Updated as of 24 August 2026
PERSONAL DATA PROTECTION
In accordance with Law No. 78-17 of 6 January 1978 and European Regulation EU
2016/679 of 27 April 2016 on data protection (hereinafter, the "GDPR Regulation"),
Peter and May (hereinafter "Peter and May") informs any person accessing the
services offered on the Site of its commitment to respecting the confidentiality,
integrity, and security of the data that the User will be led to communicate to it,
particularly via the website: peterandmay.com (hereinafter, the "Site").
Any personal data identifying the Site's User (hereinafter the "User") directly or
indirectly are considered confidential data and are processed as such, subject to the
evolution of the legal framework on the qualification of personal data (hereinafter,
"Personal Data").
WHO PROCESSES YOUR PERSONAL DATA?
Personal Data collected as part of the Site's activities are processed by Peter and
May whose registered office is located:
8 boulevard de la Madeleine, 75009 Paris, France
RCS PARIS 790 197 487
Email: contact@peterandmay.com
We do not transfer, sell, or trade your data for marketing purposes to parties outside
of Peter and May.
WHAT DATA IS COLLECTED ON OUR SITE?
During your browsing and order placement on the Site, the User agrees that Peter
and May may collect the following categories of data:
- Personal identification data: names, first name, date of birth, postal address,
email address, telephone number;
- Connection and browsing data: IP address, order history, products viewed,
delivery incidents, complaints.
The mandatory or optional nature of the data is indicated during collection by an
asterisk. Some data is collected automatically due to your actions on the Site.
HOW IS PERSONAL DATA COLLECTED?
The User agrees that Peter and May may collect their Personal Data during the
following activities and interactions:
- Browsing the Site;
- Filling in Personal Data on the forms provided;
- Creating a customer account;
- Subscribing to alerts or newsletters;
- Participating in contests.
WHAT ARE THE GROUNDS FOR PERSONAL DATA PROCESSING?
Users' Personal Data are collected on the basis of the following legal grounds:
- The User's specific, free, and informed consent (particularly for creating a
customer account, subscribing to the newsletter, participating in contests,
filling in various forms);
- Compliance with a legal obligation incumbent upon Peter and May;
- Performance of a contract concluded between Peter and May and the User
(particularly for the execution of Peter and May's general terms and conditions
of sale);
- Peter and May's legitimate interest (particularly for ensuring transaction
security).
WHAT ARE THE PURPOSES OF PROCESSING YOUR PERSONAL DATA?
Mandatory data are data strictly necessary for processing or for the User's requests.
In the absence of this data, the User is informed that certain services offered by Peter
and May cannot be provided. The mandatory nature of the requested information is
indicated to the User during collection.
Optional data are data collected by Peter and May to better understand the User and
improve their browsing experience on the Site.
Personal Data are collected and processed to meet the following purposes:
- creation and access to customer account;
- contact and support;
- customer relationship management;
- commercial prospecting, newsletter subscription and sending;
- service improvement;
- stock alerts following your subscription to these alerts on the Site;
- management of order-related operations (confirmation, tracking, delivery, etc.).
HOW TO WITHDRAW CONSENT?
You have the right to withdraw your consent to the processing of your Personal data
at any time. Withdrawal of consent does not affect the lawfulness of processing
already carried out, based on consent given before this withdrawal. This right can be
exercised electronically at the following address: contact@peterandmay.com.
HOW LONG ARE YOUR PERSONAL DATA STORED?
Personal Data are stored by Peter and May for the duration they are necessary to
meet the aforementioned purposes and in particular:
- Data relating to case management (order tracking, invoicing) are deleted or
archived after a period of five (5) years following the end of the relationship
with Peter and May;
- Data relating to customer and prospect relationship management (loyalty and
prospecting operations, relationship tracking, newsletter sending, etc.) are
deleted or archived after a period of three (3) years following the end of the
relationship with Peter and May.
This Personal Data may also be retained for a period of ten (10) years thereafter in
the archive database, under restricted access, in order to (i) comply with Peter and
May's legal and regulatory obligations, and/or (ii) enable it to assert a legal right,
before being permanently deleted.
CAN MY PERSONAL DATA BE SHARED WITH THIRD PARTIES?
Personal Data may be transmitted to Peter and May's employees or collaborators
who, operating under Peter and May's direct authority, are duly authorised to process
them.
In the course of its activities, Peter and May may use subcontractors who process the
User's Personal Data on its behalf and under its instructions.
Peter and May ensures that subcontractors, employees or collaborators guarantee
the same level of protection as itself and ensures that these subcontractors,
employees or collaborators process Personal Data solely for the purposes authorised
by the stated objectives, with the required discretion and security.
Personal Data directly provided by you by filling in online forms may be shared and
processed by external service providers acting on behalf and for the account of Peter
and May.
The data are not likely to be transferred to a country outside the European Union.
