PRIVACY POLICY AND PERSONAL DATA PROTECTION

1. GENERAL INFORMATION

1.1 PURPOSE OF THIS POLICY

We attach particular importance to the processing, confidentiality and security of your personal data. It is important for us to offer you personalized services while respecting your personal choices and your privacy.

The purpose of this Privacy and Personal Data Protection Policy (hereinafter the “Privacy Policy”) is to inform you, in a simple and clear manner, about the processing carried out on the personal data that you provide to us or that we may collect through the various contact channels existing between us (boutique, Customer Service, givenchy.com, social media, digital applications, events), and about any transfer thereof to third parties, as well as the rights and options available to you to control your personal information and exercise your rights.

1.2 WHO ARE WE?

This Privacy Policy describes how GIVENCHY, a French public limited company registered with the Paris Trade and Companies Register under number 552 051 229, whose registered office is located at 3, avenue George V, 75008 Paris, France, and/or its affiliated companies (hereinafter “GIVENCHY”, “We”, “Us”, “Our”) process personal data concerning you (“You”, “Your”) in order to provide You with the best possible customer experience. You may consult the list of these affiliated companies via the following link.

1.3 AMENDMENTS TO THIS PRIVACY POLICY

GIVENCHY may update this Privacy Policy depending on the legal and regulatory context, as well as to keep You informed of changes in Our personal data processing practices. GIVENCHY recommends that You always consult the most recent version of the Privacy Policy whenever You interact with GIVENCHY by visiting this section or by clicking on the “Privacy Policy” link located at the bottom of the Site’s homepage.

1.4 DATA PROTECTION OFFICER

GIVENCHY has appointed a Data Protection Officer who may be contacted for any questions relating to this policy in accordance with the contact details set out below in the “Contact Us” section.

2. PRIVACY POLICY IN DETAIL

2.1 WHAT CATEGORIES OF DATA ARE COLLECTED BY GIVENCHY?

“Personal data” means any information that could enable You to be identified either directly (for example, by your name) or indirectly (for example, by means of a unique customer number).

GIVENCHY collects the following categories of data for the purposes described below:

• Your identification and contact data (including email address, telephone number, postal address); when You decide to communicate them, for example to create an online account, participate in an event, make a purchase, complete a customer information form in store, make a return or exchange, as well as information from Your identity document for in-store payments above a certain amount;
• Payment information: for example, the payment method used to pay for the products or services You have ordered from Us;
• Information such as Your title, date of birth and/or age or age range;
• Your preferences and interests that You choose to communicate during Your exchanges or privileged appointments with Our sales advisors (such as Your preferences regarding Our collections, Your size, Your style preferences);
• Information relating to Your purchases and repairs (product category and purchase history);
• GIVENCHY events in which You participate;
• Your requests made through Our customer service, or any other means made available to you.

The personal data that are essential for GIVENCHY are indicated on the various pages of the personal data collection forms. If You do not fill in these mandatory fields, GIVENCHY will probably not be able to respond to Your requests and/or provide You with the requested products and services. The other information is optional and allows Us to know You better and improve Our communications and services towards You.

2.2 THROUGH WHICH CHANNELS ARE YOUR DATA COLLECTED AND/OR RECEIVED?

As part of Our relationship, we may collect certain data through the following contact points:

• Interactions with Our in-store advisors;
• Browsing on givenchy.com;
• Contact with customer service;
• GIVENCHY events in which You participate;
• Interactions with Our public relations services;
• Forms that You complete (in store or online), questionnaires or surveys that You answer, emails that You send to Us;
• Third-party applications, search engines or social media platforms (including Meta, Instagram, etc.) that You use and to which You have given permission to share your data with Us. You must keep yourself informed of the terms of use and privacy policy applicable to such third-party social networks, for which they are solely responsible;
• Data communicated to third parties entitled to communicate them to Us;
• GIVENCHY pages on social media that You consult and comment on/like.

If You wish, You may contact Our sales advisors and communicate with them by means of an instant messaging application such as WhatsApp, WeChat or a similar application. Our sales advisors will be pleased to respond to You through this channel. However, We remind You that GIVENCHY cannot guarantee the confidentiality and security of Your data or other information exchanged through such applications, which remain outside its control and for which GIVENCHY excludes all liability.

Such data or information may be transferred to territories located outside the European Economic Area. We therefore invite You to read the terms of use of these applications as well as their personal data protection policies.

2.3 FOR WHAT PURPOSES ARE YOUR PERSONAL DATA USED BY GIVENCHY?

As part of Our relationship, depending on the context in which your data are collected, We may use your data according to the corresponding legal basis:

2.4 RETENTION PERIOD

We retain your personal data only for as long as necessary to achieve the intended purpose, meet Your needs, or comply with Our legal obligations. As a general rule, Your personal data are retained in Our database only for the period reasonably necessary to pursue the purposes described above, or for the retention period permitted by law. If You are a customer (that is, You have purchased a GIVENCHY product): for a period not exceeding 5 years from your last interaction with Us.

If You are a prospect (that is, You have never purchased a GIVENCHY product but are interested in the GIVENCHY brand): 3 years from the collection of Your data. This period will be renewed each time You interact with GIVENCHY (for example, participation in an event).

If You are a customer of Our Haute Couture Department, the data concerning You will be retained for a longer period, which will be communicated to You, in order to meet the needs and expectations specific to this type of service.

If cookies are placed on Your device, We retain them for a period not exceeding 13 months.

