Privacy Policy

The controller responsible for the processing of your personal data within the meaning of Regulation (EU) 2016/679 ("GDPR") is:

• Maison Rich, operating the brand "Maison Rich Paris"
• Registered office: [ADDRESS TO BE ADDED], Belgium
• Enterprise number (KBO/BCE): 0797.788.277 — VAT BE 0797.788.277
• Contact: info@maisonrichparis.com

• Identification data: first and last name.
• Contact data: email address, phone number, shipping and billing address.
• Order data: products purchased, prices, order history.
• Payment data: processed directly by our payment service provider; we never store full card details.
• Technical data: IP address, browser, device, language, pages viewed (via cookies — see our Cookie Policy).
• Communication data: messages you send us, newsletter preferences.

• Processing and shipping your order, customer service, returns and warranty: performance of the sales contract (art. 6 (1)(b) GDPR).
• Invoicing and accounting: compliance with a legal obligation (art. 6 (1)(c) GDPR).
• Fraud prevention and security: legitimate interest in protecting our business and customers (art. 6 (1)(f) GDPR).
• Newsletter and marketing emails: your prior consent, which you may withdraw at any time (art. 6 (1)(a) GDPR).
• Analytics and personalised advertising cookies: your prior consent given via our cookie banner (art. 6 (1)(a) GDPR and art. 129 of the Belgian Electronic Communications Act).

We share personal data only with service providers strictly necessary to deliver our service, who act as processors on our behalf and are bound by data processing agreements:

• Hosting and infrastructure providers
• Payment service providers (for example Stripe / Mollie)
• Shipping carriers (for example BPost) for delivery of your order
• Email and CRM platforms for transactional and (with consent) marketing communications
• Analytics providers (only if you accept analytics cookies)
• Accountants and tax advisors, where legally required

We do not sell your personal data to third parties.

Some of our service providers may process data outside the European Economic Area. Where this is the case, we ensure an adequate level of protection through European Commission adequacy decisions or the use of Standard Contractual Clauses.

• Order and invoice data: 7 years (Belgian accounting and tax obligations).
• Customer account data: for the lifetime of the account, plus a reasonable archival period.
• Newsletter data: until you unsubscribe, then deleted within 30 days.
• Cookie data: see the durations in our Cookie Policy.
• Customer service correspondence: up to 2 years after the last contact.

Under the GDPR, you have the right to:

• Access your personal data and request a copy
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten") where applicable
• Restrict processing
• Object to processing based on legitimate interest
• Data portability
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
• Lodge a complaint with the Belgian Data Protection Authority — Drukpersstraat 35, 1000 Brussels — gegevensbeschermingsautoriteit.be

To exercise any of these rights, contact us at info@maisonrichparis.com. We may ask you to verify your identity before acting on your request, and we will respond within one month.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure, including encryption in transit, access controls and regular security reviews.

Detailed information about the cookies we use, their purposes and durations, and how to manage your consent is available on our Cookie Policy page.

We may update this Privacy Policy from time to time to reflect legal, technical or business changes. The "Last updated" date at the top of this page indicates when the latest changes were made. Material changes will be notified through the website or by email where required by law.