PRIVACY POLICY – LONGCHAMP GROUP WEBSITE

We place particular importance on protecting your personal data collected during your visit to the Longchamp.com website (the “Site”), in accordance with the applicable provisions of the General Data Protection Regulation (GDPR), Law No. 78-17 of January 6, 1978, as amended, and/or any other applicable local law and/or any local laws in force, where applicable.

This Privacy Policy (the “Policy”) is designed to provide you with clear and precise information about how we collect and use your personal data, our commitment to protecting it, and the rights you have.

Where applicable, specific provisions may supplement the Policy to take into account applicable local regulations for each country concerned.

We encourage you to review this Policy regularly to stay informed of any updates.

By browsing the Site, you fully accept the terms of this Policy and acknowledge that you understand its meaning. If you do not agree, you should cease browsing the Site.

1. Data Controller

The Longchamp Group is a corporate group consisting of Longchamp (an SAS with its registered office at 43, rue Vineuse – 75116 Paris – France), its parent company, and the latter’s subsidiaries.

Longchamp and, where applicable, any Longchamp Group company located in the country from which you interact with us, act as joint controllers in the processing of your personal data.

That is why, in this Policy, the terms “Longchamp”/“we” refer to the Longchamp Group company or companies involved in the processing of your personal data.

2. Personal Data Processed

The personal data we process falls into the following categories.

Categories of personal data	Examples
Identity Data	First and last name, title, form of address, and date of birth
Contact Information	Email address, billing and shipping addresses, phone number, preferred communication channel and language
Business Data	Transaction data: shopping cart contents, order details (order number, customer ID), shipping information, transaction number, payment and billing information (payment methods used, credit card information), transactional messages, product returns/exchanges, refunds, purchase history
Customer Service Data	Case number (generated for each interaction with customer service), online account credentials, newsletter subscription, requests submitted via the online contact form (complaints and other interactions), reviews and feedback (following an online or in-store order and a customer service request—NPS)
Preferences and Interests	Preferences and purchasing or browsing habits, and related data
Browsing Data	Online browsing data derived from your use of cookies and other similar technologies, browsing habits, interactions with online advertisements, etc.
Login Data	IP address and technical identifiers, username, login logs, browser information, general device location, etc.

3. Purposes of Processing and Legal Bases

We process your personal data in accordance with applicable regulations:

- either with your express consent;
- or when necessary for the performance of a contract entered into with you;
- or to comply with our legal obligations;
- or to pursue a legitimate interest, when the processing is necessary for our business activities.

And for the following purposes:

Purposes	Legal Basis
Customer Relations / Business Relations
Management of online orders and purchases, including tracking, delivery, and, where applicable, product exchanges or returns and related refunds	Performance of a Contract
Management of billing and payment for transactions	Performance of a Contract
Management of the secondhand item buyback service	Performance of a Contract
Transaction security and prevention of fraud and/or payment incidents	Our legitimate interest in ensuring the security of transactions
Customer Service
Creating and managing online accounts	Performance of a Contract
Managing requests submitted via the online contact form	Our legitimate interest in responding to our customers’ requests, or the performance of a contract if your request relates to a contractual or precontractual measure on our part
Managing online alerts regarding inventory availability	Our legitimate interest in responding to our customers’ requests
Managing repairs and after-sales service (SAV)	Performance of a Contract
Marketing
To send you newsletters and other marketing communications about our offers, products, news, and events	Your consent, when required. Our legitimate interest in promoting our products and services and developing our relationship with our customers, in other cases permitted by applicable regulations
To personalize our communications, content, and marketing initiatives—including our online advertising campaigns—based on your preferences, interests, and interactions with Longchamp	Your consent, when such personalization is based on data collected or combined for this purpose and requires your consent
Measuring the performance of our online advertising campaigns	Your consent
To conduct marketing analyses and compile statistics	Our legitimate interest in improving customer experience and tailoring our products and services to your preferences
To organize and manage your participation in contests and promotional campaigns	Compliance with the rules or terms and conditions for participation in the contest or promotion in question
Others
Cookie Management	View the Cookie Policy
Managing Your Requests Regarding the Exercise of Data Protection Rights	A Legal obligation

4. Categories of Recipients

Your personal data is stored within the European Union and is accessible only to Longchamp employees within the departments authorized to have access to it.