At the end of the retention periods, Your personal data are deleted or anonymized so that You can no longer be identified, except for certain specific processing operations for which the data may be retained for a longer period, not exceeding the applicable statutory limitation periods.

2.5 RECIPIENTS OF YOUR PERSONAL DATA

Your data are intended for the GIVENCHY departments concerned by Your requests. We ensure that only duly authorized persons may access Your personal data where necessary for the above-mentioned purposes. We do not provide Your data to third parties for commercial purposes. We may communicate Your information only where necessary, and where possible in a form that does not allow direct identification, to:

• Other GIVENCHY entities: only to authorized staff whose activities justify access to the information for internal audit, administrative management or invoicing purposes, but also to ensure that You benefit from the same quality of service regardless of the country or region in which You make a purchase;
• Our trusted third-party service providers, acting as processors in accordance with Our instructions and solely on Our behalf.

For example, We entrust certain services to third parties responsible for delivering a product to You, payment service providers and transaction security providers for fraud prevention, third parties assisting Us in organizing Our events, third parties providing IT services, digital communication and public relations agencies, advertising services providers (including online), and third parties assisting Us with customer service.

Payments made through our e-commerce Site are managed in conjunction with the relevant banking institutions, and our partners enable us to accept and manage payments and secure payment data. Your personal data, including your name, email address, delivery details, telephone number, details of the order placed, and details of your credit card or any other payment method, will be used by our trusted service providers exclusively for the purpose of providing fraud prevention services. This automated data processing is intended to determine a transaction analysis level and combat fraud.

2.6 TRANSFER OF YOUR DATA

As GIVENCHY has foreign subsidiaries and/or affiliated companies and uses processors located abroad, the recipients of your Data may be located abroad, including outside the European Economic Area (hereinafter the “EEA”), for example to access your purchase history from a boutique other than Your main boutique or to secure your e-commerce transactions against fraud.

Any transfer of Data outside the EEA, in particular to a State for which there is no adequacy decision issued by the European Commission, is carried out subject to appropriate safeguards, in particular contractual safeguards, in accordance with the regulations applicable to the protection of personal data, or any other valid transfer mechanism that may become available in the future.

2.7 SECURITY AND CONFIDENTIALITY OF PERSONAL DATA

GIVENCHY has implemented appropriate technical and organizational measures to ensure the confidentiality and security of Your personal data against any loss, destruction, alteration, unauthorized access or disclosure.

GIVENCHY’s IT systems are subject to physical and software protection in accordance with industry standards. Physical and electronic backup procedures for data collected on the GIVENCHY website are implemented. GIVENCHY’s service providers and processors are bound by commitments to implement appropriate security measures to ensure the protection of Your personal data in compliance with applicable legislation.

However, as the Internet is not completely secure, We cannot guarantee that Your personal information stored or transmitted will be totally secure. We encourage You to exercise caution and vigilance when using the Internet to access Our websites, applications or social media.

2.8 PROTECTION OF MINORS

GIVENCHY has adopted practices designed to ensure that We do not intentionally or knowingly collect or retain any information concerning minors under the age of 18, although We do not control the age of users of our services.

If You are under 18 years of age, You must not submit personal data to Us without the authorization of Your parents or guardian. If a parent or guardian of a child under 18 believes that the child has provided Us with personal data, that child’s parent or guardian is requested to contact Us; see the “Contact Us” section below. If We learn that We have inadvertently collected information relating to a person under the age of 18, We will delete it immediately.

2.9 YOUR RIGHTS

In accordance with applicable legislation, You have the following rights:

• Withdrawal of consent: You may withdraw Your consent at any time for any personal data processing based on it, without affecting the lawfulness of the processing carried out before such withdrawal.
• Access: You may ask Us whether Your personal data are being processed and, if so, obtain information on the conditions of such processing, access Your data and receive a copy thereof.
• Rectification: You may request the correction or updating of Your personal data if they prove to be inaccurate or incomplete.
• Erasure: You may request the deletion of Your personal data. However, GIVENCHY may retain certain data where their processing remains necessary to comply with a legal obligation or for the establishment, exercise or defense of legal claims.
• Restriction (i.e. storage without use of personal data): You may request the restriction of the processing of Your personal data in the following cases: if the accuracy of the data is contested; if the processing is unlawful but You do not wish them to be erased; if they are still necessary for the establishment, exercise or defense of legal claims; or during the verification of compelling legitimate grounds following the exercise of Your right to object. GIVENCHY may nevertheless use Your data following a request for restriction in the following cases: with Your consent; for the establishment, exercise or defense of legal claims; or to protect the rights of another person.
• Portability: You may request to receive Your personal data in a structured, commonly used and machine-readable format, or request that they be transmitted directly to another data controller where technically feasible and where the processing is based on Your consent or on the performance of a contract, and is carried out by automated means.
• Post-mortem instructions: You have the right to define instructions regarding the fate of Your personal data after your death.
• Right to object:
  • on grounds relating to Your particular situation, to processing based on GIVENCHY’s legitimate interest. In such case, We will cease the relevant processing unless We can demonstrate compelling legitimate grounds overriding Your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defense of legal claims;
  • to the processing of Your data for direct marketing purposes. In this respect, You may request at any time no longer to receive communications relating to our offers, products, news and events.

You also have the right to lodge a complaint with any competent supervisory authority.

3. CONTACT US

If You have any questions regarding the Privacy Policy, GIVENCHY’s personal data protection practices, or if You wish to exercise any of the above rights, please contact Us by email at the following address: mydata@givenchy.com.

September 2026