Privacy policy
Last updated: 06/17/2026
In case of discrepancy between language versions, the French version prevails.
1. Data controller
The data controller for your personal data is:
L'OLIFANT JEANNOUTOT ET FILS
93-95 avenue Daumesnil, 75012 Paris, France
Email: info@lolifantparis.com
Tel: +33 1 43 46 80 53
2. Data collected
When you use our online store, we collect the following data:
When you create an account
- First and last name
- Email address
- Phone number (optional)
- Customer type (individual or business) and, where applicable, company name
- Password (encrypted — we never store your password in plain text)
When you place an order
- Name and contact details
- Delivery and billing addresses
- Phone number
- Payment data (processed directly by our secure payment provider — we do not store your bank card details)
- Order contents and purchase history
- Acceptance of the Terms of Sale (timestamp, version and language)
When you join a product waitlist
- Email address
- Account identifier (if you are logged in)
- Product concerned and communication language
When you use the contact form
- Name, email address, phone number (optional), subject and message content
This data is sent by email to our team and is not stored in our database.
When you request a password reset
- Email address
- Temporary reset token (valid for a limited period)
When you browse the site
- Session data (technical cookie required for the site to function, including your chosen language)
- IP address (for security purposes)
3. Purposes and legal bases
| Purpose | Legal basis | Retention period |
|---|---|---|
| Order management and fulfilment | Contract performance | 3 years from the last order |
| Invoicing and accounting obligations | Legal obligation | 10 years (statutory accounting retention period) |
| Customer account management | Contract performance | 3 years after the last account activity |
| Back-in-stock notification (waitlist) | Legitimate interest | Until product notification or unsubscription |
| Processing contact form requests | Legitimate interest | As long as needed to handle the request |
| Password reset | Contract performance | Temporary token: a few hours; email retained in the account |
| Complaints and after-sales service | Legitimate interest | 5 years |
| Site security (access logs) | Legitimate interest | 1 year |
| Order-related communications (confirmation, shipping, etc.) | Contract performance | Duration of the commercial relationship |
4. Data recipients
Your data is processed by:
- L'OLIFANT JEANNOUTOT ET FILS — order management, customer service and GDPR requests
- CAWL (Worldline) — card payment provider (data strictly necessary for secure payment)
- Sherlock (Crédit Agricole / LCL) — card payment provider (depending on the active payment method)
- InXpress — carrier (name, address and phone number for delivery)
- Edreams Factory (hosting provider) — technical hosting on AWS infrastructure (EU region)
We do not sell or rent your personal data to third parties.
5. Transfers outside the European Union
Our site is hosted by Amazon Web Services (AWS) on servers located in Europe (EU region). If any of our processors transfer data to a third country, we ensure that appropriate safeguards are in place in accordance with the GDPR.
6. Your rights
Under the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French Data Protection Act, you have the following rights:
- Right of access (Art. 15): obtain a copy of your personal data held by us
- Right to rectification (Art. 16): have inaccurate or incomplete data corrected (also via your customer account)
- Right to erasure (Art. 17): request deletion of your data, subject to our legal obligations (including invoice retention)
- Right to restriction (Art. 18): request suspension of processing of your data
- Right to data portability (Art. 20): receive your data in a structured, machine-readable format
- Right to object (Art. 21): object to processing based on our legitimate interest (e.g. waitlist)
To exercise these rights, contact us by email at info@lolifantparis.com or by post at: 93-95 avenue Daumesnil, 75012 Paris, France.
We undertake to respond to any request within one month of receipt. If you are not satisfied with our response, you have the right to lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority.
7. Data security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration, including:
- Encryption of communications via HTTPS/TLS
- Password hashing (never stored in plain text)
- Restricted access to data for authorised personnel only
- Hosting on secure infrastructure (AWS)
8. Cookies
Our online store uses only strictly necessary technical cookies for the site to function. These cookies do not require your consent under CNIL regulations.
| Cookie | Purpose | Duration |
|---|---|---|
PHPSESSID |
User session (cart, authentication, chosen language) | Session (deleted when you close your browser) |
The session cookie is configured with Secure (over HTTPS)
and SameSite=Lax security attributes.
We use no tracking, advertising or analytics cookies.
9. Contact
For any questions about this privacy policy or to exercise your rights:
L'Olifant Paris — 93-95 avenue Daumesnil, 75012 Paris, France
Email: info@lolifantparis.com
Tel: +33 1 43 46 80 53