Where applicable, your personal data may be processed by Longchamp Group companies with which you interact, or by franchisees within the Longchamp network, acting as joint data controllers, by data controllers who are ours partners, and by our service providers acting as data processors.

The Longchamp Group and its network

Your personal data may be shared with authorized personnel at Longchamp Group companies or our franchisees with whom you interact—whether on a regular or ad hoc basis—when access to this data is necessary to optimize your customer experience and provide you with the same quality of service regardless of which store you visit worldwide.

Longchamp’s Partners and Service Providers

We engage service providers as needed to act as data processors and process your data on behalf of Longchamp, in accordance with our instructions and under our supervision.

These may include, for example:

technical service providers (IT service providers, hosting providers, software maintenance providers, or artificial intelligence providers, etc.);
data analysis and statistics providers;
media, communications, advertising, and marketing service providers.

We may also need to share certain personal data about you with the data controllers listed below. The processing of your personal data by these partners is subject to their own policies, which you can obtain by contacting them. You may exercise your data protection rights directly with them.

These may include, for example:

transportation and delivery service providers;
partners operating online marketplaces and social media platforms;
banks and financial institutions (including your own when you use bank-based payment methods);
providers responsible for online payment services;
organizations that detect and combat fraud, theft risks, or any other wrongful acts that may affect the services and goods provided by Longchamp.

Personal data processed for the virtual eyewear try-on feature on the Site (scanning and/or reconstruction and/or modification of your facial appearance) is collected and processed directly and entirely independently by Fittingbox in its capacity as data controller.

5. Data Transfers

Since the Longchamp Group consists of subsidiaries located abroad, which in turn use data processors in their respective countries or regions, the recipients of your personal data may be located abroad, including outside the European Economic Area, when you visit our stores or use our services from those countries or regions.

Such transfers of personal data outside the European Economic Area—particularly to a country for which the European Commission has not issued an adequacy decision pursuant to Article 45 of the GDPR—are carried out subject to appropriate safeguards, in accordance with applicable data protection laws, such as the standard contractual clauses provided for in Article 46(2) of the GDPR and/or appropriate technical and organizational measures to ensure an adequate level of protection for individuals’ privacy and fundamental rights.

6. Retention Periods

Longchamp does not retain your personal data beyond the period strictly necessary to fulfill the purposes described above, subject to mandatory legal provisions regarding data retention and archiving, in order to comply with applicable administrative, legal, and tax requirements and to maintain a record of transactions and commercial documents associated with those transactions.

Your personal data will not be retained in a form that allows you to be identified for longer than is reasonably considered necessary to achieve the purposes for which it was collected or for a period not exceeding the applicable statutory limitation periods.

7. Data Security

We implement appropriate technical and organizational measures to ensure the security and confidentiality of your personal data, in order to prevent it from being distorted, damaged, destroyed, or accessed by unauthorized persons. All security measures (software or physical) implemented are state-of-the-art, particularly with regard to the protection of our information systems.

We require our service providers to ensure the security of our data and to strictly comply with our instructions and applicable regulations regarding the protection of personal data. Our service providers are not authorized to use your personal data for any purposes other than those we have specified.

8. Your Rights

Under applicable data protection regulations, you have certain rights, including the right of access, rectification, erasure, and data portability, as well as the right to restrict processing and, where applicable, to object to the processing of your personal data.

To exercise your rights or ask any questions about the processing of your personal data, you may write to Longchamp, for the attention of the DPO:

by email: dpo@longhcamp.com;
by mail: to Longchamp, 43 Rue Vineuse – 75116 Paris (France), or to the Longchamp Group company located in the country from which you are interacting with us.

If, after contacting us, you believe that your rights have not been respected, you may at any time file a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) (3 Place de Fontenoy – TSA 80715 – F-75334 Paris Cedex 07 (France) / Tel. +33.1.53.73.22.22 / http://www.cnil.fr/), or with a competent supervisory authority, depending on the country from which you are interacting with us.

