Last updated: September 2026
This Privacy Policy describes how BISCUITERIE LA MÈRE POULARD collects, uses, stores, and protects the personal data of users of the website www.biscuiterie-mere-poulard.com (hereinafter the "Site").
BISCUITERIE LA MÈRE POULARD attaches particular importance to the protection of personal data and undertakes to process it in accordance with the General Data Protection Regulation ("GDPR"), the French Data Protection Act (Loi Informatique et Libertés), and, more generally, with the applicable regulations concerning personal data protection.
1. Who is responsible for processing your data?
The data controller for personal data collected on the Site is:
BISCUITERIE LA MÈRE POULARD
Simplified joint-stock company with a sole shareholder (SASU)
Registered office: 23 Parc de l’Aérodrome – 59910 Bondues – France
RCS Lille Métropole: 423 919 299
Intracommunity VAT No.: FR 27 423 919 299
Telephone: 02 99 18 48 50
Email: biscuiterie.blmp@lamerepoulard-gourmet.fr
2. What personal data may we collect?
Depending on your use of the Site and the services you use, we may notably collect the following categories of data:
Identification and contact data
- last name;
- first name;
- postal address;
- billing address;
- delivery address;
- email address;
- telephone number.
Customer account data
- information required for creating and managing your account;
- order history;
- information relating to your authentication and account.
Order data
- products ordered;
- quantities;
- order amount;
- delivery method;
- delivery address;
- purchase history;
- any requests, complaints, returns, or refunds;
- information required for invoicing.
Payment data
Payments are processed by secure payment providers, including Shopify Payments and, depending on the payment methods offered on the Site, the corresponding operators.
BISCUITERIE LA MÈRE POULARD does not store full banking data that would allow direct payment transactions.
However, we may receive or store certain transaction-related information, such as:
- payment status;
- payment method used;
- references required for transaction tracking;
- information relating to a refund or payment incident.
Contact form data
When you use a contact form, notably the Contact or Pro Contact form, we may collect:
- your identity;
- your contact details;
- your company and your position when you are acting in a professional capacity;
- the subject and content of your request;
- any information you choose to provide in your message.
Commercial communications data
When you subscribe to our newsletter or agree to receive our commercial communications, we may notably process:
- your email address;
- information relating to your consent;
- your preferences;
- data relating to the sending, opening, or interaction with our communications, when these features are activated;
- your purchase history when used as part of our loyalty or commercial communication actions, in compliance with applicable regulations.
Browsing and technical data
When you browse the Site, certain data may be collected automatically, including:
- IP address;
- browser type;
- device type;
- operating system;
- pages viewed;
- date and time of visit;
- browsing path;
- traffic source;
- interactions with the Site;
- identifiers or information from cookies and other trackers.
This data may notably be collected using cookies or other trackers under the conditions described in our Cookie Management Policy.
3. Why do we use your data and on what legal bases?
We use your data only for specific purposes and on a legal basis provided for by the regulations.
Customer account management
Purposes:
- creation and management of the customer account;
- authentication;
- access to order history;
- management of information associated with the account.
Legal basis: performance of the contract or pre-contractual measures taken at your request.
Order management
Purposes:
- recording and processing orders;
- order preparation;
- invoicing management;
- order tracking;
- management of returns, refunds, complaints, and warranties.
Legal basis: performance of the contract concluded with the Client.
Payment
Purposes:
- payment processing and security;
- refund management;
- processing of any payment incidents.
Legal basis: performance of the contract.
Certain fraud prevention and transaction security operations may also be based on the legitimate interest of BISCUITERIE LA MÈRE POULARD or the concerned service providers in securing payments and preventing fraudulent use.
Delivery
Purposes:
- preparation of shipment;
- transmission of necessary information to the logistics provider and carrier;
- delivery and tracking of the order;
- management of delivery incidents.
Legal basis: performance of the contract.
Invoicing and accounting, tax, and legal obligations
Purposes:
- establishment and retention of invoices;
- bookkeeping;
- compliance with tax, accounting, and regulatory obligations;
- retention of documents required by law.
Legal basis: compliance with a legal obligation.
Customer service and request management
Purposes:
- answering questions;
- processing information requests;
- complaint management;
- monitoring customer relationships.
Legal basis: depending on the nature of the request, performance of the contract, pre-contractual measures, or legitimate interest of BISCUITERIE LA MÈRE POULARD in ensuring the monitoring and quality of the relationship with its customers and users.
Professional contact form
Purposes:
- processing and responding to requests from professionals;
- monitoring commercial requests;
- potential preparation of proposals or commercial exchanges.
Legal basis: pre-contractual measures taken at the request of the data subject or legitimate interest of BISCUITERIE LA MÈRE POULARD in responding to professional requests addressed to it.
