Privacy policy
Last updated: May 2026
1. Scope
This Privacy Policy explains how Romidrian collects, uses, stores and protects the personal data of users of the website romidrian.com.
It applies whenever you browse the website, create an account, place an order, subscribe to the newsletter, submit a request through the contact form or otherwise interact with Romidrian.
2. Data Controller
The controller responsible for processing personal data is:
Romidrian
Email: contact@romidrian.com
Romidrian undertakes to process personal data in accordance with the General Data Protection Regulation — GDPR — and the applicable French regulations.
3. Personal Data Collected
In connection with the use of the website and the processing of orders, Romidrian may collect the following data:
-
First and last name
-
Email address
-
Telephone number
-
Billing address
-
Delivery address
-
Order information
-
Purchase history
-
Payment information, securely processed by our payment service providers
-
IP address
-
Browsing data
-
Communication preferences
-
Information submitted through the contact form or by email
Romidrian collects only the data strictly necessary to manage its services, orders and communications.
4. Purposes of Processing
The personal data collected is used for the following purposes:
-
Managing orders placed through the website
-
Processing payments
-
Preparing and dispatching products
-
Managing deliveries and order tracking
-
Issuing invoices
-
Managing returns, exchanges, complaints and refunds
-
Responding to customer service enquiries
-
Creating and managing customer accounts
-
Sending marketing communications, only where you have given your consent
-
Improving the website, user experience and customer service
-
Preventing fraud and securing transactions
-
Complying with legal, accounting and tax obligations
5. Legal Basis for Processing
Personal data is processed on the following legal bases:
Performance of a contract: to process your orders, payments, deliveries, returns and refunds.
Consent: for newsletter subscriptions, certain marketing communications and the use of certain cookies.
Legal obligations: for the retention of invoices, accounting documents and information required to comply with tax obligations.
Legitimate interests: to improve our services, secure the website, prevent fraud and manage customer relationships.
6. Payment Data
Payments made through the website are processed using secure solutions provided by Shopify and its payment service providers.
Romidrian does not store complete bank card details. This information is processed directly by the secure payment service providers used on the website, such as Shopify Payments, PayPal, Klarna, Apple Pay or any other payment method offered at the time of purchase.
7. Newsletter and Marketing Communications
If you subscribe to the newsletter, Romidrian may use your email address to send you information about its collections, new products, offers, events or editorial content.
You may unsubscribe at any time by clicking the unsubscribe link included in each email or by contacting us at:
8. Cookies and Browsing Data
The website may use cookies and similar technologies to:
-
Ensure the proper functioning of the website
-
Remember certain user preferences
-
Analyse website traffic
-
Improve the browsing experience
-
Provide personalised content or advertising, where applicable
Certain cookies are necessary for the operation of the website. Others require your prior consent, particularly analytics, personalisation or advertising cookies. The CNIL states that users must be informed and provide their consent before certain tracking technologies are placed on their devices.
You can manage your cookie preferences through the cookie banner displayed on the website or through your browser settings.
9. Recipients of Personal Data
Personal data may be shared, only where necessary, with the following recipients:
-
Payment service providers
-
Carriers and logistics service providers
-
Website hosting and technical service providers
-
The Shopify e-commerce platform
-
Newsletter or customer relationship management service providers
-
Accounting, legal or administrative service providers, where necessary
-
Administrative or judicial authorities where required by law
Romidrian does not sell its customers’ personal data.
10. Transfers Outside the European Union
Some service providers used by Romidrian, including technical, payment, hosting or marketing service providers, may be located outside the European Union.
Where necessary, Romidrian ensures that such transfers are subject to appropriate safeguards in accordance with the GDPR, including Standard Contractual Clauses or any other mechanism recognised under the applicable regulations.
11. Data Retention Periods
Personal data is retained only for as long as necessary for the purposes for which it was collected.
Data relating to orders, invoices and accounting obligations is retained for the applicable statutory retention periods.
Data relating to customer accounts is retained for as long as the account remains active.
Data used for newsletter communications is retained until you unsubscribe or withdraw your consent.
Data relating to contact requests is retained for the time necessary to process the request and is then deleted or archived in accordance with the applicable legal obligations.
12. Data Security
Romidrian implements reasonable technical and organisational measures to protect personal data against loss, unauthorised access, alteration, disclosure or destruction.
Payments are processed through secure platforms. Access to personal data is limited to those individuals and service providers who need access in order to operate the website, manage orders or provide customer service.
13. Your Rights
In accordance with the applicable regulations, you have the following rights in relation to your personal data:
-
Right of access
-
Right to rectification
-
Right to erasure
-
Right to restriction of processing
-
Right to object
-
Right to data portability
-
Right to withdraw your consent at any time
To exercise your rights, you may contact us at:
Your request must specify the right you wish to exercise and include the information necessary to identify you.
Romidrian may request proof of identity where there is reasonable doubt concerning your identity.
You also have the right to lodge a complaint with the CNIL if you believe that your rights have not been respected.
14. Updating Your Personal Data
You agree to provide accurate, complete and up-to-date information when creating an account, placing an order or contacting Romidrian.
If your personal information changes, you can update it through your customer account or contact us at:
15. Social Media
Romidrian may maintain a presence on various social media platforms, including Instagram, Facebook, Pinterest or any other communication platform.
When you interact with Romidrian through these social media platforms, your data may also be processed by the relevant platforms in accordance with their own privacy policies.
Romidrian is not responsible for processing carried out directly by these platforms.
16. Changes to this Privacy Policy
Romidrian reserves the right to amend this Privacy Policy in order to reflect legal, technical or commercial developments.
The applicable version is the version published on the website at the time of your visit.
We encourage you to review this page regularly in order to remain informed about how your personal data is collected and protected.
17. Contact
For any questions regarding this Privacy Policy or the processing of your personal data, please contact us at: