Legal
Privacy Policy
Last updated: October 2026
1. Data Controller
Champ En Provence is the data controller for personal data collected through this website. You can contact us at: [email protected].
2. What Data We Collect
We may collect the following personal data when you place an order, make a booking enquiry, or contact us:
- Full name
- Email address
- Delivery address (for shop orders)
- Payment information (processed securely by Stripe — we do not store card details)
- Message content submitted via our contact form
We also collect anonymised usage data via analytics tools (see Section 6).
3. How We Use Your Data
We process your personal data for the following purposes:
- Order fulfilment: to process and deliver your purchase
- Booking enquiries: to respond to enquiries about La Maison Bleue
- Customer communications: to respond to your messages and provide after-sales support
- Legal compliance: to meet our obligations under UK law
Our lawful basis for processing is contract performance (for orders) and legitimate interests (for enquiries and communications).
4. Data Retention
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Order records are retained for a minimum of 6 years in accordance with HMRC requirements. Enquiry data is deleted when no longer needed.
5. Data Sharing
We do not sell or rent your personal data to third parties. We may share your data with:
- Stripe: for secure payment processing
- Delivery couriers: to fulfil your order (name and address only)
- Airbnb: for bookings made via the Airbnb platform (subject to Airbnb's own privacy policy)
All third-party processors are required to handle your data in accordance with UK GDPR.
6. Cookies & Analytics
This website uses cookies to improve your experience and to analyse site traffic. Cookies may include:
- Essential cookies: required for the site to function (e.g. cart session)
- Analytics cookies: anonymised data to understand how visitors use the site (e.g. Google Analytics)
You can manage your cookie preferences via the cookie consent banner displayed on your first visit. You may also disable cookies in your browser settings, though this may affect site functionality.
7. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:
- Right of access: to request a copy of the personal data we hold about you
- Right to rectification: to request correction of inaccurate data
- Right to erasure: to request deletion of your personal data, subject to legal obligations
- Right to restrict processing: to request that we limit how we use your data
- Right to data portability: to receive your data in a structured, machine-readable format
- Right to object: to object to processing based on legitimate interests
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
8. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment data is handled exclusively by Stripe and is never stored on our servers.
9. Complaints
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. We would, however, appreciate the opportunity to address your concerns directly first.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.
11. Contact
For any privacy-related queries, please contact: [email protected].