When the professional has agreed to receive commercial communications, their contact details may also be used for this purpose.
Newsletter and commercial communications for individuals
We may send you newsletters, offers, or commercial communications by email when you have expressly consented, notably by means of a dedicated checkbox or a voluntary registration form.
The purchase of a product alone does not constitute consent to receive our newsletter when it is required.
Legal basis: consent.
You can withdraw your consent at any time, notably via the unsubscribe link included in each communication.
Commercial communications for professionals
When you act in a professional capacity, communications may be sent to you under the conditions permitted by regulation.
When we obtain your consent to send you such communications, processing is based on this consent.
You can object to receiving commercial communications at any time and free of charge.
Audience measurement and analysis of Site usage
We notably use Google Analytics 4 to measure audience and better understand Site usage.
Data may be used to:
- measure the number of visits;
- analyze pages viewed;
- understand browsing paths;
- measure Site performance;
- improve our content and services.
When the trackers concerned require consent, they are only used after obtaining it.
Legal basis: consent when required by regulation.
Advertising and campaign measurement
Subject to your consent, we may use tools such as:
- Meta Pixel;
- Meta Conversion API, when activated;
- Google Ads;
- associated conversion measurement tools.
These tools can notably allow:
- measuring the performance of our campaigns;
- measuring conversions;
- analyzing the effectiveness of our marketing actions;
- creating or using advertising audiences within the limits permitted by the activated settings and applicable regulations.
Legal basis: consent when required.
The terms of use of these tools are also specified in our Cookie Management Policy and in our consent management tool.
Site security and fraud prevention
Certain technical or transactional data may be used to:
- ensure Site security;
- detect abnormal behavior;
- prevent fraud, abuse, or unauthorized access attempts;
- protect information systems and users.
Legal basis: legitimate interest of BISCUITERIE LA MÈRE POULARD in securing its Site, transactions, and systems.
4. Is the requested information mandatory?
Data marked as mandatory in forms are necessary for processing your request or providing the service concerned.
Failure to provide this information may make it impossible for us to:
- create your account;
- process your order;
- ensure delivery;
- process payment;
- respond to your request.
Information not marked as mandatory is optional.
5. To whom is your data transmitted?
To the extent necessary for the performance of their duties, your data may be accessible to:
- authorized employees and departments of BISCUITERIE LA MÈRE POULARD;
- Shopify, for the operation of the online store and associated technical functionalities;
- payment service providers, notably Shopify Payments;
- Sendcloud, for shipment management and organization;
- the carriers responsible for delivering your order;
- Brevo, for managing newsletters and electronic communications;
- Google, notably within the scope of Google Analytics 4 and Google Ads;
- Meta, notably within the scope of Meta Pixel and, when activated, the Conversion API;
- technical, IT, hosting, maintenance, or security providers involved in the operation of the Site, when they need to access the data to perform their duties;
- administrative, judicial authorities, or legally empowered organizations when required by regulations.
We do not sell your personal data.
Each service provider only receives the information necessary for the performance of the task entrusted to them, subject to the processing they may carry out as an independent data controller in accordance with their own legal obligations.
6. How long do we keep your data?
We retain data only for the duration necessary for the purposes for which it was collected, subject to the durations imposed or authorized by regulation.
Data related to orders and commercial relationships
Data necessary for managing the commercial relationship is retained for the duration of this relationship.
Data that must be retained to comply with a legal obligation or to allow the establishment, exercise, or defense of legal claims may then be archived for the applicable period.
Invoices and accounting data
Invoices and accounting documents are retained for 10 years, in accordance with applicable legal obligations.
Data used for prospecting concerning customers
Data used for commercial prospecting purposes may be retained during the commercial relationship and then for a maximum period of 3 years from the end of the commercial relationship or the last relevant contact, subject to applicable regulatory provisions.
Prospect data
Data of a prospect who has not yet made a purchase may be retained for prospecting purposes for a maximum period of 3 years from their collection or the last contact initiated by the prospect.
Data related to contact requests
Data related to a contact request is retained for the duration necessary for its processing and then, when justified, for a period allowing for the monitoring of the relationship or the defense of our rights.
When used for prospecting purposes, the aforementioned durations apply.
Consents and objections
Information demonstrating that you have given or withdrawn your consent, or exercised your right to object, may be retained for the duration necessary to demonstrate compliance with our legal obligations.
Information allowing for long-term compliance with an unsubscribe or objection request may also be retained in the form of an objection list to avoid contacting you again.
Cookies and trackers
The durations applicable to cookies, trackers, and the retention of your choices are indicated in our Cookie Management Policy and in the cookie management tool accessible on the Site.
7. Can your data be transferred outside the European Economic Area?
Certain service providers or companies belonging to the groups of our service providers may be established or process certain data in countries located outside the European Economic Area ("EEA").