In the context of cookie collection, recipients of Personal Data may be located
abroad, including outside the European Economic Area (EEA) in countries where the
legislation on personal data protection differs from that applicable within the EEA.
Any transfer of data outside the EEA is carried out with appropriate guarantees,
including contractual ones, in accordance with the applicable personal data
protection regulations.
Finally, Peter and May may transfer or allow access to the User's Personal Data to
administrative or judicial authorities in order to satisfy the requirements of any law,
regulation, judicial process, or enforceable governmental request.
HOW IS PERSONAL DATA PROTECTED BY PETER AND MAY?
Peter and May undertakes to process Personal Data in a:
- Lawful;
- Fair;
- Transparent;
- Proportionate;
- Relevant;
- Strictly within the scope of the purposes pursued and announced;
- For the duration necessary for the implemented processing;
- Securely.
Peter and May implements and updates appropriate technical and organisational
measures to ensure the security and confidentiality of Personal Data by preventing
them from being distorted, damaged, or communicated to unauthorised third parties.
You may be led to leave our website by clicking on certain links present on our Site.
We assume no responsibility for the privacy practices of these other sites and
recommend that you read their privacy policies carefully.
In general, the third-party providers we use will only collect, use and disclose your
information to the extent necessary to allow them to perform the services they
provide to us.
However, certain third-party service providers, such as payment gateways and other
payment transaction processors, have their own privacy policies regarding the
information we are required to provide to them for your purchase transactions.
With respect to these providers, we recommend that you read their privacy policies
carefully so that you can understand how they will process your personal information.
DOES PETER AND MAY USE COOKIES?
When consulting the Site, information relating to User navigation is likely to be
recorded in "Cookies" files installed on their device (computer, tablet, smartphone).
These cookies are issued in order to facilitate navigation on the site and allow the
recognition of Users' browsers when they are connected to the Site.
These cookies are issued in order to:
- Establish attendance statistics (number of visits, pages viewed, abandonment in the
order process, etc.)
- Adapt the presentation of the Site to the display preferences of terminals,
- Memorise information entered in forms, manage and secure access to reserved and
personal areas such as the customer account and manage the Order basket.
The User can make settings so that cookies are deactivated and thus prevent
cookies from being installed, without their express consent, on their computer.
WHAT ARE YOUR RIGHTS?
The User benefits, upon simple written request, in accordance with the GDPR
Regulation, from the following rights:
- right of access to Personal data: in accordance with Article 15 of the GDPR
Regulation, you have the right to obtain from Peter and May a copy of the data
concerning you that it processes;
- right to rectification of your Personal Data: in accordance with Article 16 of the
GDPR Regulation, incorrect or inaccurate data can be corrected or deleted at
any time. It is up to you to make the necessary modifications yourself from
your User account in the first instance, then to ask Peter and May to proceed
with these modifications if they cannot be made autonomously;
- right to obtain the erasure of your Personal Data in the circumstances listed in
Article 17 of the GDPR Regulation;
- right to obtain the restriction of the processing of your Personal Data in the
circumstances listed in Article 18 of the GDPR Regulation;
- right to data portability: in accordance with Article 20 of the GDPR Regulation,
you have the right to receive from Peter and May the Personal data
concerning you in a structured, commonly used and machine-readable format;
- right to object to data processing: you have the right at any time to object to
the processing of your Personal Data for commercial purposes or, for all other
processing, when there are compelling and legitimate reasons relating to your
particular situation. In this case, Peter and May will no longer process the
Personal Data, unless there are compelling legitimate grounds for processing
that override your interests and rights, or for the establishment, exercise or
defence of legal claims.
You have the right to lodge a complaint regarding the processing of your Personal
data with the Commission Nationale de l’Informatique et des Libertés, the competent
authority for the French territory.
You can also, at any time, exercise the rights mentioned above and/or make a
request relating to your Personal data by sending an electronic message to Peter
and May at the following address: contact@peterandmay.com
WHAT REMEDIES ARE AVAILABLE IN THE EVENT OF A PERSONAL DATA
BREACH?
In the event of a breach of its Personal Data likely to result in a risk to its rights and
freedoms, Peter and May shall notify the CNIL of the breach as soon as possible,
and, if possible, no later than seventy-two (72) hours after becoming aware of it.
Peter and May will also inform the User, as soon as possible, in accordance with the
provisions of Article 34 of the GDPR.
Without prejudice to any other administrative or judicial remedy, the User who
considers that the processing of their Personal Data constitutes a violation of the
provisions of current legislation may lodge a complaint with a competent supervisory
authority such as the Commission Nationale de l’Informatique et des Libertés (CNIL).
UPDATES TO OUR PRIVACY POLICY
Peter and May reserves the right to modify this Personal Data processing policy in
order to comply with the obligations provided for by privacy protection legislation or to
adapt it to its practices. Therefore, the User is invited to consult it regularly in order to
be aware of any modifications and adaptations.