Your privacy matters

Privacy Policy

This Privacy Policy explains how Margot de Grumont collects, uses, stores and protects personal data when you visit our website, create an account, contact us or place an order.

Last updated: 21 October 2026

1. Data Controller

The data controller responsible for processing personal data through this website is:

For questions about this Privacy Policy or to exercise your data protection rights, please contact us using the email address above.

2. Personal Data We Collect

Depending on how you use our website, we may process the following categories of personal data:

Account information

• First and last name.
• Email address.
• Password, stored in hashed form rather than as readable text.
• Telephone number, where provided.
• Other account information you choose to provide.

Order and delivery information

• Billing and shipping address.
• Telephone number and email address used for order communications.
• Products purchased, quantities, prices and order totals.
• Order number, payment method and order/payment status.
• Information necessary to manage delivery, returns, refunds and customer support.

Communications

If you contact us, we may process the information contained in your message and the contact details needed to respond.

Technical information

When you access the website, certain technical information may be processed by the hosting provider or other services involved in delivering the website. Depending on the services and server configuration, this may include IP address, date and time of access, browser information and technical logs.

3. Purposes and Legal Bases

We process personal data for the following purposes:

• Account management: to create and maintain your account and provide account-related functions. Legal basis: performance of a contract or steps requested before entering into a contract.
• Order processing: to process purchases, manage payments, arrange delivery and handle customer service. Legal basis: performance of a contract.
• Legal and tax obligations: to comply with applicable accounting, tax and other legal requirements. Legal basis: compliance with a legal obligation.
• Customer enquiries: to respond to requests and resolve issues. Legal basis: steps taken at your request, performance of a contract or our legitimate interests, depending on the circumstances.
• Website security and fraud prevention: to protect the website, accounts, transactions and our business. Legal basis: our legitimate interests, where applicable.
• Legal claims: to establish, exercise or defend legal claims. Legal basis: our legitimate interests and, where applicable, the establishment, exercise or defence of legal claims under data protection law.

We do not use account or order information for newsletter marketing through this website. If our practices change, we will provide any notices and obtain consent where required by law.

4. Payments

Payments may be offered through Stripe and payment methods made available through its checkout, including card payments, PayPal or Klarna where available.

Payment information is processed by the relevant payment service provider under its own privacy terms. Depending on the selected method, the provider may process transaction details and information necessary to authenticate, authorize and complete the payment.

We receive information necessary to manage the order, such as the payment method and transaction or payment status. We do not intend to store full payment card details on our website's database.

Please consult the relevant payment provider's privacy notice for information about its processing activities.

5. Cookies and Local Storage

The website may use browser storage to support essential shopping functions. In particular, the shopping cart and checkout information may be stored locally in your browser using localStorage keys such as margotCart and margotCheckout.

Browser localStorage is different from a cookie. These entries may be used to remember cart contents or checkout information while you use the website. You can clear locally stored data through your browser settings, although doing so may remove your saved cart or checkout information.

The website's complete use of cookies, similar technologies and third-party resources must be assessed based on the services actually installed and enabled. Where consent is required by law, non-essential cookies or tracking technologies must not be activated before valid consent is obtained.

For further information about the technologies used on this website and available choices, please refer to our Cookie Policy, once published.

6. Google Fonts and External Resources

The website may load fonts from Google Fonts. When an external resource is requested, the relevant provider may receive technical information, such as your IP address and browser request information.

External resources should be configured and reviewed in accordance with applicable data protection requirements. Where appropriate, fonts may instead be hosted locally.

7. Who May Receive Personal Data

Personal data may be disclosed, where necessary and lawful, to the following categories of recipients:

• Hosting and technical providers: Aruba and providers involved in maintaining and securing the website.
• Payment service providers: Stripe and the relevant payment provider or payment method selected at checkout.
• Delivery and logistics providers: services required to deliver orders and manage returns.
• Professional advisers and authorities: accountants, legal advisers, courts or public authorities where disclosure is necessary or legally required.

Depending on the circumstances, recipients may act as independent controllers or as processors acting on our instructions. Where required, appropriate contractual arrangements are put in place.

8. International Data Transfers

Some service providers may process personal data outside the European Economic Area. Where a transfer takes place, it will be assessed and carried out in accordance with applicable data protection law, using an adequacy decision or appropriate safeguards where required.

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, subject to applicable legal retention requirements.

• Customer accounts: retained until you request deletion, unless continued retention is necessary to comply with legal obligations or to establish, exercise or defend legal claims.
• Orders and accounting records: retained for the periods required by applicable accounting, tax and other legal obligations.
• Customer service communications: retained for as long as needed to respond to the enquiry and manage any related dispute or legal obligation.
• Technical and security logs: retained according to the applicable provider's configuration and the time reasonably necessary for security, troubleshooting and compliance.

When personal data is no longer necessary and no legal retention obligation applies, it will be deleted or anonymised where appropriate.

10. Your Data Protection Rights

Subject to the conditions and limitations provided by applicable law, you may have the right to:

• Access your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data.
• Request restriction of processing.
• Receive certain data in a portable format.
• Object to processing based on legitimate interests.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the competent data protection supervisory authority, including the Italian Data Protection Authority (Garante per la protezione dei dati personali), where applicable.

To exercise your rights, contact info@margotdegrumont.it . We may need to verify your identity before responding. Applicable legal deadlines and exceptions will apply.

11. Data Security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. No method of transmission or electronic storage can, however, be guaranteed to be completely secure.

12. Children's Privacy

This website is intended for people who can lawfully enter into purchases under the laws applicable to them. We do not knowingly seek to collect personal data from children in breach of applicable law. If you believe that a child has provided personal data unlawfully, please contact us.

13. Third-Party Websites

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of external websites. Please review their privacy notices before providing personal information.

14. Changes to This Policy

We may update this Privacy Policy when our practices, services or legal obligations change. The latest version will be published on this page with its updated date.

15. Contact

If you have questions about this Policy, how your data is processed or how to exercise your rights, please contact: