers act as data processors and are subject to confidentiality obligations and GDPR compliance.

5. Online payments

Payments made on the website are processed via secure payment service providers.

The website does not store any banking or credit card data.
Payment information is processed directly by the relevant provider, using security protocols that comply with applicable standards.

6. Data retention periods

Personal data is retained for limited periods, proportionate to the purposes pursued:

• data related to contact forms: up to 3 years from the last exchange

• newsletter-related data: until the user unsubscribes

• customer account data: as long as the account remains active

• order and billing data: retained in accordance with applicable legal requirements

• technical data (IP address, logs): up to 12 months

Once these periods expire, the data is deleted or anonymized.

7. Cookies

The website uses cookies that are strictly necessary for its operation, in particular for:

• shopping cart and order management

• website navigation

• security and technical stability

These cookies do not require prior consent.

Optional cookies (analytics or marketing cookies) may be added in the future. If applicable, a cookie management banner will allow users to give or refuse their consent.

8. Data security

Appropriate technical and organizational measures are implemented to ensure the security and confidentiality of personal data and to prevent unauthorized access, loss, alteration, or disclosure.

9. Users’ rights

In accordance with the GDPR, each user has the following rights:

• right of access to their data

• right to rectification

• right to erasure

• right to restriction of processing

• right to object

• right to data portability

To exercise these rights, users may send a request by email to:
contact@georgeslaurence.com

A response will be provided within a maximum period of one month.

10. Changes to the privacy policy

This privacy policy may be updated at any time to remain compliant with legal, regulatory, or technical developments.

The version in force is the one published on the website at the time of consultation.