Privacy Policy

PRIVACY POLICY Last updated: 07 July 2026 1. Introduction LA GRECQUE SARL-S ("LA GRECQUE", "we", "our" or "us") respects your privacy and is committed to protecting your personal data in accordance with: Regulation (EU) 2016/679 General Data Protection Regulation ("GDPR"); applicable Luxembourg data protection legislation; and other applicable European Union privacy requirements. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, create an account, place an order, contact us or interact with our services. 2. Data Controller The entity responsible for processing your personal data is: LA GRECQUE SARL-S 37, Grand-Rue L-3730 Rumelange Grand Duchy of Luxembourg RCS Luxembourg: B303505 VAT Number: LU37448865 Email: contact@lagrecque.lu Telephone: +352 661 999 943 3. Personal Data We Collect Depending on how you use our website, we may collect the following categories of personal data: Identification Information Name and surname Billing address Delivery address Email address Telephone number Order and Transaction Information Products purchased Order history Delivery information Invoices Payment status Payment information is processed securely by authorised payment providers. LA GRECQUE SARL-S does not store complete payment card numbers. Customer Communication Information When you contact us, we may process: emails; messages; telephone communications; customer service requests; complaints or enquiries. Technical Information When you visit our website, we may collect: IP address; browser type; device information; website usage information; pages visited; cookie identifiers. This information is processed according to your cookie preferences. 4. How We Collect Personal Data We may collect personal data: directly from you when you create an account; when you place an order; when you contact us; when you subscribe to communications; when you interact with our website; through cookies and similar technologies where consent is provided. 5. Purposes of Processing We process personal data for the following purposes: Processing Orders Including: managing purchases; confirming orders; processing payments; preparing deliveries; handling returns and refunds. Customer Service Including: responding to questions; handling complaints; providing assistance. Legal and Accounting Obligations Including: maintaining accounting records; complying with tax obligations; responding to legal requests. Website Operation and Security Including: preventing fraud; protecting website security; improving website performance. Marketing Communications Where you have provided consent, we may send: new product announcements; recipes; producer stories; seasonal offers; promotional information. 6. Legal Basis for Processing Under the GDPR, we process personal data based on the following legal grounds: Performance of a Contract Necessary to: process your order; deliver products; manage payments; provide customer service. Legal Obligations Necessary to comply with: accounting requirements; tax obligations; legal requests. Legitimate Interests Necessary for: fraud prevention; website security; improving our services; managing business operations. Consent Used where required, including: newsletters; marketing communications; non-essential cookies. You may withdraw consent at any time. Withdrawal does not affect processing carried out before consent was withdrawn. 7. Sharing Personal Data We do not sell your personal data. We may share personal data only where necessary with trusted service providers, including: Payment Providers For secure payment processing. Delivery Providers For fulfilling and delivering orders. Website and Hosting Providers For operating and maintaining our website. Professional Advisers Where necessary, including: accountants; legal advisers; compliance providers. All service providers are required to process personal data appropriately and securely. 8. International Data Transfers Where personal data is transferred outside the European Economic Area (EEA), LA GRECQUE SARL-S ensures that appropriate safeguards required by GDPR are implemented. 9. Data Security We apply appropriate technical and organisational measures to protect personal data against: unauthorised access; accidental loss; misuse; alteration; disclosure; destruction. However, no internet transmission or storage system can be guaranteed to be completely secure. 10. Data Retention We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. Retention periods may vary depending on: legal obligations; accounting requirements; contractual obligations; dispute resolution requirements. Order and financial records may be retained for the period required by applicable Luxembourg legal obligations. When personal data is no longer required, it will be securely deleted or anonymised. 11. Your Rights Under GDPR Subject to applicable legal conditions, you have the right to: Right of Access Request confirmation of whether we process your personal data and obtain a copy. Right to Rectification Request correction of inaccurate or incomplete information. Right to Erasure Request deletion of personal data where applicable. Right to Restriction Request limitation of processing in certain circumstances. Right to Object Object to certain processing activities, including direct marketing. Right to Data Portability Request your personal data in a structured, commonly used format where applicable. Right to Withdraw Consent Withdraw consent at any time where processing is based on consent. 12. Exercising Your Rights To exercise your GDPR rights, please contact: LA GRECQUE SARL-S Email: contact@lagrecque.lu Telephone: +352 661 999 943 We may request reasonable information to verify your identity before processing your request. We aim to respond within the timeframe required by applicable data protection legislation. 13. Complaints to the Supervisory Authority If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority. In Luxembourg, the competent authority is: Commission nationale pour la protection des données (CNPD) The right to complain does not affect any other legal remedies available to you. 14. Newsletter and Marketing Communications If you subscribe to our newsletter, we may use your email address to send: product updates; recipes; special offers; seasonal announcements; information about LA GRECQUE products and producers. You may unsubscribe at any time by: clicking the unsubscribe link included in our emails; or contacting us at: contact@lagrecque.lu 15. Links to Third-Party Websites Our website may contain links to third-party websites. LA GRECQUE SARL-S is not responsible for the privacy practices, content or security of external websites. Customers are encouraged to review the privacy policies of third-party websites before providing personal information. 16. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect: changes in legal requirements; changes to our services; improvements to our privacy practices. The latest version will always be available on our website. 17. Contact Information For any questions regarding this Privacy Policy: LA GRECQUE SARL-S 37, Grand-Rue L-3730 Rumelange Luxembourg Email: contact@lagrecque.lu Telephone: +352 661 999 943