Couturier Cuisine

Privacy Policy

Effective Date: September 29, 2026

This Privacy Policy is issued by Le Couturier de la Cuisine S.A. (“we”, “us”, or “our”), a company registered in Luxembourg with our registered address at 12 Route de Roost, L-7791 Bissen, Luxembourg. You can reach our dedicated data protection team at any time via email at mfwlr@couturiercuisine.com, or by phone at +352 621 725 401. This policy applies to all personal data processing activities carried out through our e-commerce website www.couturiercuisine.com, and is designed to fully comply with the EU General Data Protection Regulation (GDPR), along with all applicable Luxembourg data protection laws and relevant global data protection standards.

We are committed to upholding the seven core data processing principles enshrined in GDPR as the foundation of all our data handling practices: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability. This policy explains clearly how we collect, use, store, share and protect your personal information when you visit, browse, or make purchases on our website, as well as the full scope of rights you hold as a data subject under applicable regulations. We encourage you to read this document carefully to understand our practices regarding your personal data.

1. Data Controller Identification

In compliance with Article 13(1)(a) of GDPR, we are making our full identity and contact information prominently displayed in this section for your clear reference:

  • Data Controller: Le Couturier de la Cuisine S.A.
  • Registered Address: 12 Route de Roost, L-7791 Bissen, Luxembourg
  • Contact Email: mfwlr@couturiercuisine.com
  • Contact Phone: +352 621 725 401
  • DPO (Data Protection Officer) Contact: You can reach our designated Data Protection Officer directly at the above contact details for any queries related to personal data processing.

2. Personal Information We Collect and Process

We strictly adhere to the data minimisation principle, only collecting personal information that is accurate, relevant, and strictly necessary to deliver the e-commerce services you request. We will never collect more information than what is required to fulfil the explicitly stated, legitimate purposes outlined in this policy. The categories of personal data we may collect include:

2.1 Information You Provide Voluntarily

  • Account registration information: When you create a user account on our website, we collect your full name, email address, delivery address, contact phone number, and chosen account password. This information is necessary for us to verify your identity, manage your account, and process your subsequent orders efficiently.
  • Order and transaction information: When you place an order for kitchenware, gourmet supplies or other products sold on our platform, we collect your order details, selected delivery address, billing information, and payment related data. We do not store full credit card details on our own systems, all payment processing is completed through certified, PCI DSS compliant third-party payment service providers.
  • Communication information: When you submit inquiries, customer support tickets, product reviews, or feedback via our website contact forms, we collect the content of your messages and the contact information you provide to respond to you in a timely manner.
  • Preference information: You may voluntarily submit information about your kitchen usage habits, dietary preferences, or product interest tags when customising your user profile, which we use to provide you with personalised product recommendations that match your stated interests.

2.2 Information Collected Automatically When You Use Our Website

  • Device and technical information: We automatically collect your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and device identifiers when you access www.couturiercuisine.com. This data is collected to optimise website performance, diagnose technical issues, and maintain the security of our platform.
  • Usage activity data: We collect anonymised browsing behaviour data including the full Uniform Resource Locators (URL) clickstream to, through and from our website, products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page. This data helps us understand how users interact with our website to improve our service structure.
  • Cookie and similar tracking technologies: We use strictly necessary cookies, functional cookies, and analytical cookies on our website, as outlined in our separate Cookie Policy. You have full control to adjust your browser settings to refuse non-necessary cookies at any time, though this may impact certain personalised functions of the website.

We explicitly state that we will never request or collect sensitive personal data including your religious belief, health status, racial origin, or political affiliation without your explicit, separate written consent, unless such collection is required by applicable law for specific, legitimate purposes related to our services.

3. Legal Bases for Processing Your Personal Data

All our personal data processing activities are supported by one of the six legitimate legal bases defined under GDPR, to ensure no processing activity is carried out without valid legal justification:

  1. ‌Performance of contract‌: The processing of your name, delivery address, payment information and order details is necessary to perform the sales contract we enter into with you when you place an order on our website, including processing payment, arranging delivery, and providing after-sales support services.
  2. ‌Legitimate interests‌: We process limited usage data and device information under the legal basis of legitimate interests, for purposes including maintaining the security and stability of our e-commerce platform, preventing fraudulent transaction activities, optimising our product offering and website user experience, and sending you strictly limited service-related updates that we believe are necessary to protect your account interests. We have conducted a full balancing test to confirm that these legitimate interests do not override your fundamental data privacy rights, and all processing under this basis is carried out with appropriate safeguards to minimise impact on your personal data.
  3. ‌Compliance with legal obligation‌: We process and retain necessary transaction and billing data to comply with applicable Luxembourg commercial, tax and accounting legal obligations that apply to us as a registered commercial entity operating in Luxembourg.
  4. ‌Explicit consent‌: For any processing activities that are not covered by the above legal bases, including sending you optional marketing newsletters, sharing your information with third party partners for co-promotion activities, or processing any non-essential personal data, we will first obtain your freely given, specific, informed and unambiguous consent. You retain the full right to withdraw your previously given consent at any time, through the contact channels provided in this policy, and we will cease all relevant processing activities immediately upon receipt of your consent withdrawal.

