Privacy Policy

Last updated: July 23, 2026

This Privacy Policy aims to inform users of the Le Labyrinthe En-Champ-Thé (accessible at enchampthe.com and enchampthe.com) enchampthe.com et enchampthe.comabout how their personal data is collected, processed, and protected, in accordance with the General Data Protection Regulation (GDPR No. 2016/679) and the amended French Data Protection Act ("Loi Informatique et Libertés") of January 6, 1978.

1. Data Controller

The data controller responsible for personal data collected on the site is:

• Publisher / Company: Sole Proprietorship Johny Guichard (Le Labyrinthe En-Champ-Thé)
• Legal Representative: Johny Guichard
• Registered Office Address: 18 Rue Emile Mussard, Grand-Coude, 97480 Saint-Joseph, La Réunion (DROM)
• SIRET: 483 036 513 00024 (Chamber of Agriculture Register)
• DPO / Personal Data Contact: communication@enchampthe.com
• Phone : 06 92 60 18 88

2. Data Collected, Purposes, and Legal Bases

We only collect personal data strictly necessary to provide the services offered on our website.

A. Purchases on the Online Shop (WooCommerce)

• Data collected: Last name, first name, shipping and billing postal addresses, email address, phone number, order history.
• Purposes: Processing, preparing, and shipping your orders, billing management, and customer relationship management.
• Legal basis: Performance of a sales contract (Art. 6.1.b GDPR).

B. Online Payment (Up2pay)

• Data collected: Banking details (card number, expiration date, security code).
• Purposes: Executing the secure payment transaction.
• Important : Your banking details are processed directly by our payment provider Up2pay (Crédit Agricole). They are never transmitted through or stored on our servers.
• Legal basis: Performance of a sales contract (Art. 6.1.b GDPR).

C. Réservation de visites et billetterie (Addock / EasyLoisir)

• Data collected: Last name, first name, email address, phone number, number of participants, date and time of visit.
• Purposes: Booking management, guided tour scheduling, sending confirmations and tickets.
• Legal basis: Performance of a service contract (Art. 6.1.b GDPR).

D. Inscription à la Newsletter (MailPoet)

• Data collected: Email address, first name (optional), IP address at confirmation.
• Purposes: Sending news, promotional offers, and information related to Le Labyrinthe En-Champ-Thé.
• Terms: Subscriptions use a double opt-in system (mandatory confirmation by email). You can unsubscribe at any time using the link at the bottom of each email.
• Legal basis: Consent (Art. 6.1.a GDPR).

E. Contact Form (WPForms)

• Data collected: Last name, first name, email address, subject, and message.
• Purposes: Processing and responding to your information or quote requests.
• Legal basis: Legitimate interest in responding to user requests (Art. 6.1.f GDPR) or consent.

F. Analytics and Audience Measurement (Google Site Kit / Google Analytics)

• Data collected: IP address (anonymized), pages viewed, duration of visit, device/browser type.
• Purposes: Anonymous traffic analysis and improving site user experience.
• Legal basis: Consent (Art. 6.1.a GDPR) gathered via the cookie banner.

3. Data Recipients and Processors

Your personal data is never sold or rented to third parties for marketing purposes. It is only shared with technical service providers (data processors) strictly necessary for the proper functioning of our services:

1. Website Hosting: IONOS SARL (7 Place de la Gare, 57200 Sarreguemines, France).
2. Shop Management: WooCommerce (WordPress).
3. Secure Payment: Up2pay / Crédit Agricole.
4. Physical Product Delivery: Colissimo (La Poste) for shipping your packages.
5. Tour Reservations: Addock / EasyLoisir (ticketing/booking software).
6. Emailing / Newsletter Service: MailPoet and its email dispatch service (sendingservice.net).
7. Traffic Analytics: Google Analytics (via Google Site Kit plugin).

4. Data Transfers Outside the European Union

When using certain tools (notably Google Analytics and technical infrastructure linked to WordPress/MailPoet plugins), data may be transferred to servers located outside the European Union (specifically the United States).

These transfers are governed by appropriate safeguards, including the EU-U.S. Data Privacy Framework or Standard Contractual Clauses (SCCs) approved by the European Commission.Data Privacy Framework) ou des clauses contractuelles types (CCT) validées par la Commission Européenne.

5. Data Retention Period

We retain your personal data strictly for the time necessary to fulfill the purposes for which it was collected:

• Order and billing data: 10 years from the end of the financial year (accounting and tax legal obligations).
• Customer account data: Retained as long as your account is active. Deleted or anonymized after 3 consecutive years of inactivity.
• Newsletter data: Retained until you request to unsubscribe or for 3 years from your last contact with us.
• Contact form data: Retained for the time needed to process your request, then archived for a maximum of 3 years.
• Tour reservation data: 3 years after completion of the service.
• Cookies & browsing data: 13 months maximum for cookies, 14 months for Google Analytics data.

6. Your Rights Regarding Your Personal Data

In accordance with applicable regulations, you have the following rights regarding your personal data:

• Right of access: You can request confirmation of whether your data is processed and obtain a copy.
• Right to rectification: You can request the correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): You can request the deletion of your data, subject to legal retention obligations (e.g., invoices).
• Right to restriction of processing: You can request the temporary freezing of your data processing in certain cases.
• Right to object: You can object at any time to the processing of your data for legitimate reasons or for commercial prospecting.
• Right to data portability: You can retrieve your data in a structured, machine-readable format.
• Post-mortem directives: You have the right to define guidelines regarding the handling of your personal data after your death.

How to Exercise Your Rights

To exercise any of these rights, you can contact us:

• By email: communication@enchampthe.com
• By post: Le Labyrinthe En-Champ-Thé, 18 Rue Emile Mussard, Grand-Coude, 97480 Saint-Joseph, La Réunion.

Proof of identity may be requested in case of reasonable doubt regarding the identity of the applicant. We commit to responding within a maximum of one month.

7. Data Security

Le Labyrinthe En-Champ-Thé implements appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of your personal data, and specifically to prevent it from being altered, damaged, or accessed by unauthorized third parties.

These measures include:

• Use of an SSL / HTTPS encryption protocol across the entire site.
• Restricted access to administrative site data.
• Regular updates of WordPress plugins and system software.

8. Cookies and Tracking Technologies

Our website uses cookies (small text files saved on your device) to ensure proper website functionality, measure traffic, and improve your user experience.

• Strictly necessary cookies: Required for the WooCommerce cart, account login, and site security.
• Audience measurement cookies (Google Analytics): Subject to your prior consent.

A cookie management banner shown on your first visit allows you to accept, decline, or configure cookies at any time.

To view the complete and updated detail of all cookies deposited on this site, or to update your consent choices at any time, please visit our Cookie Policy (EU). Politique de cookies (UE) .

9. Complaints to the CNIL

If you feel, after contacting us, that your data protection rights have not been respected, you have the right to lodge a complaint with the French Data Protection Authority (CNIL):

• Website: www.cnil.fr
• Address: 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07