Privacy and cookie policy
This policy describes how Cédric des Lauriers, publisher of the Montmartre Poster website, collects and processes the personal data of visitors and customers, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978 as amended.
1. Data controller
- Cédric des Lauriers, sole trader
- 61 rue de Lyon, 75012 Paris, France
- SIRET 94990466800025 - RCS Paris - VAT FR01949904668
- Email: contact@montmartreposter.com
For any question about your personal data, please write to this address; it acts as the brand's "Personal data" point of contact.
2. Data collected
Depending on your interaction with the website, we collect the following categories of data:
- Identity and contact: first name, last name, postal address, email address, phone number.
- Customer account: login credentials, order history.
- Order and payment: products ordered, amount, billing and shipping address. No payment-card data is stored by Montmartre Poster; payments are processed by Shopify Payments / Stripe.
- Communication: content of messages sent to customer service (by email).
- Newsletter: email address and optional first name, when you subscribe.
- Technical and browsing data: IP address, browser type, pages visited, visit duration, traffic source, cookie identifiers.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Order, payment and delivery management | Performance of contract (art. 6.1.b GDPR) |
| Customer account management | Performance of contract |
| Customer service and request handling | Performance of contract / legitimate interest |
| Newsletter | Consent (art. 6.1.a GDPR) |
| Audience measurement and site improvement | Legitimate interest or consent depending on the cookie |
| Fraud prevention and accounting/tax obligations | Legitimate interest / legal obligation |
4. Recipients and processors
Your data is never sold. It is shared only with processors strictly necessary to perform the service:
- Shopify International Ltd (Ireland): hosting, online store, customer and order database.
- Shopify Payments / Stripe: secure payment processing.
- European print partners: poster production and dispatch.
- Carriers (Colissimo, Mondial Relay, DPD, UPS depending on zone): parcel delivery.
- Audience measurement tools (analytics cookies, subject to consent).
- Email provider for order confirmations and newsletter.
Some processors may handle data outside the European Union. In that case, transfers rely on the European Commission's Standard Contractual Clauses or equivalent safeguards.
5. Retention periods
- Customer account: for the duration of the relationship, then archived for 3 years after the last contact, unless objection.
- Order data: 10 years (accounting and tax obligations).
- Emails to customer service: 3 years after the last exchange.
- Newsletter: until unsubscription, or 3 years of inactivity.
- Cookies: 13 months maximum.
6. Your rights
Pursuant to articles 15 to 22 GDPR, you have the following rights regarding your personal data:
- Right of access and copy
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to object
- Right to data portability
- Right to withdraw consent at any time
- Right to set post-mortem directives
You can exercise these rights by emailing contact@montmartreposter.com. We will respond within one month.
If you believe your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL): cnil.fr/fr/plaintes, or with the supervisory authority of your EU country of residence.
7. Cookies
A cookie is a small file stored on your device when you browse the website. It is used to recognise your browser, remember preferences, measure audience or personalise the experience.
The website uses the following categories of cookies:
- Strictly necessary cookies (set without consent): cart (
cart), Shopify session (_shopify_*,_secure_session_id), language and currency preferences. Without these the shop cannot function. - Audience measurement cookies (subject to consent): Shopify Analytics (
_shopify_y,_shopify_s), and where enabled Google Analytics (_ga,_gid) or equivalents. - Marketing cookies (subject to consent): social network and remarketing pixels, where enabled.
You can set or withdraw your consent at any time via the cookie banner or your browser settings. Refusing analytics and marketing cookies does not prevent you from using the website.
8. Security
The website is served over HTTPS. Payments are encrypted and processed by Shopify Payments / Stripe (PCI-DSS Level 1 certified). Back-office access is protected by strong authentication. No system being infallible, we cannot guarantee absolute security; in the event of an incident affecting your data, we commit to comply with our notification obligations.
9. Updates
This policy may be updated to reflect legal or technical changes. The version applicable is the one published on this page on the date of your visit.