Legal information
Privacy policy
Last updated: July 20, 2026
Reynaud attaches great importance to protecting your personal data. This policy describes the processing carried out in connection with the e-commerce website and related services, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.
1. Data controller
The data controller is DRAGEES REYNAUD (FRANCE PROVENCE) (Dragées Reynaud), simplified joint-stock company (SAS), whose registered office is located at 161 route des Camoins, 13011 Marseille (SIRET: 315 335 349 00017).
Personal data contact: rclient@dragees-reynaud.com
2. Data collected
Depending on your interactions with the website, we may process the following categories of data:
- Identity and contact details (last name, first name, address, email, phone)
- Order and invoicing data
- Customer account data and preferences (saved addresses)
- Browsing data and technical cookies (see cookie section)
- Exchanges through the contact form, including in-store appointment requests
- Newsletter subscription (email address)
3. Purposes and legal bases
Your data is processed for the following purposes, based on the legal grounds indicated:
- Contract performance: order management, delivery, after-sales service
- Legal obligation: invoicing, accounting, fraud prevention
- Legitimate interest: website improvement, security, internal anonymized or aggregated statistics
- Consent: newsletter and Google Analytics audience measurement
4. Recipients and processors
Data may be shared with service providers strictly necessary for running the website and fulfilling orders. The main processors / recipients currently include:
- Amazon Web Services EMEA SARL (AWS Amplify) — website hosting and delivery
- Stripe, Inc. / Stripe Payments Europe, Ltd. — secure card payments
- Cloudflare, Inc. — security, performance and traffic protection (where applicable)
- Technical providers of the e-commerce / emailing platform (transactional email and newsletter)
- Carriers and logistics partners — order delivery
- Google Ireland Limited (Google Analytics) — audience measurement, only with your consent
- Google Ireland Limited (Google Maps) — map on the “Our store” page, loaded only if you click “Show the map”; Google may then set its own cookies
- The platform's artificial intelligence provider — chat assistant answers, based on the messages you type in it
5. Transfers outside the European Union
Some of our providers (in particular AWS, Stripe and Cloudflare) are established in or may process data from the United States or other countries outside the European Economic Area.
Where such transfers occur, they are framed by appropriate safeguards under the GDPR, including the European Commission's Standard Contractual Clauses and, where applicable, supplementary measures, or by an adequacy decision where one exists.
You may obtain further information about these safeguards by contacting us at the address indicated above.
6. Retention period
Data is retained for the period necessary to fulfill the purposes described, then archived or deleted in accordance with legal obligations (e.g. 10 years for accounting records).
Marketing data is retained until consent is withdrawn or for a maximum of 3 years from the last contact.
7. Your rights
You have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent when processing is based on consent.
To exercise your rights: rclient@dragees-reynaud.com. Proof of identity may be requested in case of reasonable doubt about your identity.
You may also lodge a complaint with the CNIL (www.cnil.fr).
9. Security
Appropriate technical and organizational measures are implemented to protect your data against unauthorized access, loss or alteration (payment encryption, restricted access, backups).