Privacy policy
Last updated: 21 October 2026
Aromavie, SAS, 47 rue Vivienne, 75002 Paris, France (Paris Trade Register 130 114 218), is the controller of the personal data collected on the aromavie.fr website. This policy describes which data we collect, why, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data collected and purposes
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Identity, email, phone, shipping and billing addresses, order history | Processing and delivery of orders, invoicing, customer service, warranties | Performance of the contract; legal obligations (accounting) | Duration of the business relationship, then 10 years for accounting records |
| Professional account data (company name, SIRET, VAT number, business type) | Opening and managing the pro area, professional prices | Performance of the contract | Duration of the account + 3 years |
| Payment data | Collection of payment | Performance of the contract | Processed by the payment provider, never stored by Aromavie |
| Email (newsletter) | Sending news, offers and abandoned-cart reminders | Consent, which can be withdrawn at any time | Until you unsubscribe, or 3 years without interaction |
| Messages sent through the contact and quote forms | Replying to your requests | Legitimate interest | 3 years |
| Browsing data (cookies, IP address, pages viewed) | Operation of the site, security, audience measurement | Legitimate interest (necessary cookies) or consent (other cookies) | See the Cookies section |
2. Recipients
Your data is processed by Aromavie and by the providers strictly necessary to deliver our services, acting on our instructions: Shopify International Ltd (hosting of the site and the shop, payment), Boxtal and the carriers chosen at checkout (Mondial Relay, Colissimo, FedEx) for delivery, and Shopify Email for sending our emails. Some of these providers may process data outside the European Union; such transfers are governed by the European Commission's standard contractual clauses or an adequacy decision. We never sell or rent your data.
3. Cookies and similar technologies
We collect data about your interactions with the site through cookies and similar technologies. Cookies that are necessary for the site to work (cart, session, security, preferences) do not require your consent. Audience-measurement and advertising cookies are set only with your agreement; the information they collect may be shared with third parties, including our advertising partners, to show you personalised ads on other sites and to measure the effectiveness of our campaigns. Cookies are kept for no longer than 13 months.
What is targeted advertising?
Targeted, or personalised, advertising means selecting and displaying ads based on information about a person: presumed interests, browsing history, interactions with websites and online services. Under applicable laws, making personal data available to third parties for these purposes may be considered a "sale" or "sharing" of data, even when no money changes hands.
Your rights in the European Economic Area, the United Kingdom and Switzerland
We ask for your consent before using non-essential cookies for advertising or retargeting purposes. You can refuse these technologies or withdraw your consent at any time on the Cookie settings page or in your browser settings, and exercise your right to object as described in section 4.
Your rights in the United States
Depending on your state of residence, you may have the right to opt out of the sale or sharing of your personal data and of its use for targeted advertising. Where the law requires it, we honour recognised opt-out signals such as Global Privacy Control (GPC). To exercise this right, use the Cookie settings page or write to us at contact@aromavie.fr.
4. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent and to set instructions regarding your data after your death. To exercise them, write to contact@aromavie.fr or to Aromavie, 47 rue Vivienne, 75002 Paris, France, with proof of your identity. We reply within one month. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
5. Security
The site is served over HTTPS and payments are processed by a PCI-DSS certified provider. We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure.
6. Changes
This policy may be updated; the date of the last update appears at the top of the page. Significant changes will be announced on the site.