‌Effective Date: October 4, 2026‌

Welcome to the privacy policy of DIPLOMAT, accessible through our official website www.diplomatfr.com. At DIPLOMAT, operating from our registered address at 259 Rue Saint-Honoré, 75001 Paris, France, we are deeply committed to protecting the personal data and privacy rights of every user who visits our e-commerce platform, browses our product catalog, places an order, or interacts with our online services in any capacity. This privacy policy is designed to transparently explain how we collect, process, store, share, and safeguard your personal information when you use our website, as well as outline your rights related to your personal data under applicable global data protection regulations, including the General Data Protection Regulation (GDPR) enforced in the European Union and other relevant regional privacy frameworks. We encourage you to read this document carefully to understand our practices regarding your personal information, as accessing and using our e-commerce platform signifies your explicit acknowledgment and agreement to the terms laid out in this policy. If you have any questions, concerns, or requests related to your personal data, you may reach out to our dedicated data protection team at any time via our official contact email: flux@diplomatfr.com, or by phone at +33 1 4260 1342 during our regular business hours from 9:00 AM to 6:00 PM Central European Time, Monday through Friday.

1. Scope of Application of This Privacy Policy

This privacy policy applies to all personal information collected through the DIPLOMAT e-commerce website, as well as all associated digital touchpoints linked to our official domain www.diplomatfr.com, including our customer account registration system, online checkout and payment processing modules, customer support chat portals, product review submission features, marketing newsletter subscription services, and all other interactive functions hosted on our platform. This policy covers all categories of users, including casual visitors who only browse our product pages without creating an account, registered account holders who have saved their personal preferences and shipping details on our platform, customers who have completed one or more purchase transactions with us, and users who have opted in to receive our promotional communications.

This policy does not apply to the data handling practices of third-party websites, services, or platforms that users may access through external links embedded on our website, including but not limited to social media platform links, third-party payment gateway portals, and partner merchant referral links. We strongly advise users to review the independent privacy policies of these third-party services before providing any personal information on their platforms, as DIPLOMAT does not assume any responsibility or liability for the data processing operations conducted by these external parties that operate outside of our operational control.

2. Categories of Personal Information We Collect

At DIPLOMAT, we only collect personal information that is strictly necessary to deliver our full e-commerce services to you, and we never collect personal data in an unauthorized or unanticipated manner without your explicit consent. The categories of personal information we may collect include the following:

• ‌Account and Identity Information‌: When you create a registered user account on our www.diplomatfr.com platform, we collect your full legal name, valid email address, self-selected account password, and optional profile information that you choose to provide to personalize your experience, such as your personal avatar, preferred language setting, and product style preferences. This information is used to verify your identity every time you log into your account, and to ensure that your personalized browsing and purchase history is securely associated with your unique user profile.
• ‌Transaction and Shipping Information‌: When you place an order for any product available on our e-commerce store, we collect additional information required to fulfill your order successfully, including your complete shipping address, contact telephone number, billing address that matches your payment method, and purchase order history which records the specific products you have selected, order value, purchase date, and order fulfillment status. This data is critical for us to process your payment, arrange for accurate and timely product delivery, resolve any potential order disputes, and provide you with effective post-purchase customer support for warranty claims or return requests.
• ‌Technical and Usage Data‌: When you access our website through any internet-connected device, we automatically collect certain technical information to optimize the performance and security of our platform, including your device’s unique IP address, browser type and version, operating system details, time zone setting, the full list of URL click paths you navigate through on our site, page response times, download errors, total visit duration on specific pages, and page interaction data such as scrolling actions and click events. We also use standard cookie technologies and similar tracking tools to record your browsing preferences, remember items you have added to your shopping cart across different browsing sessions, and help us analyze user traffic patterns to continuously improve the layout and functionality of our e-commerce website.
• ‌Communication and Support Data‌: When you reach out to our customer support team via email at flux@diplomatfr.com, phone at +33 1 4260 1342, the on-site instant chat function on our website, or any other communication channel, we will collect the content of your messages, your contact details, and any additional information you voluntarily provide in the course of the conversation, such as order reference numbers, product photos related to your after-sales request, and your specific feedback on our services. This information is stored in our secure customer relationship management system to ensure that our support team can provide you with consistent, efficient, and personalized assistance every time you contact us.
• ‌Marketing Preference Data‌: When you voluntarily subscribe to our DIPLOMAT promotional newsletter, we collect your email address and your stated preference for receiving updates about new product launches, exclusive limited-time offers, seasonal discount campaigns, and brand event announcements. We also maintain records of your opt-in and opt-out status for different types of marketing communications to ensure that we only send you promotional content that you have explicitly agreed to receive.

