Legal Notice (mentions légales)
Publisher of the Site
LE FEU DES FLEURS
Iryna DAVYDOVA, sole trader (entrepreneur individuel, EI)
Status: micro-entrepreneur
Registered in the French National Business Register (Registre national des entreprises, RNE) under number 984 437 947
SIRET: 984 437 947 00018
Address: 2, rue Labrouste, 75015 Paris, France
E-mail: contact@lefeudesfleurs.com
Phone: +33 (0)6 13 94 14 74
VAT not applicable under article 293 B of the French General Tax Code (TVA non applicable, article 293 B du CGI).
Publication director (directrice de la publication)
Iryna DAVYDOVA
Hosting provider
IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany – phone: +49 721 170 5522 – www.ionos.com
Privacy and Personal Data Protection Policy
This policy explains how LE FEU DES FLEURS collects, uses, stores and protects the personal data of its customers, of the recipients of its bouquets and of visitors to the website https://lefeudesfleurs.com (hereinafter the "Site"), in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and French Law No. 78-17 of 6 January 1978 on data processing, files and freedoms (loi Informatique et Libertés).
Article 1 – Data controller
The data controller is LE FEU DES FLEURS – Iryna DAVYDOVA, sole trader (EI), whose contact details are given in the Legal Notice above.
For any question about your data: contact@lefeudesfleurs.com.
LE FEU DES FLEURS has not appointed a data protection officer (DPO), as this is not mandatory for its activity.
Article 2 – Data collected
Customer data (the person placing the order):
- identity: first name, last name;
- contact details: e-mail address, phone number;
- order data: products, amount, delivery date and time slot, note for the courier, order history;
- exchanges with LE FEU DES FLEURS by e-mail, WhatsApp, SMS or phone (questions, bespoke orders, complaints).
Recipient data (the person receiving the bouquet):
- first name, last name, phone number, delivery address and access details (door code, floor, intercom);
- text of the card accompanying the bouquet, if any.
Payment data: payments are processed directly by Stripe (bank card, Apple Pay, Google Pay, Link) and PayPal. LE FEU DES FLEURS never has access to your full card number.
Browsing data: IP address, browser and device type, pages viewed, cookies and trackers (see article 9).
Article 3 – Mandatory fields
When ordering, the fields marked with an asterisk (*) are mandatory: the customer's first name, last name, e-mail and phone number; the recipient's first name, last name and phone number; the delivery address, date and time slot. Without this information, the order cannot be prepared or delivered.
Other information is optional: note for the courier, card text, discreet delivery options, subscription to e-mail news.
Article 4 – Purposes and legal bases
Processing and delivering the order, invoicing, customer service and complaints, including orders placed via WhatsApp, e-mail or phone → legal basis: performance of a contract (article 6.1.b GDPR).
Keeping invoices and accounting records → legal basis: legal obligation (article 6.1.c GDPR).
Answering your questions before an order (contact form, e-mail, WhatsApp, SMS, phone) → legal basis: steps taken at your request prior to entering into a contract (article 6.1.b GDPR).
Preventing payment fraud and securing the Site → legal basis: legitimate interest of LE FEU DES FLEURS (article 6.1.f GDPR).
Audience measurement of the Site (Google Analytics) and advertising on Facebook and Instagram (Meta Pixel) → legal basis: your consent (article 6.1.a GDPR), obtained via the cookie banner and withdrawable at any time.
Sending news and offers by e-mail, only if you ticked the box provided when ordering → legal basis: your consent (article 6.1.a GDPR). You can unsubscribe at any time by e-mail to contact@lefeudesfleurs.com.
Article 5 – Recipient data and card
Recipient data are provided by the customer when ordering. They are used solely to prepare and deliver the bouquet: contacting the recipient at the time of delivery, agreeing on a time slot or a solution if they are absent. They are never used for commercial or marketing purposes towards the recipient.
Where the customer does not know the recipient's address, LE FEU DES FLEURS contacts the recipient at the number provided by the customer, solely to agree on the delivery address and time slot.
For anonymous deliveries, the customer's identity is not disclosed to the recipient. If the recipient asks for it, LE FEU DES FLEURS first asks for the customer's agreement.
The card text is used solely to be handwritten on the card accompanying the bouquet. It is read only by the person preparing the order and is not reused.
The recipient has the same rights over their data as the customer (article 8) and may exercise them by writing to contact@lefeudesfleurs.com.
Article 6 – Recipients of the data
Your data can be accessed only by LE FEU DES FLEURS and, to the extent necessary for their tasks, by the following service providers:
- website hosting: IONOS SE (Germany);
- payment: Stripe (bank card, Apple Pay, Google Pay, Link) and PayPal;
- delivery: Stuart and Shopopop, which receive the recipient's name, phone number, address and access details when delivery is entrusted to them;
- communication: Google (Gmail, for e-mails) and Meta (WhatsApp, for messages);
- audience measurement: Google (Google Analytics), only with your consent;
- advertising: Meta (Meta Pixel), only with your consent.
