Privacy policy

The controller of the personal data collected on chateau-grand-brun.com is E.A.R.L. Grand Brun, a farming estate located at 31 Avenue du Fort Médoc, 33460 Cussac-Fort-Médoc, France (SIRET 502 753 908 00016).

For any question about your data, you may write to contact@chateau-grand-brun.com or call +33 (0)5 56 58 97 87.

We only collect the data needed to run the website and handle your requests:

• Customer account: first name, last name, e-mail address and password (stored encrypted, never in clear text).
• Sign-in with Google or Facebook: when you choose this option, we receive your name and verified e-mail address from these providers, solely to create or identify your account. We do not access any other profile information, your friends list, or your posts.
• Orders: delivery address, phone number and purchase history.
• Newsletter: e-mail address and language preference, if you subscribe.
• Contact form: the information you enter into it.
• Browsing: technical audience-measurement and advertising-performance data (see “Cookies and analytics”).

Your data is used to: manage your customer account and give you access to your orders and invoices (performance of the contract); process and deliver your orders (performance of the contract); send you our news if you have consented (consent); respond to your enquiries (legitimate interest); and measure the audience and performance of our advertising (consent via the cookie banner).

It is never sold or transferred to third parties for commercial purposes.

To provide our services we rely on technical providers who only use your data on our behalf:

• Stripe — secure online payment. No bank card data passes through or is stored by us.
• Chronopost — order delivery (name and delivery address).
• Brevo (Sendinblue) — sending our transactional e-mails and news.
• Vercel — website hosting (United States / European Union).
• Neon — database hosted in the European Union.
• Google and Meta (Facebook) — social sign-in (if you use it) and audience measurement / advertising.

Account data is kept for as long as your account remains active. Order and invoicing data is kept for the legal accounting and tax retention period (up to 10 years). Marketing data (newsletter) is kept until you unsubscribe, then for a maximum of three years.

The website uses technical storage necessary for its operation (basket, sign-in session, age verification), which does not require your consent.

With your consent, collected via the banner shown on your first visit, we also use Google Analytics and the Meta pixel for audience-measurement and advertising-performance purposes. You can change your choice at any time through your browser settings.

In accordance with the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict, object to and port your data.

You may exercise these rights at any time by writing to contact@chateau-grand-brun.com. You also have the right to lodge a complaint with the French data-protection authority, the CNIL (www.cnil.fr).

You may request the deletion of your account and the associated personal data at any time, including if you signed up via Google or Facebook.

To do so, write to contact@chateau-grand-brun.com from the address linked to your account, with the subject “Delete my account”. We will delete your account and personal data within thirty (30) days, except for information we are legally required to keep (accounting records relating to your orders).

We implement appropriate technical and organisational measures to protect your data: password encryption, secure connections (HTTPS), restricted data access and hosting with reputable providers.

This policy may be updated to reflect legal or technical changes. The date of the latest update appears at the top of this page.