Privacy policy

Last updated: May 18, 2026

Maison Pierre Hardy SAS ("Pierre Hardy", "we", "us", "our") operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Pierre Hardy is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us, in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the French Data Protection Act (Loi Informatique et Libertés). If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Data controller

The data controller for the personal information processed through pierrehardy.com is:

Maison Pierre Hardy SAS
3/5 rue Palatine, 75006 Paris, France
Email: estore@pierrehardy.com

Personal information we collect or process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person, in accordance with Article 4 of the GDPR. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you.

We may collect or process the following categories of personal information, depending on how you interact with the Services:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information including credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, payment confirmation and other payment details. Full payment card details are processed directly by our payment service providers and are not stored on our systems.
  • Account information including your username, password, security questions, preferences and settings.
  • Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions.
  • Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
  • Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
  • Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal information sources

We may collect personal information from the following sources:

  • Directly from you when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
  • Automatically through the Services from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies (subject to your consent where required).
  • From our service providers when we engage them to enable certain technology and when they collect or process your personal information on our behalf.
  • From our partners or other third parties.

Legal bases for processing

We process your personal information on the following legal bases under Article 6 of the GDPR:

  • Performance of a contract (Article 6(1)(b)) — to process your orders, fulfill our obligations as a seller, manage returns and refunds, and provide customer service.
  • Legitimate interests (Article 6(1)(f)) — to operate and improve our Services, prevent fraud, ensure the security of our Services, and conduct analytics.
  • Consent (Article 6(1)(a)) — for marketing communications, non-essential cookies, and any processing where consent is required by law. You may withdraw your consent at any time.
  • Legal obligation (Article 6(1)(c)) — to comply with applicable laws, including tax, accounting, and consumer protection obligations.

How we use your personal information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

  • Provide, Tailor, and Improve the Services. To perform our contract with you, process your payments, fulfill your orders, remember your preferences, send notifications related to your account, manage returns and exchanges, and create a customized shopping experience.
  • Marketing and Advertising. Where you have given your consent, to send marketing communications by email or postal mail, and to show you online advertisements for products or services.
  • Security and Fraud Prevention. To authenticate your account, provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, and protect our Services.
  • Communicating with You. To provide customer support and respond to your requests.
  • Legal Reasons. To comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies.

How we disclose personal information

We may disclose your personal information to the following categories of recipients, who act as processors on our behalf or as independent controllers where applicable:

  • E-commerce platform provider that hosts the Services and processes data on our behalf.
  • Payment processors that securely handle credit card, debit card, and alternative payment transactions.
  • Logistics and shipping partners that fulfill, dispatch, and deliver your orders.
  • Returns management partner that operates our dedicated returns portal.
  • Email and SMS marketing service provider that delivers our newsletters, transactional messages, and marketing communications.
  • Onsite engagement provider that operates pop-ins, newsletter sign-up forms, and wishlist features.
  • Consent management provider that operates our cookie consent banner and records preferences.
  • Analytics and tag management providers that help us measure performance and improve the Services.
  • Customer experience tools such as size recommendation widgets and geolocation services.
  • Business and marketing partners where you have consented to receive personalized advertising. Our business and marketing partners use your information in accordance with their own privacy notices.
  • Our affiliates or otherwise within our corporate group.
  • In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations, to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

A complete and up-to-date list of the specific service providers we work with is available upon request by emailing estore@pierrehardy.com.

International transfers

Some of our service providers are established outside the European Economic Area (EEA). When we transfer your personal information outside the EEA, we rely on appropriate safeguards as required by Articles 44 to 49 of the GDPR, including:

  • Transfers to countries recognized as offering an adequate level of protection by a European Commission adequacy decision;
  • Transfers governed by Standard Contractual Clauses adopted by the European Commission;
  • Transfers based on other appropriate safeguards or derogations provided for by the GDPR.

You may request a copy of the safeguards in place by contacting us at estore@pierrehardy.com.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify in order to provide and improve the Services for you.