3. Legal Basis for Processing Your Personal Data

In strict compliance with the requirements of the GDPR and other applicable global data protection laws, all of our personal data processing activities are supported by clear and legitimate legal bases:

• ‌Performance of a Contract‌: A large portion of our data processing operations are carried out to fulfill the terms of the sales contract that we enter into with you when you place an order on our platform. This includes processing your shipping address to deliver your purchased products, processing your payment information to complete transaction settlement, and processing your contact details to send you order confirmation and delivery status notifications. Without processing this category of data, we would be unable to fulfill our contractual obligations to provide the e-commerce products and services you have requested from us.
• ‌Legitimate Interests of Our Business‌: Where it does not override your fundamental privacy rights and freedoms, we process certain categories of user data to pursue our legitimate business interests, including optimizing the user experience of our www.diplomatfr.com website, detecting and preventing fraudulent transaction activities and payment fraud, analyzing aggregate user browsing trends to improve our product assortment and inventory management, and sending you highly relevant personalized product recommendations that align with your previously demonstrated browsing and purchase preferences. We conduct regular assessments of all data processing activities that rely on legitimate interest as a legal basis to ensure that our processing does not cause unnecessary harm to your privacy interests.
• ‌Your Explicit Consent‌: For all data processing activities that are not covered by contractual necessity or legitimate interest, we will always seek your explicit, freely given, specific, and revocable consent before proceeding. This includes processing your personal data to send you non-essential marketing communications, using non-essential cookies for advanced user behavior analytics, and sharing your personal information with carefully selected third-party partners for co-branded promotional activities. You retain the full right to withdraw your previously provided consent at any time, through the privacy settings page in your user account or by contacting our data protection team directly, and the withdrawal of consent will not affect the lawfulness of any data processing activities that we have already carried out prior to your request.
• ‌Compliance with Legal Obligations‌: We are also required to process certain categories of your personal data to comply with our legal obligations as a registered business operating in France and the European Union, including retaining transaction records for tax and accounting audit purposes, responding to lawful information disclosure requests from authorized judicial or regulatory authorities, and verifying user identities to comply with anti-money laundering and anti-fraud regulations that apply to e-commerce businesses.

4. How We Store and Protect Your Personal Information

All personal information that we collect from users of the DIPLOMAT e-commerce platform is stored on secure, encrypted servers that are located in certified data centers within the European Economic Area, in full compliance with GDPR requirements for cross-border data transfer. We implement a comprehensive multi-layer information security framework to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• All sensitive personal data, including your payment card information, full identity details, and order transaction records, are protected using industry-standard AES-256 encryption technology during both transmission over the internet and at rest on our storage servers.
• Our internal data access control system adopts a role-based permission architecture, which ensures that only authorized DIPLOMAT employees who require access to specific categories of your data to perform their job duties (such as customer support agents tasked with resolving your order issues, and logistics coordinators responsible for arranging product delivery) are granted limited, traceable access to your personal information, and all access activities are automatically logged and audited on a regular basis.
• Our technical security team conducts monthly vulnerability assessments, quarterly penetration testing, and annual full-scale security audits of our entire IT infrastructure to proactively identify and eliminate potential security risks. We also have an established incident response protocol that allows us to detect, contain, and notify the relevant supervisory authority and affected users of any personal data breach within 72 hours of our discovery of the incident, in full compliance with GDPR reporting requirements.

We will only retain your personal information for the minimum period that is strictly necessary to fulfill the specific purposes for which the data was originally collected. For example, we retain your order transaction data for a period of 10 years after the completion of your order to comply with French tax and commercial record-keeping legal requirements. For users who have created a registered account on our platform, we will retain your account profile data for as long as your account remains active, or for as long as it is required to resolve any pending disputes or enforce our user agreement terms. Once your personal information is no longer required for the stated purposes, we will securely and permanently anonymize or delete the data through our certified data destruction process.

