Privacy Policy

Last updated: 28 May 2026

This Privacy Policy explains how Les Cafés Henri collects, uses, stores and protects the personal data of users of www.cafeshenri.fr, as well as its customers, prospects and business contacts.

Cafés Henri is committed to processing personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the amended French Data Protection Act (Loi Informatique et Libertés).

1. Data controller

The data controller is:

Les Cafés Henri
French simplified joint-stock company (SAS) with share capital of €300,000
Parc du Ried – 3 rue Lavoisier
67722 Hoerdt
Strasbourg Trade and Companies Register: 318 474 822
EU VAT No.: FR 86 318 474 822

For any questions regarding the protection of your personal data, you can contact us at:

Email: accueil@cafeshenri.fr
Postal address: Les Cafés Henri – Parc du Ried – 3 rue Lavoisier – 67722 Hoerdt – France

2. Personal data we collect

Depending on the services you use, Cafés Henri may collect the following personal data:

identity details: title, first name and surname;
contact details: postal address, email address and telephone number;
customer account information: login details, order history and preferences;
order information: products ordered, amounts, invoices, delivery and billing addresses;
payment information: payment status, transaction ID and payment method used;
information required to handle business enquiries: company name, job title and EU VAT number where applicable;
communications with customer service;
communication preferences;
newsletter subscription details;
browsing and audience measurement data;
cookie consent data;
information submitted through forms on the website;
recruitment-related information, where a recruitment or application form is available on the website.

Cafés Henri only requests personal data that is necessary for the purposes for which it is collected.

3. Purposes and legal bases for processing

Purpose	Legal basis
Creating and managing a customer account	Performance of a contract or pre-contractual measures
Processing orders	Performance of a contract
Processing payments	Performance of a contract
Delivering orders	Performance of a contract
Issuing and retaining invoices	Legal obligation
Customer service, complaints and after-sales support	Performance of a contract or legitimate interests
Returns, refunds and warranties	Performance of a contract or legal obligation
Handling enquiries submitted through the contact form	Pre-contractual measures or legitimate interests
Handling business enquiries	Pre-contractual measures or legitimate interests
Sending newsletters to prospects	Consent
Sending marketing communications to existing customers about similar products or services	Legitimate interests, subject to the right to object
Managing customer reviews, where this feature is used	Consent or legitimate interests, depending on the system used
Audience measurement and website improvement	Consent, or legitimate interests where the tool used is exempt from consent requirements
Website security, fraud prevention and prevention of misuse	Legitimate interests
Compliance with legal, tax and accounting obligations	Legal obligation
Processing job applications, where applicable	Pre-contractual measures

4. Required information

Certain information is required in order to process an order, deliver products, issue an invoice, respond to an enquiry or comply with a legal obligation.

Where information is mandatory, this will be indicated at the time it is collected. If this information is not provided, Cafés Henri may be unable to process the relevant request or order.

5. Recipients of personal data

Personal data is accessible to authorised Cafés Henri departments.

Where necessary, it may also be shared with service providers acting on behalf of Cafés Henri, including:

e-commerce service providers;
hosting providers;
payment service providers;
carriers and delivery providers;
email marketing or newsletter providers;
cookie consent management providers;
audience measurement providers;
customer review providers, where applicable;
IT service providers;
advisers, accountants, statutory auditors, insurers or public authorities where required.

These service providers only have access to the personal data necessary to perform their respective services.

Cafés Henri does not sell its customers’ personal data. Personal data is only shared with commercial partners for marketing purposes where the individual concerned has given consent when such consent is required.

6. Payments

Payments made through the website are processed by secure payment service providers.

Cafés Henri does not retain full payment card details. Only information required as evidence of the transaction, for order tracking, fraud prevention or the processing of refunds may be retained.

7. Transfers outside the European Union

Some technical service providers may process personal data outside the European Union.

Where such transfers take place, Cafés Henri ensures that appropriate safeguards are in place in accordance with applicable legislation, including Standard Contractual Clauses or any other mechanism recognised under applicable data protection law.

8. Data retention periods

Personal data is retained for a limited period determined by the purpose for which it is processed and by applicable legal requirements.

Data	Indicative retention period
Active customer account data	For as long as the account remains in use
Inactive customer account	Up to 3 years after the last contact or order, unless otherwise required by law
Order data	For the time required to process the order, followed by archiving in accordance with legal requirements
Invoices and accounting records	For the statutory accounting retention period
Payment data	Not retained by Cafés Henri, except information strictly necessary as evidence of the transaction
Contact form enquiries	For the time required to handle the enquiry, followed by limited archiving
Prospect data	Until consent is withdrawn or for 3 years after the prospect’s last interaction
Newsletter data	Until unsubscribing or withdrawal of consent
Warranty, complaint or dispute data	For the time required to handle the matter, followed by the applicable statutory limitation period
Job application data, where applicable	For the time required to process the application, followed by a limited period unless the applicant agrees otherwise
Cookie data	As set out in the Cookie Policy
Proof of consent	For as long as necessary to demonstrate compliance with applicable obligations

9. Direct marketing and newsletters

Newsletter subscriptions are based on the individual’s consent where consent is required.

Every marketing email sent by Cafés Henri includes an unsubscribe link allowing recipients to opt out of future communications, as well as a separate link allowing them to disable the tracking pixel used to measure email opens.

Customers who have already purchased a product from Cafés Henri may receive information about similar products or services, provided they are able to object to such communications at any time.

10. Cookies and similar technologies

Cookies and other tracking technologies may be used when you browse the website.

For more information about the cookies we use, their purposes, retention periods and how to manage your consent, please refer to our Cookie Policy.

11. Your rights

Under applicable data protection legislation, you have the following rights:

the right to access your personal data;
the right to rectification;
the right to erasure;
the right to restriction of processing;
the right to object to processing;
the right to data portability, where applicable;
the right to withdraw your consent at any time where processing is based on consent;
the right to provide instructions regarding the handling of your personal data after your death, in accordance with French law.

You can exercise your rights by contacting:

Email: accueil@cafeshenri.fr
Postal address: Les Cafés Henri – Parc du Ried – 3 rue Lavoisier – 67722 Hoerdt – France

Cafés Henri may ask you to provide proof of identity where this is necessary to process your request.

12. Complaints to the CNIL

If, after contacting us, you believe that your data protection rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority.

13. Data security

Cafés Henri implements appropriate technical and organisational measures to protect personal data against loss, unauthorised access, disclosure, alteration or destruction.

These measures are appropriate to the nature of the data processed and the risks associated with the processing activities concerned.

14. Minors

The website is primarily intended for adults or minors acting with the consent of their legal representatives.

Where a product may only legally be purchased by adults, particularly alcoholic beverages, customers must confirm that they meet the applicable legal age requirements.

15. Changes to this Privacy Policy

Cafés Henri may amend this Privacy Policy to reflect legal, technical or organisational changes.

The version applicable is the version published on the website at the time of consultation.