PRIVACY POLICY

Last updated: 31 August 2026

1. Purpose of this Policy

JEAN MARC PHILIPPE places particular importance on protecting personal data and respecting privacy.

This Privacy Policy explains how JEAN MARC PHILIPPE collects, uses, stores and protects the personal data of users of the professional website https://pro.jeanmarcphilippe.com.

The Website is intended for business customers and prospects wishing to browse JEAN MARC PHILIPPE collections and place wholesale orders.

2. Data controller

The controller responsible for processing personal data is:

JEAN MARC PHILIPPE

French simplified joint-stock company with share capital of EUR 192,000

135 boulevard de Sébastopol

75002 Paris, France

Paris Trade and Companies Register: 325 372 878

SIRET: 325 372 878 00026

EU VAT number: FR80 325 372 878

Data protection contact: data@jeanmarcphilippe.com

Business contact:

Ghislain

Email: ghislain@jeanmarcphilippe.com

Telephone: +33 6 95 69 51 15

3. Personal data collected

When users access the Website or enter into a business relationship with us, JEAN MARC PHILIPPE may collect the following categories of personal data:

Identification data:

- first and last name;

- position within the company;

- business account login details;

- copies of supporting documents when verification is necessary.

Professional contact details:

- email address;

- telephone number;

- postal address;

- billing and delivery addresses.

Company information:

- company name;

- trading name;

- legal form;

- SIREN or SIRET number;

- equivalent registration number for foreign companies;

- EU VAT number;

- business sector;

- country of establishment.

Business information:

- enquiries and requests for quotations;

- orders and purchase history;

- products viewed or selected;

- quantities ordered;

- business preferences;

- communications with the sales or customer service teams;

- complaints and returns.

Payment information:

- payment status;

- payment method;

- transaction references;

- information required for invoicing.

Complete bank or payment card details may be collected directly by the payment service provider and are not necessarily stored by JEAN MARC PHILIPPE.

Technical and browsing data:

- IP address;

- connection logs;

- device type;

- operating system;

- browser type and version;

- pages viewed;

- dates and times of visits;

- information relating to cookies and other tracking technologies.

4. Sources of personal data

Personal data may be collected:

- directly from users when they create a business account;

- when a user submits an enquiry, requests a quotation or applies to open an account;

- when an order is placed and processed;

- during communications with our sales or customer service teams;

- automatically when users browse the Website;

- from the company for which the user works;

- from professional sources or public registers when necessary to verify the existence or professional status of a customer.

5. Purposes and legal bases

JEAN MARC PHILIPPE processes personal data for the following purposes:

Creating and managing business accounts

Personal data is used to create accounts, authenticate users, verify their professional status and provide access to the Website’s features.

Legal basis: performance of pre-contractual measures or a contract and the legitimate interest of JEAN MARC PHILIPPE in restricting its professional portal to authorised business users.

Managing quotations and orders

Personal data is used to record, confirm, prepare, dispatch and track orders and to manage returns, complaints and after-sales services.

Legal basis: performance of a contract.

Invoicing, accounting and legal obligations

Personal data is used to issue invoices, monitor payments, maintain accounting records and comply with tax, customs and regulatory obligations.

Legal basis: compliance with legal obligations.

Managing business relationships

Personal data is used to respond to enquiries, assist business customers and manage commercial relationships.

Legal basis: performance of a contract and the legitimate interest of JEAN MARC PHILIPPE in managing its relationships with customers and prospects.

Business marketing

JEAN MARC PHILIPPE may send business contacts information about its collections, products, offers and events where permitted by law.

Legal basis: legitimate interest or consent, depending on the nature of the communication and the applicable regulations.

Every marketing email contains a simple way to unsubscribe.

Security and fraud prevention

Personal data may be used to protect the Website, business accounts and transactions, detect suspicious activity and prevent unpaid invoices, fraud or misuse.

Legal basis: the legitimate interest of JEAN MARC PHILIPPE in securing its business activities, subject to the rights and freedoms of the persons concerned.

Audience measurement and Website improvement

Browsing data may be used to measure traffic, understand how the Website is used and improve its features.

Legal basis: consent where required. Certain audience measurement technologies may be exempt from consent if they meet the conditions established by applicable regulations.

6. Mandatory information

Fields identified as mandatory are necessary to process requests, verify professional status, create accounts or fulfil orders.

If this information is not provided, JEAN MARC PHILIPPE may be unable to create the business account, respond to the request or process the order.

All other information is optional.

7. Recipients of personal data

Within the limits of their responsibilities, personal data may be accessible to:

- JEAN MARC PHILIPPE sales teams;

- customer service teams;

- administrative, accounting and logistics teams;

- persons responsible for managing and securing the Website;

- IT and hosting service providers;

- payment service providers;

- carriers and logistics providers;

- providers responsible for sending business communications;

- professional advisers, including accountants, legal advisers and insurers;

- administrative, tax, customs or judicial authorities where required by law.

These recipients may access only the data necessary to perform their duties.

JEAN MARC PHILIPPE does not sell or rent personal data to third parties.

8. Processors

JEAN MARC PHILIPPE may use service providers acting as processors to provide Website hosting, payment, delivery, IT maintenance, customer relationship management, email distribution or traffic analysis services.

