Privacy Policy
Effective date: 14/07/2026
1. Who we are
This Privacy Policy explains how A.J DOMAINES SAS collects, uses, stores and shares personal data through the AJ Domaines website, its private membership platform and the services associated with them.
The data controller is:
A.J DOMAINES SAS
10 Route de Giscours
33460 Labarde
France
SIRET: 320 528 037 00056
Email: contact@ajdomaines.com
Telephone: +33 (0)5 57 97 09 09
For any question concerning this Privacy Policy or the processing of your personal data, you may contact us using the details above.
2. Scope of this Privacy Policy
This Privacy Policy applies when you:
- visit the AJ Domaines website;
- activate or use an AJ Domaines member account;
- purchase wines or other products;
- register for a visit, tasting or event;
- subscribe to our communications;
- contact our teams;
- or otherwise interact with AJ Domaines.
It does not apply to third-party websites or services accessible through links on our website. Those third parties process personal data in accordance with their own privacy policies.
3. Personal data we collect
The personal data we process depends on the nature of your relationship with AJ Domaines and the services you use.
| Category | Personal data concerned |
| Identity data | Title, first name, surname, preferred language, country of residence and, where necessary, date of birth or age-verification information. |
| Contact data | Email address, telephone number, billing address, delivery address and, where applicable, company name. |
| Account and membership data | Account identifiers, account status and category, membership-year information, annual purchase activity, visit entitlement, saved addresses, preferences and communication choices. |
| Order and transaction data | Products ordered, vintages, bottle formats, quantities, prices, taxes, delivery charges, invoices, payment status, order history, delivery information and customer-service requests. |
| Payment-related data | Payment status, transaction reference, payment token and limited information made available by the payment provider, such as the card brand and expiry date. AJ Domaines does not receive or store complete payment-card numbers. |
| Technical and usage data | IP address, browser, operating system, device information, session identifiers, connection logs, pages viewed, referring page and information relating to the use and security of the website. |
| Communication data | Emails, contact-form submissions, telephone notes, customer-service correspondence, requests, feedback and survey responses. |
| Marketing and preference data | Newsletter subscription, consent records, communication preferences, areas of interest, preferred wines or estates and communication history. |
| Event and hospitality data | Event or visit registrations, attendance information, guest details and information reasonably required to organise the requested service. |
AJ Domaines does not seek to collect sensitive personal data. Dietary, allergy-related or accessibility information provided for a visit or event may, however, reveal health-related data. AJ Domaines processes such information only where necessary to organise the requested service and on an appropriate legal basis, including explicit consent where required.
Please provide only information strictly necessary for the requested service. It will not be used for unrelated purposes.
4. How we collect personal data
We collect personal data directly from you when you:
- activate or use an account;
- place an order;
- complete a form;
- subscribe to communications;
- register for a visit or event;
- contact our teams;
- or otherwise provide information to us.
Certain technical information is collected automatically when you use the website through essential cookies, server logs and similar technologies.
Subject to your consent where required, additional information may also be collected through analytics, personalisation or advertising technologies used on the website.
We may also receive limited personal data from service providers involved in operating the website, managing customer accounts, processing payments, preventing fraud, fulfilling orders or arranging deliveries.
5. Commerce7 and Stripe
AJ Domaines uses Commerce7 to operate its e-commerce services, customer accounts, membership platform and customer relationship management activities.
Commerce7 may process information including customer contact details, account information, order history, transaction data, technical information and payment tokens on behalf of AJ Domaines.
Online payments are processed through Stripe. Stripe receives the information necessary to authorise and process payments, prevent fraud, manage refunds and chargebacks, and comply with its own legal and regulatory obligations.
AJ Domaines does not receive or store complete payment-card numbers. Stripe may process certain information as an independent data controller where required to comply with its own legal obligations.
