Privacy Policy
Last updated: 1 September 2026
1. Data Controller
The controller responsible for the processing of personal data in connection with this website and our online shop is:
Frangipani SARL
France
Website: https://frangipani.fr
Email: info@frangipani.fr
This Privacy Policy explains how we collect, use and protect personal data when you visit frangipani.fr, use our online shop, create a customer account, place an order, make a payment, contact us or otherwise interact with our website.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable French data-protection legislation.
2. Information collected when you visit our website
When you visit our website, certain technical information may be automatically processed in order to provide, secure and maintain the website.
This may include:
IP address;
date and time of access;
pages and resources requested;
browser type and version;
operating system;
device information;
referring website;
technical and security information.
This information is processed where necessary to operate and secure our website and to protect it against misuse.
The legal basis is generally our legitimate interest under Article 6(1)(f) GDPR in operating a secure and functional website.
3. Cookies and similar technologies
Our website uses cookies and similar technologies.
Some cookies are technically necessary for the operation of the website and online shop. These may be used to:
maintain your shopping cart;
maintain your session;
enable customer-account functionality;
provide security;
remember certain preferences;
enable requested website functions.
These essential cookies do not require consent where they are strictly necessary for the service requested by the visitor.
We also use optional cookies and similar technologies for analytics. These technologies are used only where the required consent has been obtained.
Our website uses Odoo's cookie-consent functionality. Odoo's system can block optional third-party services, including Google services, until the visitor gives consent.
You can change or withdraw your cookie consent through the cookie settings available on our website.
Odoo also provides a cookie-policy page on the website listing the cookies used by the platform. We will update that page where necessary to reflect additional cookies or services used on our website.
4. Google Analytics 4
We use Google Analytics 4, a web analytics service provided by Google, to understand how visitors use our website and to improve our website and online shop.
Google Analytics is activated only after the visitor has provided the required consent through our cookie-consent mechanism.
Google Analytics may process information including:
pages visited;
interactions with the website;
approximate location;
visit duration;
browser and device information;
language preferences;
screen resolution;
IP-related information.
The purpose of this processing is to analyse website usage, measure website performance and improve our online services.
The legal basis for this processing is your consent under Article 6(1)(a) GDPR and, where applicable, the provisions of French law governing the use of cookies and similar technologies.
You may withdraw your consent at any time through the cookie settings on our website. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Google may process personal data outside the European Economic Area. Where applicable, such transfers are carried out using a legally recognised transfer mechanism under Chapter V GDPR, such as an adequacy decision or appropriate safeguards.
For more information about Google's processing of personal data, please consult Google's Privacy Policy:
https://policies.google.com/privacy
5. Customer accounts
Our online shop may allow customers to create and use a customer account.
Depending on the functionality used, your account may contain information such as:
name;
email address;
telephone number;
billing address;
delivery address;
order history;
invoices;
account credentials;
information relating to communications with us.
We process this information to provide the customer-account functionality and allow you to access information relating to your purchases.
The legal basis is Article 6(1)(b) GDPR where processing is necessary for the performance of a contract.
6. Orders and purchases
When you place an order through our online shop, we collect and process the information necessary to process and fulfil your purchase.
This may include:
name;
billing address;
delivery address;
email address;
telephone number;
products ordered;
quantities and prices;
order number;
payment status;
delivery information;
invoice information;
communications concerning your order.
We use this information to process your order, arrange payment and delivery, provide customer service, issue invoices and otherwise fulfil our contractual obligations.
The legal basis is Article 6(1)(b) GDPR.
We may also process and retain information where required to comply with legal obligations, including accounting and tax requirements. The legal basis in such cases is Article 6(1)(c) GDPR.
7. Payment processing with Stripe
Payments made through our online shop are processed using Stripe.
When you select Stripe as your payment method, payment-related information is processed by Stripe in order to authorise and process the transaction.
Depending on the payment method, this may include payment-card information and other information necessary to process the payment.
Payment information may be processed directly by Stripe. We do not intentionally store complete payment-card numbers on our own systems where payment processing is handled by Stripe.
Stripe may process personal data in accordance with its own privacy policy and applicable data-protection obligations.
For further information, please consult Stripe's privacy information:
The processing of payment information is necessary for the performance of the purchase contract under Article 6(1)(b) GDPR and, where applicable, for compliance with legal obligations under Article 6(1)(c) GDPR.
8. Delivery and fulfilment
In order to deliver products purchased through our online shop, we may provide relevant personal data to postal services, couriers, delivery companies and other logistics providers.
This may include:
name;
delivery address;
telephone number;
email address;
order and delivery information.
The information is provided only to the extent necessary to fulfil and deliver your order.
The legal basis is Article 6(1)(b) GDPR.
9. Contacting us
If you contact us by email, through a contact form or by another communication method provided on our website, we process the information you provide in order to respond to your enquiry.
This may include:
name;
email address;
telephone number;
address;
the content of your enquiry;
information relating to your request.
Where the enquiry relates to an existing or potential contract, the legal basis is Article 6(1)(b) GDPR.
For other enquiries, processing may be based on our legitimate interest under Article 6(1)(f) GDPR in responding to communications addressed to us.
10. Legal and accounting obligations
We may process and retain personal data where necessary to comply with legal obligations, including tax, accounting, commercial and record-keeping requirements.
The legal basis is Article 6(1)(c) GDPR.
We may also retain certain information where necessary to establish, exercise or defend legal claims, based on Article 6(1)(f) GDPR.
11. Recipients of personal data
Depending on the circumstances, personal data may be processed by:
Odoo, in connection with our website and e-commerce platform;
Stripe, for payment processing;
delivery and logistics providers;
IT and technical service providers;
accounting, tax and professional advisers;
public authorities where required by law.
We only disclose personal data where there is an appropriate legal basis for doing so and only to the extent reasonably necessary for the relevant purpose.
12. International transfers
Some of our service providers may process personal data outside the European Economic Area.
Where personal data is transferred outside the EEA, we take steps to ensure that an appropriate transfer mechanism recognised under applicable data-protection law is in place, such as an adequacy decision, Standard Contractual Clauses or another legally recognised safeguard.
13. Data retention
We retain personal data only for as long as necessary for the purposes for which it was collected.
Information relating to purchases, invoices and transactions may be retained for longer periods where required by French accounting, tax or other applicable legal requirements.
Customer-account information is generally retained while the account remains active and for as long as necessary for legitimate business or legal purposes.
Personal data processed on the basis of consent is processed until consent is withdrawn or the relevant purpose otherwise ends, subject to applicable legal retention requirements.
14. Your rights under the GDPR
Subject to the applicable legal requirements, you have the right to:
obtain confirmation as to whether we process your personal data;
request access to your personal data;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
receive certain personal data in a structured, commonly used and machine-readable format;
object to processing based on legitimate interests;
object to direct marketing;
withdraw consent where processing is based on consent.
You may exercise your rights by contacting us using the contact details provided above.
You also have the right to lodge a complaint with the competent data-protection supervisory authority.
In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL).
15. Right to object
Where we process personal data on the basis of our legitimate interests under Article 6(1)(f) GDPR, you may object to such processing where you have grounds relating to your particular situation.
You may object to direct marketing at any time.
16. Data security
We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration or unauthorised disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, online shop, services, technology, legal requirements or data-processing activities.
The current version published on this page applies from the date indicated at the beginning of the policy.
Last updated: 1 September 2026