LEGAL NOTICE

Website Publisher

This website is published by:

SAS CHÂTEAU ISOLETTE
Simplified joint-stock company
Share capital: €1,569,440
Registered office: 2746 Route de Bonnieux, Château de l’Isolette, 84400 Apt, France
SIREN: 348 376 278
SIRET: 348 376 278 00019
RCS: 348 376 278 R.C.S. Avignon
EU VAT number: FR18348376278
Telephone: +33 (0)4 90 74 16 70
Email: contact@isolette.fr

Publication Director: Olivier Rouquet

E-mail : olivier.rouquet@isolette.fr

Hosting

The website is hosted by:

GD.PL Sp. z o.o.
ul. Władysława IV 43
81-395 Gdynia
Poland
Telephone: +48 58 785 11 22
KRS: 0000204068
Tax ID (NIP): 586-20-41-850
REGON: 192024922

Intellectual Property

All elements available on the Château Isolette website, including texts, photographs, illustrations, graphics, logos, trademarks, visual elements, videos, downloadable documents, as well as their presentation and layout, are protected by applicable French and international intellectual property laws.

Unless prior written authorisation has been obtained from SAS CHÂTEAU ISOLETTE, any reproduction, representation, adaptation, modification, publication or exploitation, in whole or in part, of the website or any of its contents, regardless of the process or medium used, is prohibited.

Any unauthorised use that may infringe the rights of SAS CHÂTEAU ISOLETTE or third parties may result in liability on the part of the person responsible.

Accuracy of Information and Liability

SAS CHÂTEAU ISOLETTE makes every reasonable effort to ensure that the information published on the website is accurate and kept up to date.

However, certain information may be changed without prior notice, particularly information concerning products, vintages, availability, prices, delivery conditions or services.

Information published on the website does not replace the contractual terms applicable to an order, including the General Terms and Conditions of Sale in force at the time the order is placed.

Secure Payment

Online card payments are processed by Stripe, our payment service provider.

As part of processing a transaction, Stripe may process payment and transaction data in order to authenticate and process the payment, prevent fraud and manage potential disputes.

Depending on the services concerned, Stripe may act as a service provider and/or data processor and may also process certain information in order to comply with its own legal and regulatory obligations.

Where payment by bank transfer is available to the Customer, payment shall be made in accordance with the bank details and instructions provided during the ordering process.

PayPal is not offered as a payment method within the online store’s current checkout process.

Consumer Mediation

In accordance with the applicable consumer mediation provisions, a consumer may, after first submitting a complaint to SAS CHÂTEAU ISOLETTE that has not resulted in a satisfactory solution, refer the matter free of charge to the consumer mediator appointed for the company:

Société de la Médiation Professionnelle – Alteritae
5 rue Salvaing
12000 Rodez – France
www.mediateur-consommation-smp.fr

PRIVACY AND PERSONAL DATA PROTECTION POLICY

1. Data Controller

The controller responsible for processing personal data collected through the website is:

SAS CHÂTEAU ISOLETTE
SIREN: 348 376 278
2746 Route de Bonnieux
84400 Apt – France
Email: contact@isolette.fr
Telephone: +33 (0)4 90 74 16 70

This policy has been prepared in accordance with Regulation (EU) 2016/679 on the protection of personal data (“GDPR”), together with applicable French data protection legislation.

2. Personal Data We May Collect

When you use our website and online store, SAS CHÂTEAU ISOLETTE may process, in particular, the following categories of personal data:

• identification data, including first name and surname;
• contact information, including postal address, billing and delivery address, email address and telephone number;
• information relating to your customer account;
• information required to prepare, process and deliver orders;
• order history and information relating to the commercial relationship;
• information relating to requests submitted to customer service;
• technical information relating to the use of the website, such as IP address, browser and certain connection-related data;
• information required to process payments;
• preferences relating to newsletters, marketing communications and cookies.

3. Purposes and Legal Bases of Processing

Personal data is processed only where necessary and on an appropriate legal basis.

Order Management

Information necessary for the creation and fulfilment of an order is used to:

• register the order;
• prepare the products;
• arrange delivery;
• manage payment;
• issue commercial and accounting documents;
• provide after-sales service and handle any complaints.

These processing activities are based primarily on the performance of a contract or steps taken prior to entering into a contract and, where accounting, tax or other regulatory obligations apply, on compliance with a legal obligation.

Customer Account Management

Data associated with a customer account is used to provide access to the account, facilitate future orders, provide access to order history and manage the relationship with Château Isolette.

The principal legal basis is the performance of the service requested by the customer.

Customer Service and Contact Requests

Information provided through contact forms or directly by email is used to respond to enquiries, manage complaints and maintain the relationship with the customer.

Security and Prevention of Misuse

Certain technical data may be processed in order to ensure the operation and security of the website, protect customer accounts and transactions and prevent fraudulent or abusive activity.

Where such processing does not directly arise from a legal or contractual obligation, it may be based on the legitimate interests of SAS CHÂTEAU ISOLETTE in protecting its services, subject to the rights and freedoms of the individuals concerned.

