Privacy Policy
La Chambre takes the protection of your privacy seriously. This policy explains what personal data we collect, why, how long we keep it, who we share it with and what rights you can exercise.
1. Data controller
La Chambre, a simplified joint-stock company (SAS) with share capital of €100,000, registered with the Paris Trade and Companies Register under number 531 802 981, whose registered office is at 36 rue des Jeûneurs, 75002 Paris, France.
For any question relating to personal data: contact@la-chambre.com, or by post to the address above, marked for the attention of the Data Protection contact.
2. Data we collect
- Identity and contact details: title, first and last name, e-mail address, telephone number, delivery and billing addresses.
- Account data: login credentials, password (stored in encrypted form), preferences, wishlist.
- Order data: basket contents, purchase history, invoices, delivery method, correspondence with customer service.
- Payment data: card details are collected and processed directly by our payment providers. La Chambre never has access to your full card number and does not store it.
- Browsing data: IP address, browser and device type, pages viewed, connection date and time, cookie identifiers. See our Cookie Policy.
- Contact data: the content of messages sent through the contact form or by e-mail, and any attachments.
Mandatory fields are marked with an asterisk in our forms. Without them we cannot process your request or your order.
3. Purposes and legal bases
| Purpose | Legal basis | Retention period |
|---|---|---|
| Order management, delivery, after-sales service, returns and refunds | Performance of the contract | Duration of the commercial relationship, then archived for 5 years |
| Invoicing and accounting | Legal obligation | 10 years from the end of the financial year (art. L123-22 French Commercial Code) |
| Customer account management | Performance of the contract | Until the account is deleted, or 3 years after last contact |
| Responding to enquiries sent through the contact form | Legitimate interest (responding to customers and prospects) | 3 years from last contact |
| Newsletter and marketing communications | Consent | Until consent is withdrawn, or 3 years after last contact |
| Box subscription management | Performance of the contract | Duration of the subscription, then archived for 5 years |
| Audience measurement and statistics | Consent (non-essential cookies) | Cookies: max. 13 months — data: max. 25 months |
| Targeted advertising and remarketing | Consent | Max. 13 months |
| Site security, fraud and abuse prevention | Legitimate interest | 12 months |
| Handling requests to exercise data subject rights | Legal obligation | 3 years (1 year for any identity documents provided) |
4. Recipients and processors
Your data is accessible to authorised La Chambre staff (customer service, logistics, accounting, marketing) and, strictly as necessary, to the following providers, who act as processors and are bound by contract:
| Provider | Role | Processing location |
|---|---|---|
| OVH SAS | Website and database hosting | France / European Union |
| La Poste — Colissimo | Transport and delivery of orders | France / European Union |
| Stripe | Card payment processing | European Union / United States |
| PayPal | PayPal payment processing | European Union |
| Brevo (formerly Sendinblue) | Transactional e-mails and newsletter | France / European Union |
| Cookiebot (Usercentrics) | Collecting and storing proof of cookie consent | European Union |
| Google (reCAPTCHA) | Protecting forms against automated submissions | United States |
| Google (Tag Manager, Analytics) | Site tag management, audience measurement and advertising campaign tracking (only with your consent) | United States |
| Nettom (Matomo) | Website analytics on a dedicated Matomo instance (only with your consent) | France / European Union |
| Meta Platforms | Social media measurement and advertising (only with your consent) | United States |
| Elfsight | Display of embedded third-party content | Outside the European Union |
Your data may also be disclosed to administrative or judicial authorities where the law requires it.
We do not sell or rent your personal data to third parties.
5. Transfers outside the European Union
Some of the providers listed above are established outside the European Union, in particular in the United States. Such transfers are governed by the safeguards set out in Chapter V of the GDPR: an adequacy decision of the European Commission (EU–US Data Privacy Framework) or standard contractual clauses, supplemented where appropriate by additional technical measures. You may obtain a copy of these safeguards by writing to contact@la-chambre.com.
6. Security
The site is fully encrypted (HTTPS/TLS). Passwords are stored as non-reversible hashes. Access to data is restricted to authorised personnel through individual authentication. Our payment providers are PCI-DSS compliant and implement strong customer authentication (3-D Secure).
7. Your rights
Under Regulation (EU) 2016/679 (GDPR) and French Law no. 78-17 of 6 January 1978 as amended, you have the following rights:
- Right of access: to confirm whether your data is processed and to receive a copy.
- Right to rectification: to have inaccurate or incomplete data corrected.
- Right to erasure: to request deletion of your data, subject to our legal retention obligations.
- Right to restriction of processing.
- Right to object, in particular to direct marketing, at any time and without giving reasons.
- Right to data portability: to receive your data in a structured, machine-readable format.
- Right to withdraw your consent at any time, without affecting the lawfulness of processing already carried out.
- Right to give instructions regarding the fate of your data after your death.
To exercise these rights, write to contact@la-chambre.com or by post to La Chambre, 36 rue des Jeûneurs, 75002 Paris, France. We reply within one month, extendable by two months for complex requests. If serious doubt remains as to your identity, we may ask for proof of identity, which will be destroyed as soon as we have replied.
You can unsubscribe from our marketing e-mails at any time using the unsubscribe link in every message.
8. Complaints
If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.
9. Cookies
The use of cookies and trackers on this site is described in our Cookie Policy, where you can also change your choices at any time.
10. Changes to this policy
We may update this policy to reflect legal, technical or organisational changes. The applicable version is the one published on this page.
Last updated: 28 August 2026.