6. Why we process personal data
AJ Domaines processes personal data only where an appropriate legal basis applies.
| Purpose | Personal data generally used | Legal basis |
| Creating, activating and administering member accounts | Identity, contact, account and technical data | Performance of a contract or steps taken at your request before entering into a contract |
| Managing membership eligibility, annual purchase activity and access to private products, visits or services | Identity, contact, account, membership and transaction data | Performance of a contract and legitimate interests in administering the AJ Domaines membership programme |
| Processing and fulfilling orders | Identity, contact, order, transaction and delivery data | Performance of a contract |
| Processing payments and preventing fraud | Identity, transaction, technical and payment-related data | Performance of a contract and legitimate interests in securing transactions and preventing fraud |
| Managing deliveries, collections, returns, refunds and complaints | Identity, contact, order and communication data | Performance of a contract, compliance with legal obligations and legitimate interests in managing customer relationships |
| Issuing invoices and maintaining accounting and tax records | Identity, contact, order and transaction data | Compliance with legal obligations |
| Organising visits, tastings and events | Identity, contact, event and communication data | Performance of a contract or steps taken at your request |
| Responding to enquiries and customer-service requests | Identity, contact and communication data | Performance of a contract and legitimate interests in responding to requests and managing customer relationships |
| Sending information about products or services similar to those previously purchased, where permitted by law | Identity, contact, transaction and preference data | Legitimate interests, subject to your right to object |
| Sending newsletters and other electronic marketing where consent is required | Identity, contact and preference data | Consent |
| Operating, securing and improving the website | Technical and usage data | Legitimate interests for essential operations and security; consent for non-essential technologies where required |
| Protecting AJ Domaines, its customers and its legal rights | Account, technical, communication and transaction data | Legitimate interests and, where applicable, compliance with legal obligations |
| Responding to courts, regulators and public authorities | Information relevant to the request | Compliance with legal obligations or legitimate interests in establishing, exercising or defending legal claims |
Where processing is based on legitimate interests, AJ Domaines considers whether its interests are proportionate and whether they are overridden by your rights and freedoms.
Where processing is based on consent, you may withdraw that consent at any time.
7. Sharing personal data
AJ Domaines does not sell personal data.
We disclose personal data only where necessary to operate our services, fulfil orders, protect our legitimate interests or comply with applicable law.
Personal data may be shared with the following recipients:
| Recipient | Purpose |
| Commerce7 | Operating the e-commerce platform, customer accounts, membership services, order management and customer relationship management. |
| Stripe and relevant financial institutions | Processing and authenticating payments, preventing fraud, managing refunds and handling chargebacks. |
| Website hosting and technical providers | Hosting, maintenance, security, backups, support and operation of the website. |
| Carriers, logistics providers and fulfilment partners | Preparing, shipping, delivering and tracking orders and, where applicable, completing customs formalities. |
| Communication service providers | Managing subscriptions and sending communications where such services are used and an appropriate legal basis applies. |
| Event and hospitality providers | Organising visits, tastings, dinners and other services requested by customers or members. |
| Professional advisers | Providing legal, accounting, auditing, insurance or compliance services. |
| Courts, regulators and public authorities | Responding to lawful requests, complying with legal obligations and establishing, exercising or defending legal claims. |
Service providers acting on behalf of AJ Domaines may access only the personal data reasonably necessary to perform their services. They are required to protect that information and process it in accordance with applicable law and their contractual obligations.
Some recipients, including banks, payment institutions, customs authorities and certain carriers, may process personal data as independent data controllers in accordance with their own legal obligations and privacy policies.
8. International transfers
Although the website is hosted in Europe, certain service providers or companies within their corporate groups may process or access personal data from countries outside the European Economic Area.
Where AJ Domaines transfers personal data outside the European Economic Area, appropriate safeguards will be used in accordance with applicable data-protection law. Depending on the recipient and destination, these safeguards may include:
- a European Commission adequacy decision;
- the European Commission’s Standard Contractual Clauses;
- supplementary contractual, organisational or technical safeguards;
- or another legally recognised transfer mechanism.
You may contact AJ Domaines at contact@ajdomaines.com to request further information about the safeguards applicable to a particular transfer.
9. Data-retention periods
AJ Domaines retains personal data only for as long as necessary for the purposes for which it was collected and for any additional period required to comply with legal obligations, resolve disputes or defend legal claims.
| Data concerned | Retention period or criterion |
| Customer account and membership data | For the duration of the active account or membership, followed by the period necessary to manage legal obligations and potential claims. |
| Order and contractual data | For the duration of the commercial relationship and subsequently for up to five years, unless a longer legal retention period applies. |
| Invoices and accounting records | Ten years from the end of the relevant accounting period, in accordance with applicable accounting requirements. |
| Payment data | AJ Domaines does not retain complete payment-card numbers. Payment tokens and transaction information may be retained by Commerce7, Stripe or relevant financial institutions in accordance with their legal, security and contractual requirements. |
| Customer-service correspondence | For the period necessary to deal with the request and, where relevant, for up to five years to manage potential claims. |
| Prospect data | Up to three years from collection or from the latest active contact initiated by the individual. |
| Marketing data concerning customers | For the duration of the commercial relationship and for up to three years after its end, unless consent is withdrawn or the individual objects earlier. |
| Consent and objection records | For the period necessary to demonstrate compliance and ensure that the individual’s preferences continue to be respected. |
| Event and visit data | Until the event or visit has been completed, followed by the period necessary for administration, accounting and potential claims. |
| Technical and security logs | For a period proportionate to the relevant security, maintenance or incident-management purpose. |
| Cookie and tracker information | For the periods specified in the website’s cookie-preference interface and in accordance with applicable requirements. |
Personal data may be retained for a longer period where necessary to comply with a legal obligation, preserve evidence, manage litigation or cooperate with a competent authority.
Where personal data is no longer required, it will be deleted, anonymised or placed in a restricted archive, as appropriate.
10. Cookies and similar technologies
The website uses cookies and similar technologies to operate securely, maintain essential functionality and remember user choices.
10.1 Strictly necessary cookies
Certain cookies are necessary for the operation of the website and the services expressly requested by users. These may include cookies used for:
- account authentication;
- session management;
- shopping-cart operation;
- secure checkout;
- fraud prevention;
- recording privacy choices;
- and maintaining website security.
These cookies cannot generally be disabled through the website because they are necessary to provide the requested services.
10.2 Optional cookies
Subject to the tools actually used on the website, optional cookies may be used for analytics, personalisation, advertising or social-media functions.
Where consent is required, optional cookies will not be activated until you have made a choice through the cookie banner or cookie-preference interface.
You may accept, refuse or subsequently change your choices through the cookie-preference interface available on the website.
The cookie-preference interface will provide information about the cookies actually used, their purposes, providers and applicable retention periods.
Browser settings may also allow you to block or delete certain cookies. However, disabling essential cookies may affect the operation of the website.
11. Marketing communications
AJ Domaines may send information about its wines, estates, events, services and membership activities where permitted by applicable law.
Where consent is required, marketing communications will be sent only after you have provided valid consent.
Where permitted by law, AJ Domaines may contact existing customers about products or services similar to those they have previously purchased. You may object to such communications at any time.
Every electronic marketing communication will include a simple way to unsubscribe.
You may withdraw your consent or object to marketing by:
- using the unsubscribe link included in the communication;
- updating your account preferences, where this function is available;
- or contacting contact@ajdomaines.com.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Operational communications concerning an account, order, payment, delivery, security matter or service request are not marketing communications and may continue to be sent where necessary.