Your data may also be disclosed to administrative or judicial authorities where required by law.
LE FEU DES FLEURS does not sell or rent your data to third parties.
Article 7 – Retention periods
Data are kept for the following periods:
- customer data: for the duration of the commercial relationship, then 3 years after the last order or last contact;
- invoices and accounting records: 10 years (article L.123-22 of the French Commercial Code);
- recipient data: 6 months after delivery, then deleted, except for information shown on the invoice and unless a complaint or dispute is pending;
- card text: 3 months after delivery, then deleted;
- exchanges by e-mail, WhatsApp or SMS: 3 years after the last exchange;
- contact requests without an order: 3 years after the last contact;
- consent to e-mail news: until you unsubscribe, or 3 years without contact from you;
- cookies: as set out in article 9.
Article 8 – Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights:
- right of access: to obtain confirmation that your data are processed and a copy of them;
- right to rectification of inaccurate or incomplete data;
- right to erasure of your data, unless the law requires them to be kept (invoices in particular);
- right to restriction of processing;
- right to object, in particular at any time to marketing;
- right to portability of the data you have provided, where processing is based on your consent or on the contract;
- right to withdraw your consent at any time, without affecting processing carried out before the withdrawal;
- right to give instructions on what happens to your data after your death (directives post-mortem, article 85 of the French Data Protection Act).
To exercise these rights, write to contact@lefeudesfleurs.com. You will receive a reply within one month; this period may be extended by two months for complex requests, in which case you will be informed. Proof of identity may only be requested if there is reasonable doubt about your identity.
If you believe your rights have not been respected, you may lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés, the French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 – www.cnil.fr.
Article 9 – Cookies and other trackers
9.1. What they are
A cookie is a small file stored on your device when you visit a website. The Site uses cookies that are strictly necessary for its operation, which do not require your consent, and audience measurement and advertising cookies, which are only set with your consent.
9.2. Strictly necessary cookies (no consent required)
The following cookies and trackers are essential for the Site to work:
- lefeudesfleurs-cookie-consent – Le Feu des Fleurs – stores your cookie choice – 6 months;
- NEXT_LOCALE – Le Feu des Fleurs – stores the chosen language – 12 months;
- lefeudesfleurs_cart (browser local storage) – Le Feu des Fleurs – keeps the contents of your basket – until the order is placed or you clear it;
- lefeudesfleurs_wishlist (browser local storage) – Le Feu des Fleurs – keeps your favourites – until you clear them;
- __stripe_mid and __stripe_sid – Stripe – securing payment and preventing fraud, on the payment page only – 1 year and 30 minutes.
9.3. Cookies requiring your consent
The following cookies are only set after you click "Tout accepter" ("Accept all"):
- _ga – Google Analytics – distinguishes visitors for statistics – 13 months;
- _ga_DPR3M8JG5H – Google Analytics – stores the state of the browsing session – 13 months;
- _fbp – Meta – measures the effectiveness of Facebook and Instagram ads and tailors them to your interests – 3 months;
- _fbc – Meta – records that you arrived on the Site from a Facebook or Instagram ad – 3 months.
9.4. Your choice
On your first visit, a banner lets you accept or refuse all these cookies. Refusing is as easy as accepting and does not prevent you from ordering. Until you have made a choice, no cookie requiring consent is set.
Your choice is kept for 6 months, after which you will be asked again. You can change it at any time via the "Manage cookies" link at the bottom of every page.
You can also set your browser to block or delete cookies; in that case some features of the Site (basket, payment) may not work properly.
9.5. Service providers' policies
To find out more about how these companies use your data:
- Google: https://policies.google.com/privacy;
- Meta: https://www.facebook.com/privacy/policy;
- Stripe: https://stripe.com/fr/privacy;
- PayPal: https://www.paypal.com/fr/legalhub/privacy-full.
Article 10 – Transfers outside the European Union
Some service providers (Google, Meta, Stripe, PayPal) are based in the United States or process part of the data there: browsing data for Google Analytics and Meta Pixel, WhatsApp messages, payment data. These transfers are covered by the European Commission's adequacy decision of 10 July 2023 on the EU–US Data Privacy Framework, to which these companies have signed up, and, where applicable, by the European Commission's standard contractual clauses.
Article 11 – Security
LE FEU DES FLEURS implements appropriate technical and organisational measures to protect your data against loss, alteration or unauthorised access: secure hosting, encrypted connection (HTTPS), access limited to those who need it, certified payment providers.
Article 12 – Changes to this policy
This policy may be updated to reflect changes in the law or in the services offered. The version in force is the one published on this page, with its update date.
This page is available in French, English and Russian. In the event of any discrepancy between the versions, the French version prevails.
Last updated: 23 October 2026