To learn more about how Shopify processes your personal information, please refer to the Shopify Privacy Policy. Depending on the processing activity, Shopify acts either as a processor on our behalf or as an independent data controller.

Cookies and similar technologies

A cookie is a small piece of data (text file) that a website asks your browser to store on your device in order to remember information about you, such as your language preferences, login state, or shopping cart contents. Some cookies are set by us (first-party cookies), others are set by third parties whose services we use on the Services (third-party cookies).

We and our service providers use cookies and similar technologies to:

  • Operate the Services (essential cookies). These cookies are necessary for the Services to function and do not require your consent.
  • Measure performance (performance and analytics cookies). These cookies allow us to analyze traffic and improve features.
  • Personalize your experience (functional cookies). These cookies remember choices you made (such as language or region).
  • Deliver advertising and marketing (marketing cookies). These cookies are used to build a profile of your interests and show you relevant advertisements.

Non-essential cookies (performance, functional, marketing) are only deposited with your consent, in accordance with Article 82 of the French Data Protection Act and the e-Privacy Directive.

Managing your cookie preferences

You can at any time review and change your consent through the Cookie settings link available in our website footer, which opens our consent management module. You can also configure your browser to block or alert you about cookies — please note that essential cookies cannot be disabled and that blocking other cookies may impact your experience of the Services.

If you need assistance, contact us by email at estore@pierrehardy.com or by phone at +33 (0)1 53 19 51 44.

Third party websites and links

The Services may provide links to websites or other online platforms operated by third parties. We are not responsible for the privacy or security of such sites. We recommend that you review their privacy and security policies before providing them with any personal information.

Children's data

The Services are not intended to be used by children under the age of 16, and we do not knowingly collect personal information from children under that age. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

Security and retention of your information

We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction or damage, in accordance with Article 32 of the GDPR. However, no security measure is perfect or impenetrable, and we cannot guarantee absolute security.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements:

  • Account data: for as long as your account is active, then archived for 3 years after the last activity;
  • Order data: 10 years from the date of the order (commercial law and tax law requirements);
  • Marketing data: 3 years from the last interaction with us, or until you withdraw your consent;
  • Cookies and trackers: maximum 13 months from their deposit;
  • Customer service communications: 1 year from the date of receipt, then archived where necessary.

Your rights

Under the GDPR and the French Data Protection Act, you have the following rights regarding your personal information:

  • Right of access (Article 15 GDPR) — to obtain confirmation as to whether or not personal information concerning you is being processed, and access to that information.
  • Right to rectification (Article 16 GDPR) — to obtain the correction of inaccurate personal information concerning you.
  • Right to erasure (Article 17 GDPR, "right to be forgotten") — to obtain the deletion of your personal information, subject to certain conditions.
  • Right to restriction of processing (Article 18 GDPR) — to obtain the restriction of processing in certain circumstances.
  • Right to data portability (Article 20 GDPR) — to receive the personal information you have provided to us in a structured, commonly used and machine-readable format, and to transmit it to another controller.
  • Right to object (Article 21 GDPR) — to object to the processing of your personal information, including for direct marketing purposes.
  • Right to withdraw consent (Article 7(3) GDPR) — to withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing before the withdrawal.
  • Right to define directives regarding the fate of your personal information after your death, in accordance with Article 85 of the French Data Protection Act.

To exercise any of these rights, please contact us at estore@pierrehardy.com or by post at Maison Pierre Hardy SAS, 3/5 rue Palatine, 75006 Paris, France. We may need to verify your identity before processing your request. We will respond within one month of receipt of your request, which may be extended by a further two months where necessary, taking into account the complexity and number of requests.

Right to lodge a complaint

If you consider that the processing of your personal information infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

In France, the competent supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL):

3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07, France
Website: www.cnil.fr

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or wish to exercise any of the rights available to you, please contact us:

Email: estore@pierrehardy.com
Phone: +33 (0)1 53 19 51 44
Postal address: Maison Pierre Hardy SAS — 3/5 rue Palatine, 75006 Paris, France

For the purpose of the GDPR, Maison Pierre Hardy SAS is the data controller of your personal information.