4. Payments and Stripe

Card payments made through the online store are processed by Stripe.

In connection with a transaction, information necessary to process the payment may be transmitted to Stripe and the relevant financial partners.

Stripe may process transaction data in particular in order to:

• authenticate the payment;
• process the transaction;
• detect and prevent fraudulent transactions;
• manage disputes and chargebacks;
• comply with its own legal and regulatory obligations.

Transaction information may also be shared with banks and other payment service providers where necessary for processing the payment.

Customers seeking further information are invited to consult Stripe’s privacy policy.

This policy does not refer to PayPal, as PayPal is not the payment provider used for card payments in the current online store.

5. Delivery and Service Providers

Personal data strictly necessary for the delivery of an order may be shared with the carrier selected to fulfil the order.

This may include, in particular:

• the recipient’s name;
• delivery address;
• telephone number or other contact information required to organise or track delivery.

6. Recipients of Personal Data

Depending on the purpose concerned, personal data may be accessible to:

• authorised members of SAS CHÂTEAU ISOLETTE staff;
• technical service providers involved in operating or hosting the website;
• payment providers, including Stripe;
• carriers responsible for delivering orders;
• service providers responsible, where applicable, for sending communications and newsletters;
• administrative authorities, courts or other authorised bodies where required by law.

Recipients are given access only to the information necessary to perform their respective tasks.

7. Data Retention Periods

Personal data is retained only for as long as necessary for the purposes for which it was collected, together with any additional retention or limitation periods required by applicable law.

Data required for the day-to-day management of an order is retained for the duration of the commercial relationship and may subsequently be archived where necessary to comply with legal requirements.

Accounting records and supporting documents, including invoices and purchase orders, may be subject to a legal retention period of 10 years from the end of the relevant financial year.

Personal data used for commercial marketing purposes in relation to an existing customer may be retained for the duration of the commercial relationship and, depending on the processing concerned, for three years following the end of the commercial relationship or the customer’s last purchase.

Data relating to prospects may also be retained for three years from the date it was collected or from the most recent contact initiated by the prospect.

Appropriate retention periods are also applied to inactive customer accounts.

8. Newsletter

Subscription to the newsletter allows you to receive information relating in particular to:

• Château Isolette and its wines;
• news and developments from the estate;
• events and experiences offered by the brand;
• offers, services and selections that may be of interest to subscribers.

Newsletter subscription is based on the subscriber’s consent.

An email address is required in order to send the newsletter.

Where additional preferences are collected, they are used only to personalise communications to the extent permitted by the choices made by the subscriber.

Subscribers may withdraw their consent and unsubscribe at any time using the unsubscribe link included in the communications they receive.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

9. Cookies and Similar Technologies

The website uses cookies and similar technologies.

Certain cookies are strictly necessary for the operation of the online store. These may be used, in particular, to:

• operate the user session;
• authenticate customers;
• remember the contents of the shopping cart;
• retain essential technical preferences;
• operate mechanisms relating to access and age verification.

Strictly necessary cookies may be used without prior consent where permitted by applicable legislation.

Where cookies or similar technologies that are not strictly necessary are used, including for analytics, personalisation or marketing purposes, they are subject to the applicable consent requirements.

Where consent is required, users must be informed about the purposes of such technologies and be able to accept or refuse their use.

Users may change their choices at any time using the cookie management tool available on the website.

10. Transfers of Data Outside the European Union

Certain technical or payment service providers may, in connection with their services, process or transfer certain personal data outside the European Union or European Economic Area.

Where such transfers occur, they must be subject to a mechanism recognised under applicable data protection legislation, including an adequacy decision or appropriate safeguards such as Standard Contractual Clauses.

For processing carried out by Stripe, the applicable conditions and safeguards are described in Stripe’s documentation and privacy policy.

11. Data Security

SAS CHÂTEAU ISOLETTE implements appropriate technical and organisational measures designed to protect personal data against destruction, loss, alteration, unauthorised disclosure or unauthorised access.

Access to personal data is restricted to persons and service providers who require such access in connection with their duties or services.

12. Your Rights

Depending on the processing activity concerned and its legal basis, individuals may have the following rights under the GDPR:

• right of access;
• right to rectification;
• right to erasure where provided for by applicable law;
• right to restriction of processing;
• right to object where applicable;
• right to data portability where the legal requirements are met;
• right to withdraw consent at any time where processing is based on consent.

Requests may be submitted by email to:

contact@isolette.fr

or by post to:

SAS CHÂTEAU ISOLETTE
2746 Route de Bonnieux
84400 Apt
France

Individuals also have the right to lodge a complaint with the competent data protection supervisory authority, including the Commission Nationale de l’Informatique et des Libertés (CNIL) in France.

13. Changes to this Privacy Policy

SAS CHÂTEAU ISOLETTE may amend this policy from time to time in order to reflect changes to its services, service providers, processing activities or applicable legislation.

The version currently published on the website is the version applicable at the time it is consulted.

Last updated: August 2026.