When personal data is transferred outside the EEA, BISCUITERIE LA MÈRE POULARD ensures that this is carried out in accordance with applicable regulations.
These transfers may notably be governed by:
- an adequacy decision adopted by the European Commission;
- standard contractual clauses approved by the European Commission;
- binding corporate rules;
- or any other transfer mechanism recognized by applicable regulations.
When necessary, additional safeguards or measures may be implemented to ensure an appropriate level of data protection.
You can contact us to obtain further information on the safeguards applicable to transfers of your personal data.
8. Cookies and other trackers
The Site uses cookies and other trackers necessary for its operation, as well as, subject to your consent when required, audience measurement and advertising measurement tools.
You can accept, refuse, or customize the use of cookies subject to your consent from the cookie management tool available on the Site.
You can also change your choices or withdraw your consent at any time.
For more information on the categories of cookies used, their purposes, and how to manage your preferences, please consult our Cookie Management Policy, accessible from the footer of the Site.
9. How do we protect your data?
BISCUITERIE LA MÈRE POULARD implements appropriate technical and organizational measures designed to preserve the security, integrity, and confidentiality of personal data and to reduce the risks of:
- unauthorized access;
- loss;
- alteration;
- disclosure;
- destruction;
- unlawful use.
Access to data is limited to individuals and service providers who need to know it in the performance of their duties.
Since no computer system can guarantee absolute security, BISCUITERIE LA MÈRE POULARD ensures that it adapts its security measures to identified risks and technical developments.
10. What are your rights?
Under the conditions provided for by applicable regulations, you may have the following rights:
Right of access
You can request to know if we process data concerning you and, if so, obtain access to this data as well as a copy.
Right to rectification
You can request the correction of inaccurate or incomplete data concerning you.
Right to erasure
You can request the erasure of your data when the conditions provided for by regulation are met.
This right does not apply, in particular, when their retention is necessary for compliance with a legal obligation or for the establishment, exercise or defense of legal claims.
Right to restriction of processing
You can request the temporary restriction of certain processing activities in the cases provided for by the GDPR.
Right to object
Where processing is based on legitimate interest, you may object to it on grounds relating to your particular situation, subject to the conditions laid down by the regulations.
You can object at any time and without justification to the use of your data for commercial prospecting purposes.
Right to data portability
For processing based on your consent or on the performance of a contract and carried out by automated means, you can, under the conditions provided for by the GDPR, obtain the data you have provided to us in a structured, commonly used and machine-readable format, or request their transmission to another controller when technically possible.
Right to withdraw your consent
Where processing is based on your consent, you can withdraw it at any time.
The withdrawal of consent does not affect the lawfulness of processing carried out prior to this withdrawal.
Guidelines concerning the fate of your data after your death
Under the conditions provided for by French law, you can also define guidelines concerning the retention, erasure and communication of your personal data after your death.
11. How to exercise your rights?
You can exercise your rights or ask any questions relating to the protection of your personal data by contacting us:
By email:
biscuiterie.blmp@lamerepoulard-gourmet.fr
By post:
BISCUITERIE LA MÈRE POULARD
23 Parc de l’Aérodrome
59910 Bondues – France
Your request must allow us to identify you and specify the right you wish to exercise.
An identity document is not systematically required.
However, when we have reasonable doubt about your identity, we may ask you for additional necessary information to verify that the request indeed originates from the data subject.
We will respond within the time limits provided by the regulations, usually within one month of receiving your request.
This period may be extended in cases provided for by the GDPR, particularly due to the complexity or number of requests. In this case, you will be informed of this extension under the conditions provided for by the regulations.
12. Right to lodge a complaint with the CNIL
If, after contacting us, you believe that your rights regarding your personal data are not being respected, you have the right to lodge a complaint with the French supervisory authority:
Commission nationale de l’informatique et des libertés – CNIL
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France
You can also use the online complaint services offered by the CNIL.
13. Links to third-party sites
The Site may contain links to sites or services offered by third parties.
BISCUITERIE LA MÈRE POULARD is not responsible for data processing carried out independently by these third parties on their own services.
We invite you to consult their respective privacy policies before providing them with personal data.
14. Modification of this Privacy Policy
This Privacy Policy may be modified to take into account, in particular:
- legislative or regulatory changes;
- recommendations from competent authorities;
- changes to the Site;
- the addition, deletion or evolution of our service providers and tools;
- the evolution of our personal data processing activities.
The applicable version is the one published on the Site on the date of its consultation.
The date of the last update appears at the top of this page.
15. Contact
For any questions regarding this Privacy Policy or the processing of your personal data, you can contact:
BISCUITERIE LA MÈRE POULARD
Phone: 02 99 18 48 50