4. Purposes of Processing Your Personal Data

All personal data we collect is exclusively used for specific, explicit, and legitimate purposes that we have disclosed to you at the time of data collection, and no subsequent further processing will be carried out that is incompatible with these original purposes, in full compliance with the purpose limitation principle under GDPR. The specific processing purposes include:

  • To process, fulfil and deliver the products you order on our e-commerce website, including coordinating with logistics providers, sending you order status updates, and handling return and exchange requests.
  • To manage your user account, maintain your saved preferences, process any account update or modification requests you submit, and ensure you can access all functions of our member services normally.
  • To provide you with efficient customer support services, responding to your product inquiries, after-sales requests, and complaint submissions in the shortest possible time frame.
  • To send you important service notifications, including updates to our terms of service, changes to this Privacy Policy, or security alerts related to your account, which are necessary to ensure the stable and secure use of our platform.
  • Upon your explicit consent, to send you personalised marketing communications about new kitchen product launches, exclusive promotions, and limited-time offers that may be of interest to you. You can opt out of receiving such marketing messages at any time, free of charge, via the unsubscribe link included in every marketing email, or by contacting us directly.
  • To continuously improve our website functions, product offerings and overall user experience, by analysing anonymised user usage trends to identify areas for service optimisation.
  • To protect our website, users and business operations from fraud, unauthorised access, data breach, and other illegal activities, by implementing necessary data analysis for security monitoring.
  • To comply with all applicable legal, regulatory, auditing and law enforcement requirements that apply to our operations in Luxembourg and across the European Economic Area.

5. Personal Data Retention Period

We strictly follow the storage limitation principle under GDPR, ensuring that personal data we process will not be retained for longer than is strictly necessary to fulfil the original purposes for which the data was collected. We apply different appropriate retention periods for different categories of personal data:

  • For order transaction data related to completed purchases: We retain this data for a minimum period of 10 years after the completion of the relevant order, to comply with Luxembourg tax and commercial record-keeping legal requirements.
  • For your user account data: We retain your account personal information for as long as your account remains active on our website. If you submit a valid account deletion request, we will permanently delete all your personal account data within 30 working days, except for the transaction data that we are legally required to retain for extended periods as outlined above.
  • For marketing related contact information that you provided with consent: We retain this data until you choose to withdraw your consent and opt out of marketing communications, after which we will immediately remove your contact information from all our marketing distribution lists.
  • For anonymised website usage analytics data: All such data is processed in a form that can no longer identify you as an individual user, and we may retain this aggregated anonymised data for up to 5 years for long-term service trend analysis.

After the applicable retention period expires, we will securely delete or irreversibly anonymise all your personal data, in line with the data destruction specifications outlined in relevant European data protection standards.

6. Recipients of Your Personal Data

We will never sell, rent or trade your personal data to any third parties for commercial purposes without your explicit separate consent. We may only disclose and share your personal data with the following categories of recipients, where such sharing is necessary to fulfil the purposes outlined in this policy, and all such third parties will be required to sign a formal data processing agreement with us to ensure they implement adequate data protection safeguards that meet GDPR requirements:

  • Authorised service providers who perform necessary business functions on our behalf: This includes logistics and delivery partners that we cooperate with to ship your ordered products to the address you specify, certified payment processing service providers that handle all your transaction payments securely, cloud hosting service providers that host our website and store user data on servers located within the European Economic Area, and professional IT maintenance vendors that provide technical support for our platform systems. All these service providers are only granted access to the minimum personal data necessary to perform their specific tasks, and are strictly prohibited from processing your personal data for their own independent purposes.
  • Competent regulatory authorities, law enforcement agencies or judicial bodies: We may disclose your personal data when we are legally required to do so by applicable Luxembourg or EU law, court order, or valid official regulatory request.
  • In the event of a business transfer: If our company undergoes a merger, acquisition, or full or partial sale of assets, your personal data held by us may be transferred to the relevant successor entity, who will continue to process your personal data in accordance with the terms of this Privacy Policy, under proper legal supervision.

We explicitly confirm that no cross-border transfer of your personal data outside of the European Economic Area will take place, unless the destination country or territory has been confirmed by the European Commission to provide an adequate level of data protection, or we have implemented appropriate safeguards as defined under Article 46 of GDPR, including using standard data protection clauses approved by the European Commission, or relying on the certified Europrivacy mechanism that we have adopted as part of our global compliance framework.