12. Your data-protection rights
Subject to the conditions and limitations provided by applicable law, you may exercise the following rights:
| Right | What it means |
| Access | You may request confirmation that your personal data is being processed and obtain a copy of that data. |
| Rectification | You may request correction of inaccurate or incomplete personal data. |
| Erasure | You may request deletion of personal data where the applicable legal conditions are satisfied. |
| Restriction | You may request that the processing of your personal data be restricted in certain circumstances. |
| Objection | You may object to processing based on legitimate interests. You have an absolute right to object to direct marketing. |
| Withdrawal of consent | You may withdraw consent at any time where processing is based on consent. |
| Data portability | You may request certain personal data provided by you in a structured, commonly used and machine-readable format where the applicable conditions are satisfied. |
| Automated decision-making | You may have specific rights where a decision producing legal or similarly significant effects is based solely on automated processing. |
| Post-mortem instructions | Under French law, you may give instructions concerning the storage, deletion and communication of your personal data after your death. |
AJ Domaines does not intend to make decisions producing legal or similarly significant effects based solely on automated processing.
To exercise your rights, please contact:
contact@ajdomaines.com
Please specify the right you wish to exercise and provide sufficient information to enable us to identify the relevant data.
Where reasonably necessary, AJ Domaines may request additional information to verify your identity. We will not request identification documents where verification can reasonably be completed by less intrusive means.
We will respond within the period required by applicable law, generally within one month after receipt of a complete request. This period may be extended where permitted by law due to the complexity or number of requests.
You also have the right to lodge a complaint with the French data-protection authority:
Commission nationale de l’informatique et des libertés — CNIL
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France
13. Account deletion
You may request the deletion of your AJ Domaines account by contacting contact@ajdomaines.com.
Deleting an account does not necessarily result in the immediate deletion of all information associated with it.
AJ Domaines may retain order, invoice, transaction, payment, fraud-prevention and customer-service records where necessary to comply with legal obligations, manage contractual responsibilities or establish, exercise or defend legal claims.
Information that is no longer required will be deleted or anonymised where appropriate.
14. Data security
AJ Domaines takes appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
AJ Domaines also requires service providers processing personal data on its behalf to implement security measures appropriate to the nature of the information and the risks associated with the processing.
Payment-card information is processed through specialised payment services. AJ Domaines does not receive or store complete payment-card numbers.
No website, transmission method or storage system can be guaranteed to be completely secure. You are responsible for keeping your account credentials confidential and for informing AJ Domaines promptly if you suspect unauthorised use of your account.
15. Personal-data breaches
Where a personal-data breach occurs, AJ Domaines will assess its nature and potential consequences and take appropriate steps to contain and remedy the incident.
Where required by applicable law, the breach will be notified to the competent supervisory authority.
Where a breach is likely to result in a high risk to the rights and freedoms of affected individuals, AJ Domaines will also inform those individuals in accordance with applicable law.
16. Children and the sale of alcoholic beverages
The AJ Domaines website and commercial services are not intended for children.
Alcoholic beverages may be purchased only by individuals who have reached the minimum legal age required to purchase alcohol in their country of residence and in the country of delivery.
AJ Domaines may request information reasonably necessary to verify age or eligibility to purchase alcoholic beverages. Such information will be used only for legal compliance, order processing, delivery and fraud-prevention purposes.
If AJ Domaines becomes aware that personal data has been collected from a child in circumstances where parental authorisation or another legal condition was required, appropriate steps will be taken to delete or restrict that information.
17. Third-party links and services
The website may contain links to websites, platforms, social networks, payment services or content operated by independent third parties.
AJ Domaines is not responsible for the privacy practices or content of those third parties. You should review their privacy policies before providing personal data or using their services.
The inclusion of a link does not mean that AJ Domaines controls or endorses the third party’s processing practices.
18. Changes to this Privacy Policy
AJ Domaines may update this Privacy Policy to reflect changes in its services, legal obligations, technologies or personal-data processing activities.
The updated version will be published on the website with a revised “Last updated” date.
Where a change materially affects the way personal data is processed, AJ Domaines will provide additional notice where required by applicable law.
19. Contact us
For any question, request or complaint concerning this Privacy Policy or the processing of your personal data, please contact:
A.J DOMAINES SAS
10 Route de Giscours
33460 Labarde
France SIRET: 320 528 037 00056
Email: contact@ajdomaines.com
Telephone: +33 (0)5 57 97 09 09