9. Country-Specific Policy

This Privacy Policy is intended to apply in all countries where Longchamp offers its products and services. Depending on the country from which you interact with Longchamp or in which you reside, specific provisions may apply to take into account local regulations regarding the protection of personal data. These specific provisions are included, where applicable, in a separate appendix to the Policy. They supplement the Policy and, in the event of a conflict, take precedence over it with respect to the processing activities and individuals to whom they apply.

Specific Annex for the United Kingdom

We place great importance on the protection of your Personal Data collected during your visit to our website longchamp.com/uk/en (“Site”), in accordance with the provisions of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, which govern the processing of personal data in the United Kingdom.

This Privacy Policy (“Policy”) is designed to help you clearly understand how we, Longchamp SAS and Longchamp (UK) Limited, collect and use your Personal Data, our commitment to protecting it, and the options available to you to manage your Personal Data and your privacy.

When acting as Joint Data Controllers (as defined below), the processing of your Personal Data is carried out exclusively within the territories where our companies are domiciled (France and the United Kingdom), strictly for the purposes detailed below.

Note – Protection of minors

Our Site is not intended for children under the age of 13. We do not knowingly collect Personal Data from children under the age of 13 without the consent of a parent or legal guardian.

If you believe that we may have collected Personal Data from a child without the required consent, please contact us immediately so that we can proceed with deletion.

Definitions – UK Specific

Personal data: any information relating to an identified or identifiable individual, as defined under the UK GDPR and the Data Protection Act 2018.
Longchamp/We/Us: Longchamp SAS (737 050 187 RCS Paris) and Longchamp (UK) Limited (3833491).
Joint Data Controllers: Longchamp SAS and Longchamp (UK) Limited, who jointly determine the purposes and means of processing Personal Data.

Data Collected and Purposes

Categories of Personal Data collected through the Site include, but are not limited to:

First name, last name, postal address and country, email address, phone number, date of birth, communication preferences, purchase history and preferences, interests.

This data is collected for the following purposes:

Creation and management of customer accounts,
Receipt of newsletters, communications, or promotional offers,
Commercial and promotional management of Longchamp stores and franchise network,
Participation in contests or sweepstakes,
Management of product availability alerts online,
Handling requests submitted via the online contact form,
Statistical and marketing analysis,
More generally, for the management of the customer relationship.

Personal Data necessary for processing and fulfilling orders may also be collected, including:

Payment information (e.g., credit card, PayPal), order numbers, purchase history, identity verification documents if necessary, etc.

Data Retention Period

Your Personal Data is retained for as long as necessary to fulfill the purposes outlined above or to comply with applicable legal, tax, or regulatory obligations in the United Kingdom.

Data Transfers

Your Personal Data may be transferred and stored outside of the United Kingdom, including in France, where the headquarters of Longchamp SAS is located, as part of the Group’s operational management.

These transfers are carried out in compliance with the UK GDPR, particularly regarding the use of Standard Contractual Clauses (SCCs) or any other transfer mechanism approved by the UK Information Commissioner’s Office (ICO) to ensure that your data is protected to a standard equivalent to that required under UK law.

Your Rights as a UK Resident

In accordance with the UK GDPR and the Data Protection Act 2018, you have the following rights:

Right of Access: Obtain a copy of the Personal Data we hold about you.
Right to Rectification: Request correction of inaccurate, outdated, or incomplete Personal Data.
Right to Erasure (“Right to be Forgotten”): Request deletion of your Personal Data where legally applicable.
Right to Restrict Processing: Request that we restrict the processing of your data in certain circumstances.
Right to Data Portability: Obtain a copy of your data in a structured, commonly used, and machine-readable format.
Right to Object: Object to the processing of your data for direct marketing or based on legitimate interests.
Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent.
Right to Lodge a Complaint: If you believe your data protection rights have been violated.

How to Exercise Your Rights and Make a Complaint

You may exercise your rights or ask any questions about your Personal Data by contacting us at:

Longchamp (UK) Limited, 28 New Bond Street, London W1S 2RJ, United Kingdom.

Or by email: dpo@longchamp.com

If you believe that we have not adequately respected your privacy rights, you can also file a complaint with the UK supervisory authority: Information Commissioner’s Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom / Website: www.ico.org.uk.