5. Circumstances Under Which We May Share Your Personal Information

DIPLOMAT will never sell, rent, or lease your personal information to any third parties for their own marketing purposes without your explicit written consent. We may only share your personal data with carefully vetted third parties under the following limited circumstances:

• ‌Service Provider Partners‌: We share necessary personal information with trusted third-party service providers who perform critical operational functions on our behalf, to support the normal operation of our e-commerce platform. These partners include payment processing service providers who handle secure transaction settlement, logistics and courier companies who deliver your purchased products to your designated shipping address, cloud hosting service providers who maintain our website servers, and email service providers who help us send our order notification and marketing communications. All of our service provider partners are bound by strict data processing agreements that require them to protect your personal information to the same level of security standard that we enforce internally, and they are prohibited from processing your personal data for any purposes other than the specific tasks that we have explicitly authorized them to carry out on our behalf.
• ‌Merger, Acquisition, or Asset Transfer‌: In the event that DIPLOMAT undergoes a corporate restructuring process, such as a merger, acquisition, or sale of all or a portion of our business assets, your personal information held by us may be transferred to the successor entity as part of the transferred business assets. We will provide explicit advance notice to all registered users on our platform before any such transfer of personal data takes place, and we will ensure that the successor entity agrees to uphold the same privacy protection commitments outlined in this privacy policy.
• ‌Legal and Regulatory Requirements‌: We may disclose your personal information to competent judicial, law enforcement, or government regulatory authorities if we are legally compelled to do so by a valid court order, official regulatory subpoena, or other lawful mandatory information disclosure request. We will only disclose the minimum scope of personal information that is strictly required to satisfy the specific legal request, and we will verify the legitimacy of every official information disclosure request we receive before processing any data release.

6. Your Rights Over Your Personal Data

Under applicable data protection laws, you hold a comprehensive set of legally enforceable rights over the personal information that DIPLOMAT holds about you:

1. ‌Right of Access‌: You have the right to submit a request to receive a full copy of all personal information that we have collected and processed about you, along with a detailed explanation of the purposes for which we have processed that data, the categories of third parties we have shared your data with, and the expected retention period for the data.
2. ‌Right to Rectification‌: If you find that any of the personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update that data without unnecessary delay. You can update most of your profile information directly through the account settings page after logging into your www.diplomatfr.com user account, or you may contact our support team for assistance with manual correction.
3. ‌Right to Erasure‌: Under specific circumstances, such as when your personal data is no longer necessary for the original purposes for which it was collected, or when you have withdrawn your consent for the data processing and there is no remaining legal basis for us to retain your data, you have the right to request that we permanently delete all of your personal information from our systems. We will process your erasure request in accordance with applicable legal requirements, except for data that we are legally obligated to retain to comply with statutory record-keeping rules.
4. ‌Right to Restriction of Processing‌: You have the right to request that we temporarily suspend the processing of your personal information in situations where you contest the accuracy of the data, where our processing of the data is unlawful, or where we no longer need the data for the original processing purposes but you require the data to establish, exercise, or defend legal claims.
5. ‌Right to Data Portability‌: You have the right to request that we provide all the personal data that you have submitted to us, in a structured, commonly used, machine-readable format, and to request that we transmit this data directly to another data controller designated by you, where technically feasible.
6. ‌Right to Object‌: You have the right to object at any time to our processing of your personal data that is based on our legitimate interest, including for direct marketing purposes. After you submit an objection to marketing processing, we will immediately stop sending you all promotional communications without any further delay.

You may exercise any of the above rights at any time by submitting a request to our data protection team via email at flux@diplomatfr.com. We will respond to your formal request within one month of receiving your identity verification documentation, and we do not charge any administrative fee for processing standard data rights requests. If we are unable to fully fulfill your request for legally justified reasons, we will provide you with a clear written explanation for our decision within the response period. You also retain the right to lodge a complaint related to our personal data processing activities with the relevant data protection supervisory authority in your country of residence at any time.

7. Updates to This Privacy Policy

DIPLOMAT reserves the right to revise and update the terms of this privacy policy on an occasional basis, to reflect changes in our e-commerce business operations, new regulatory requirements, or updates to the functionality of our www.diplomatfr.com website. Whenever we make material changes to this policy, we will update the effective date stated at the top of this document, and we will post a prominent notification on the homepage of our website to inform all users of the upcoming policy changes before they take effect. For registered user accounts, we will also send a formal notification email to your registered email address to ensure that you have sufficient time to review the updated terms. Your continued use of our e-commerce platform after the effective date of the updated privacy policy will constitute your acceptance of the revised terms outlined in the new policy.

If you have any questions, comments, or concerns about this privacy policy or our personal data handling practices, please do not hesitate to contact us at:
DIPLOMAT
259 Rue Saint-Honoré, 75001 Paris, France
Email: flux@diplomatfr.com
Phone: +33 1 4260 1342
Website: www.diplomatfr.com