Privacy Policy
1. Data controller
Personal data collected via this website is processed by:
- — HoméoSpirits
- — 37 Rue de la Couture, 16130 Genté (Charente)
- — Email: contact@homeo-spirits.com
- — Tel.: 06 87 01 58 43
If you have any questions regarding the protection of your personal data, please write to us at the address above.
2. Data collected, purposes and legal bases
| Purpose | Data processed | Legal basis | Duration |
|---|---|---|---|
| Contact form, visit request and waiting list | Name, email, telephone number (optional), message, visit preferences | Consent (Art. 6.1(a)) and pre-contractual measures (Art. 6.1(b)) | 3 years from the last contact |
| Subscribe to the estate newsletter | Email address, date of registration, IP address used to give consent | Consent (Art. 6.1.a) — which may be withdrawn at any time via the unsubscribe link | Until you unsubscribe |
| User accounts | Email, username, hashed password | Performance of the contract — Terms and Conditions of Use (clause 6.1.b) | Until the account is deleted + statutory time limits |
| Audience measurement (cookieless, first-party) | Page views, device type, country — technical data hashed daily; IP addresses are not stored in plain text | Legitimate interest (Art. 6(1)(f)) — service improvement, without profiling | 90 rolling days |
| Server and security logs | Technical details of the requests | Legitimate interest (Art. 6(1)(f)) — website security | Reasonable duration, regular review |
When you open an account on the online shop: your date of birth will be collected at the time of ordering to verify that you are of legal age, in accordance with Article L3342-1 of the Public Health Code. The legal basis for this will therefore be a legal obligation (Article 6(1)(c) of the GDPR).
3. Source of the data
All the data processed is collected directly from you whilst you are using the website: browsing, filling in forms, creating an account.
4. Recipients and data processors
We use the following technical service providers, who act as subcontractors and are not permitted to use your data for any other purposes.
| Subcontractor | Role | Data | Location / Guarantees |
|---|---|---|---|
| IONOS SARL | VPS hosting for the website | All data for the site | EU (France / Germany) — no transfers outside the EU |
| SendGrid (Twilio Inc.) | Sending transactional emails (response to the contact form) | Email address, message content | United States — standard contractual clauses (SCCs, Article 46 of the GDPR) |
| Google reCAPTCHA v3 (Google LLC) | Spam protection for forms | IP address, browsing behaviour, user-agent | United States — CCT (Article 46 of the GDPR) |
| Google Fonts CDN (Google LLC) | Loading fonts | IP address | United States — CCT (Article 46 of the GDPR) |
| Font Awesome CDN (Fonticons Inc.) | Loading icons | IP address | United States — CCT (Article 46 of the GDPR) |
We do not use any advertising providers, tracking agencies or analytics tools such as Google Analytics.
5. Transfers outside the European Union
Four service providers (SendGrid, Google reCAPTCHA, Google Fonts, Font Awesome) are based in the United States. Data transfers to these entities are governed by the standard contractual clauses (SCCs) adopted by the European Commission (Article 46 of the GDPR), which ensure an adequate level of protection for your data.
6. Retention periods
- — Enquiries and waiting list registrations: 3 years from the date of the last contact.
- — User accounts: until the account is deleted by the user, after which it is archived for the applicable statutory periods.
- — Analytics data (cookieless audience measurement): 90-day rolling period, followed by automatic deletion.
- — Server logs (technical security): kept for a reasonable period of time and reviewed regularly.
7. Cookies
This website uses only strictly functional cookies, which are exempt from the requirement for consent under the CNIL’s guidelines.
| Cookie | Purpose | Duration |
|---|---|---|
sessionid |
Maintaining the user session (personal area, legal notice) | Django session duration |
csrftoken |
Protection against CSRF attacks on forms | 1 year (automatic renewal) |
This website does not set any advertising cookies, tracking cookies or audience measurement cookies. Our in-house analytics tool is entirely cookie-free: it does not create any persistent identifiers and does not store your IP address in plain text.
8. Your rights
You have the following rights in relation to your personal data:
- — Access (Article 15): to obtain a copy of your personal data.
- — Rectification (Art. 16): to have inaccurate or incomplete data corrected.
- — Erasure (Article 17): request the erasure of your data in the circumstances set out in the GDPR.
- — Objection (Art. 21): to object to processing based on legitimate interests, in particular audience measurement.
- — Restriction (Art. 18): to request the temporary suspension of processing.
- — Data portability (Article 20): to receive your data in a structured, machine-readable format, where processing is based on consent or a contract.
To exercise any of these rights, please write to us at: contact@homeo-spirits.com. We will reply within one month (which may be extended to three months in the case of a complex request, with notification given within the first month).
9. Right to lodge a complaint with the CNIL
If you believe that the processing of your data does not comply with the regulations, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):
- — Website: www.cnil.fr
- — Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
10. Safety
The data is hosted on a VPS server located in the European Union (IONOS). The website is accessible exclusively via HTTPS, which encrypts data exchanged between your browser and our server. Passwords are stored in hashed form and are never stored in plain text.
11. Minors
This website features alcoholic products (Cognac, spirits). It is intended exclusively for adults. If you are under 18, please leave this website.
12. Updates to this policy
This policy may be updated to reflect changes to our practices or to the regulations. In the event of any substantial changes, we will notify you by any appropriate means, including by email if you have an account. The date of the last update is shown below.
Last updated: 7 June 2026
