Privacy policy

Last Updated: August 28, 2026
Le Comptoir National operates the online shop and website accessible at https://lecomptoirnational.com, as well as all information, content, features, tools, products, and services offered therein (the "Services").
This Privacy Policy explains how we collect, use, store, and share your personal data when you visit or use our Services, create an account, subscribe to our private list or newsletter, make a purchase or other transaction, or communicate with us.
It is established in accordance with Regulation (EU) 2016/679 of April 27, 2016 ("GDPR") and, where applicable, the local data protection laws of our target countries (including Germany, Austria, France, Belgium, Luxembourg, Monaco, and Ireland).
In the event of any contradiction between our General Terms and Conditions and this Privacy Policy regarding the collection, use, retention, or sharing of your personal data, this Privacy Policy shall prevail.
1. DATA CONTROLLER
The controller of your personal data under data protection law is:
Le Comptoir National
C/O Bruno Le Garrec
Tavaux Straße 12
77948 Friesenheim
Germany
Phone: +49 176 31189698
E-mail: contact@lecomptoirnational.com
VAT Identification Number (USt-IdNr.): DE366110064
Le Comptoir National determines the purposes and means of the processing described in this Policy, except where Shopify or another service provider acts as an independent data controller for its own purposes.
2. PERSONAL DATA WE COLLECT
Personal data is any information relating to an identified or identifiable physical person. Anonymized data is not considered personal data.
Depending on how you interact with our Services, we may collect the following categories of data:
  • Identification and contact data: last name, first name, postal address, billing address, shipping address, telephone number, and e-mail address.
  • Account data: customer ID, encrypted password, preferences, account settings, and information required for authentication.
  • Order and transaction data: products viewed, added to cart or wishlist, ordered, returned, exchanged, or canceled, purchase history, order number, delivery method, and order status.
  • Payment data: payment method, status, confirmation, billing information, and fraud prevention data. Complete credit card details are processed directly by our payment service providers. Le Comptoir National does not receive or store your full card number or security code.
  • Communication data: content of your requests, messages, reviews, survey responses, and customer support exchanges.
  • Technical data: IP address, device type, operating system, browser, language, technical identifiers, login data, and network information.
  • Usage and behavioral data: pages viewed, website interactions, searches, clicks, mouse movements, scrolling, purchase journey, and interactions with our communications, subject to your consent where required.
  • Marketing preferences: newsletter or private list subscriptions, consents, opt-outs, and choices regarding commercial communications and cookies.
3. DATA SOURCES
We may collect your data:
  • Directly from you when you create an account, place an order, or subscribe to our list.
  • Automatically via cookies, server logs, and analytical tracking technologies, subject to your consent where required.
  • From Shopify and our specialized third-party providers (payment gateways, shipping couriers, marketing tools, customer reviews).
4. PURPOSES AND LEGAL BASES FOR PROCESSING
We use your personal data only when we have a valid legal basis.
  • Provision of Services and order management: Account administration, order fulfillment, payment processing, shipping, and returns. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Customer support: Managing inquiries and customer relationship tracking. Legal basis: contract performance or our legitimate interest (Art. 6(1)(f) GDPR).
  • Accounting, tax, and legal obligations: Retaining and processing data to comply with statutory legal requirements (such as retaining invoices for up to 10 years under German commercial and tax law). Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
  • Security and fraud prevention: Account authentication and transaction security. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
5. USE OF THIRD-PARTY APPLICATIONS AND SPECIALIZED PARTNERS
To maintain the premium experience of our boutique and communicate effectively, we use specialized service providers:
  • Hosting (Shopify): Our store is hosted by Shopify. Shopify collects and processes data related to your access to provide and secure its platform. Shopify acts primarily as our data processor.
  • Marketing and E-mail Campaigns (Klaviyo): We use Klaviyo Inc. (USA) to manage our newsletter, marketing campaigns, and abandoned cart automations. Your data is transferred to servers in the United States. Klaviyo is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection. Legal basis: your consent (Art. 6(1)(a) GDPR).
  • Behavioral Analytics (Microsoft Clarity): We use Microsoft Clarity (Microsoft Corp., USA) to anonymously analyze user behavior (clicks, scrolling) to improve our store's user-friendliness. Microsoft is certified under the Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR).
  • Product Reviews (Okendo): We use Okendo (Okendo Pty Ltd, Australia) to collect and display verified product reviews for our premium clothing. When submitting a review, your name and e-mail are processed. This transfer is secured by EU Standard Contractual Clauses. Legal basis: legitimate interest or your consent when submitting a review.
  • Fonts (Google Fonts): For aesthetic optimization, our website utilizes Google Fonts, which involves loading fonts from Google servers (USA) and may transmit your IP address. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
6. COOKIES AND SOCIAL MEDIA SOLUTIONS
In accordance with European regulations, non-essential cookies (analytics, tracking, advertising) are only placed after obtaining your consent via our compliance application, Consentmo GDPR. You can withdraw your consent or update your choices at any time through the app banner.
  • Social Media (Two-Click Solution): To protect our premium customers' privacy while browsing, buttons or feeds related to Instagram and Facebook use a safe two-click activation method. No tracking scripts from these networks load automatically without your explicit interaction.
7. RECIPIENTS AND PAYMENT GATEWAYS
Your data may be shared with logistics (couriers) and financial partners necessary to complete your order. Payments are fully encrypted (SSL/TLS) and processed by the following gateways: Visa, Mastercard, American Express, Apple Pay, Google Pay, Klarna, and Bancontact (specifically configured for our customers in Belgium). We do not sell your personal data.
8. RETENTION PERIODS
Account data is kept as long as your account is active. Prospect data (marketing) is kept for a maximum of 3 years after the last contact. Order data is archived according to the legal, fiscal, and commercial obligations of our German establishment (up to 10 years).
9. YOUR RIGHTS
Subject to statutory conditions, you have the right to access, rectify, erase, limit processing, object to processing, and the right to data portability.
  • Post-mortem directives (France): If French law applies to you, you have the right to define directives regarding the fate of your personal data after your death.
  • Monaco Residents: Your rights of access, opposition, and modification are fully respected in compliance with the principles of Monégasque Law No. 1.165.
To exercise your rights, please contact us by e-mail at: contact@lecomptoirnational.com.
10. COMPLAINTS TO A SUPERVISORY AUTHORITY
If you believe that the processing of your data is not compliant, you have the right to lodge a complaint with a competent data protection authority:
  • In Germany (Our main lead authority): Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg – www.baden-wuerttemberg.datenschutz.de
  • In Austria: Österreichische Datenschutzbehörde (DSB) – www.dsb.gv.at
  • In France: CNIL – www.cnil.fr
  • In Belgium: APD – www.autoriteprotectiondonnees.be
  • In Luxembourg: CNPD – www.cnpd.lu
  • In Monaco: CCIN – www.ccin.mc
  • In Ireland: DPC – www.dataprotection.ie