These service providers are required to process personal data only on the instructions of JEAN MARC PHILIPPE, maintain its confidentiality and implement appropriate security measures.

9. Transfers outside the European Economic Area

Certain service providers may process personal data outside the European Economic Area.

Where such transfers occur, JEAN MARC PHILIPPE ensures that they rely on a mechanism recognised under applicable data protection law, including:

- an adequacy decision adopted by the European Commission;

- the standard contractual clauses adopted by the European Commission;

- any other appropriate safeguard permitted under the GDPR.

Further information about the applicable safeguards may be requested by contacting data@jeanmarcphilippe.com.

10. Retention periods

Personal data is retained only for as long as necessary for the purposes for which it was collected, subject to statutory record-keeping obligations.

As a general guide:

- data relating to active business accounts is retained for the duration of the business relationship;

- prospect data is retained for three years from the last contact initiated by the prospect;

- customer data used for marketing purposes is retained for three years from the end of the business relationship or the last relevant contact;

- contracts, orders and business correspondence are retained for the duration of the business relationship and subsequently for the applicable statutory limitation period;

- invoices and accounting records are retained for ten years from the end of the relevant financial year;

- data relating to requests to exercise rights is retained for the time needed to process the request and subsequently for the period required to demonstrate that it was handled correctly;

- technical logs and security data are retained for a period proportionate to security requirements;

- cookie preferences are retained for the period specified in the Cookie Policy.

Data subject to a legal retention requirement is archived with restricted access.

11. Data security

JEAN MARC PHILIPPE implements appropriate technical and organisational measures to protect personal data against:

- accidental or unlawful destruction;

- loss;

- alteration;

- unauthorised disclosure;

- fraudulent or unauthorised access.

These measures may include encrypted communications, access controls, account security, data backups, access logging and system updates.

As no information system can guarantee absolute security, JEAN MARC PHILIPPE regularly adapts its measures according to identified risks and evolving security practices.

12. Cookies and other tracking technologies

The Website uses cookies and other tracking technologies to support its operation, secure accounts, remember shopping baskets, measure its audience and, subject to the user’s consent, personalise certain content or measure the effectiveness of business communications.

Strictly necessary tracking technologies may be used without consent when they are essential to provide a service requested by the user.

Non-essential tracking technologies are used only after obtaining the user’s consent where consent is required.

During their first visit, users may:

- accept non-essential tracking technologies;

- refuse them;

- customise their choices by purpose.

Refusing tracking technologies must be as easy as accepting them.

Users can change their preferences or withdraw their consent at any time through the “Manage my cookies” link available on the Website.

Browser settings alone do not replace the consent management tool available on the Website.

Detailed information about tracking technologies, their providers, purposes and retention periods is available in the Cookie Policy.

13. Data subject rights

In accordance with applicable data protection law, data subjects may have the following rights:

- the right to access their personal data;

- the right to request the correction of inaccurate or incomplete data;

- the right to request the deletion of their data where the legal conditions are met;

- the right to request the restriction of processing;

- the right to object to certain processing based on legitimate interests;

- the right to object to direct marketing at any time;

- the right to data portability where applicable;

- the right to withdraw consent at any time where processing is based on consent;

- the right to provide instructions concerning the use of their personal data after their death, under the conditions established by French law.

Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.

14. Exercising your rights

Data protection rights may be exercised:

By email:

data@jeanmarcphilippe.com

By post:

JEAN MARC PHILIPPE

Data Protection

135 boulevard de Sébastopol

75002 Paris

France

The request must specify the right the person wishes to exercise and contain enough information to identify the requester and provide a response.

Proof of identity may be requested only where there is reasonable doubt concerning the requester’s identity.

JEAN MARC PHILIPPE will respond within the time limits established by applicable law.

15. Complaints to the CNIL

If a person believes that their data protection rights have not been respected, they may lodge a complaint with the French Data Protection Authority:

Commission nationale de l’informatique et des libertés — CNIL

3 place de Fontenoy

TSA 80715

75334 Paris Cedex 07

France

Website: https://www.cnil.fr

16. Business communications

JEAN MARC PHILIPPE may send business contacts communications about its collections, products, commercial terms, new releases or events.

Recipients may object to these communications at any time:

- by using the unsubscribe link contained in each message;

- by writing to data@jeanmarcphilippe.com;

- by contacting their sales representative.

Objecting to marketing communications does not prevent the delivery of messages required to manage accounts, orders or contractual relationships.

17. Third-party links

The Website may contain links to websites operated by third parties.

JEAN MARC PHILIPPE does not control the personal data processing activities performed by these third parties. Users should review the privacy policies of the relevant websites before providing them with personal information.

18. Changes to this Privacy Policy

JEAN MARC PHILIPPE may amend this Privacy Policy to reflect changes to the Website, its processing activities or applicable regulations.

The date of the latest update is displayed at the beginning of this document.

In the event of a significant change, users may be notified through a notice published on the Website, a message displayed in their accounts or an email.

19. Contact

For any questions concerning this Privacy Policy or the processing of personal data, please contact:

JEAN MARC PHILIPPE

Data protection email:

data@jeanmarcphilippe.com

Business contact:

Ghislain

ghislain@jeanmarcphilippe.com

+33 6 95 69 51 15

Postal address:

135 boulevard de Sébastopol

75002 Paris

France