7. Data Security Measures

In line with the integrity and confidentiality principle of GDPR, we have implemented comprehensive state-of-the-art technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, destruction, or unlawful disclosure. These measures include:

  • End-to-end AES-256 encryption for all personal data stored on our servers, and TLS 1.3 encryption for all data transmitted between your browser and our website, to prevent interception during transmission.
  • Strict role-based access control for all our internal staff: only a very limited number of authorised personnel who need to access your personal data to perform their job duties (such as customer support staff handling your order requests) are granted permission to access your personal information, and all access activities are logged and monitored continuously.
  • Regular third-party independent security audits and vulnerability scanning of our website infrastructure, conducted every quarter by certified GDPR compliant cybersecurity experts, to identify and fix any potential security risks in a timely manner.
  • Regular data backup procedures, with all user personal data backed up in encrypted form to multiple geographically separated secure servers located within the European Union, to prevent data loss due to unexpected system failures.
  • Comprehensive staff data protection training programmes, all our employees who process personal data have completed mandatory GDPR data protection training, and are bound by strict internal confidentiality obligations.

In the unlikely event that a personal data breach occurs that poses a high risk to your rights and freedoms, we will notify the relevant competent Luxembourg supervisory authority within 72 hours of becoming aware of the breach, and notify you directly without undue delay in accordance with applicable GDPR legal requirements.

8. Your Rights as a Data Subject

Under GDPR, you hold a comprehensive set of legally enforceable rights over your personal data that we process. We have established simple, free of charge processes to allow you to easily exercise all of these rights at any time:

  1. ‌Right of access‌: You have the right to request a free copy of all personal data that we hold about you, as well as full information about how we process your data, the processing purposes, categories of recipients we share data with, and the applicable retention period.
  2. ‌Right to rectification‌: If you find that any of your personal data stored on our systems is inaccurate or incomplete, you have the right to request us to correct and update that information immediately. You can also directly modify most of your personal profile information yourself in the account settings page when you are logged in to your user account.
  3. ‌Right to erasure (right to be forgotten)‌: You have the right to request us to permanently delete all your personal data, under circumstances including when the data is no longer necessary for the original purposes we collected it for, when you withdraw your consent for the relevant processing, or when the processing is otherwise non-compliant with GDPR requirements, subject to the legal data retention obligations that apply to us.
  4. ‌Right to restriction of processing‌: You have the right to request us to restrict the processing of your personal data, for situations where you contest the accuracy of the data, where the processing is unlawful and you oppose erasure, where we no longer need the data for our original processing purposes but you require the data for the establishment, exercise or defence of legal claims, or when you have objected to processing based on our legitimate interests pending the verification of our legitimate grounds.
  5. ‌Right to data portability‌: You have the right to receive all the personal data you have provided to us, in a structured, commonly used, machine-readable format, and you have the right to transmit that data to another data controller without any hindrance from our side.
  6. ‌Right to object‌: You have the right to object to our processing of your personal data that is based on our legitimate interests, at any time, on grounds relating to your particular situation. Upon your objection, we will cease the relevant processing activities unless we can demonstrate compelling legitimate grounds for the processing that override your rights, freedoms and interests, or the processing is for the establishment, exercise or defence of legal claims. You also have the absolute right to object to direct marketing activities at any time, free of charge.
  7. ‌Right to withdraw consent‌: For any processing activities that you have previously provided explicit consent to, you have the right to withdraw your consent at any time, which will not affect the lawfulness of processing that was carried out before your consent withdrawal.
  8. ‌Right to lodge a complaint‌: If you are not satisfied with our response to your data rights request, or believe that our processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with the competent Luxembourg data protection supervisory authority, the Commission nationale pour la protection des données (CNPD).

You can submit any request to exercise your data subject rights at any time by sending an email to our dedicated team at mfwlr@couturiercuisine.com. We will respond to your request without undue delay, and no later than one month from the date we receive your valid request. We will not charge any fee for processing legitimate, non-excessive rights requests, and we may only extend the response period by up to two additional months if your request is complex or we have received a large number of simultaneous requests from you, in which case we will notify you of the extension within the initial one month period.

9. Updates to This Privacy Policy

We may periodically update and revise this Privacy Policy to reflect changes to our data processing practices, new applicable legal or regulatory requirements, or updates to our e-commerce service offerings. When we make material changes to this policy, we will update the “Effective Date” at the top of this page, and we will notify you via a prominent notice on our website homepage, or via email notification to the registered email address linked to your user account, before the new revised policy comes into effect. We encourage you to review this policy on a regular basis to stay informed about how we protect your personal data.

10. Contact Information

If you have any questions, comments, or concerns about this Privacy Policy, or any aspect of our personal data processing practices, please do not hesitate to contact us at any time:
Le Couturier de la Cuisine S.A.
Address: 12 Route de Roost, L-7791 Bissen, Luxembourg
Email: mfwlr@couturiercuisine.com
Phone: +352 621 725 401