Privacy Policy

Maison Richefort – Privacy Policy

Last updated: 15-09-2025

Privacy Policy

This Privacy Policy explains how Maison Richefort (“we”, “us”, or “our”) collects, uses, and discloses your personal data when you visit our website www.maisonrichefort.com (the “Website”), use our services, make a purchase, or otherwise interact with us.

In this Privacy Policy, “you” refers to any individual who interacts with us, whether as a customer, a visitor to the Website, or another person whose data we collect.

Please read this Privacy Policy carefully. By accessing or using our services, you acknowledge that your personal data will be handled in accordance with this Privacy Policy and applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK Data Protection Act, the California Consumer Privacy Act (CCPA/CPRA), Canada’s PIPEDA, and the Privacy Acts in Australia and New Zealand.

Nothing in this Privacy Policy limits your statutory rights under these laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. When we make significant changes, we will:

update the “Last Updated” date at the top of this page,
post the revised version on the Website, and
provide additional notice (such as by email or a notice on our Website) if required by law.

How We Collect and Use Your Personal Data

To provide and improve our services, we collect personal data from various sources. The type of data collected depends on how you interact with us. Over the past 12 months, we have collected and used the following categories of data:

Contact information (such as name, email address, phone number, shipping and billing address) → to process orders, deliver products, and communicate with you.
Payment information (such as payment method and transaction details, but never full card numbers stored by us) → to complete purchases securely.
Account information (such as login credentials, preferences, and saved items) → to operate and personalize your account.
Usage information (such as browsing history, device type, IP address, and interaction with our Website) → to improve our Website, analyze performance, and prevent fraud.
Marketing preferences (such as opt-ins for newsletters or promotions) → to send updates, offers, or personalized communications, where permitted.

We also use your personal data to:

Communicate with you about orders, products, or inquiries.
Deliver, maintain, and improve our services.
Comply with legal obligations.
Enforce our Terms and Conditions.
Protect our rights, our services, users, or third parties.

Cookies

Like many websites, Maison Richefort uses cookies and similar technologies to enhance your browsing experience.

We use cookies to:

operate and improve the Website (including saving your preferences),
conduct analytics,
better understand user behavior, and
enable personalized services, content, and advertising (only where permitted by law and with your consent where required).

We may also allow approved third parties and service providers to place cookies on our Website to tailor services, products, and advertisements across our Website and other platforms.

Most browsers accept cookies by default. You can adjust your settings to block or delete cookies. Please note that doing so may affect certain Website functionalities. Blocking cookies may not fully prevent data sharing with advertising partners.

Depending on your location:

EU/UK users may manage consent for cookies and opt out of personalized advertising in accordance with the GDPR and UK Data Protection Act.
California residents may opt out of the “sale” or “sharing” of personal data under the CCPA/CPRA.
Canada, AU, NZ residents may opt out of marketing cookies as required by local privacy laws.

For more details on cookies used in connection with our Shopify-powered store, see Shopify’s Cookies Policy (available on shopify.com).

How We Share Personal Data

Under certain circumstances, Maison Richefort may share your personal data with third parties for legitimate purposes as described in this Privacy Policy. Such sharing may occur in the following cases:

Service providers and contractors acting on our behalf (e.g., IT management, payment processing, analytics, customer support, cloud storage, order fulfillment, and shipping).
Business and marketing partners, including Shopify, for service provision and targeted advertising. These partners handle your data in accordance with their own privacy policies.
With your consent or direction, such as when using social media widgets, login integrations, or directing us to share data for product delivery.
Affiliated companies, where necessary for internal business operations and consistent with our legitimate interests.
Legal and compliance purposes, including business transactions (e.g., mergers, acquisitions), responding to lawful requests (e.g., subpoenas, warrants), enforcing our Terms, or protecting our services, rights, and users.

Disclosures in the Past 12 Months

We have disclosed the following categories of data in the last 12 months for the purposes outlined above:

Data Category	Recipients
Identifiers (e.g., name, email, shipping address)	Service providers, marketing partners, affiliates
Commercial information (e.g., orders, support interactions)	Service providers, affiliates
Internet/network activity (e.g., IP, browser data, site usage)	Service providers, marketing partners

We do not use or disclose sensitive personal data (e.g., government ID, financial account credentials, health data) for profiling or without a valid legal basis or your consent.

“Sale” or “Sharing” of Data for Advertising

As defined under certain privacy laws (such as the CCPA/CPRA in California), in the past 12 months we have “sold” or “shared” the following categories of personal data for targeted advertising and marketing purposes:

Personal Data Category	Recipient Types
Identifiers (e.g., email, account/order data)	Business & marketing partners
Purchase data (e.g., product/service details)	Business & marketing partners
Website usage data	Business & marketing partners

You have the right to opt out of the “sale” or “sharing” of your data for advertising purposes, as described in the Your Privacy Rights section of this Policy.

User-Generated Content

Our services may allow you to post product reviews or other content in public areas. Please note that any information you choose to share publicly may be viewed, collected, or used by others, including third parties.

We cannot control how third parties use such public information. You are responsible for the information you share, but your statutory rights under applicable privacy laws remain unaffected.

Third-Party Websites and Links
Our Website may contain links to third-party websites or platforms. When you follow those links, you are subject to their respective privacy policies and terms. We are not responsible for the content, data practices, or privacy protections of such third-party websites. Please review their privacy notices carefully.

Any information you share publicly on third-party platforms (such as social media) may be visible and used by others. The inclusion of such links does not imply our endorsement unless explicitly stated.

Children’s Data
Our services are not directed to children, and we do not knowingly collect personal data from individuals under the age of 18.

In the EU/UK, the minimum age for valid online consent is generally 16.
In the US (COPPA), the minimum is 13.
In Canada, AU, and NZ, similar age thresholds apply under local law.

If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately so we can delete it. We are not aware of any “sharing” or “sale” of minors’ personal data as defined by applicable laws.

Data Security and Retention
We use appropriate technical and organizational measures to protect your personal data. However, no system is completely secure, and we advise against sending sensitive information via unsecured channels.

We retain your personal data only as long as necessary to:

operate your account,
deliver services,
fulfill contractual or legal obligations, and
resolve disputes or enforce agreements.

When retention is no longer necessary, your personal data will be securely deleted or anonymized.

Your Rights and Choices
Depending on your location, you may have the following rights under applicable privacy laws:

EU/UK (GDPR & UK DPA): access, correction, deletion, restriction, portability, objection, and withdrawal of consent.
US (CCPA/CPRA, state laws): access, correction, deletion, opt out of “sale” or “sharing” of data, and non-discrimination.
Canada (PIPEDA): access, correction, and withdrawal of consent.
AU/NZ (Privacy Acts): access, correction, and complaint rights.

In all regions, you may manage your communication preferences (such as unsubscribing from emails).

To exercise these rights, please contact us using the details below. We may need to verify your identity before processing your request.

Advertising and Shopify Services
We use advertising services, including Shopify Audiences, to deliver personalized marketing. If you do not want your data used by Shopify merchants for advertising purposes, you may opt out via:Shopify Privacy Tools.

You may also opt out of targeted advertising more broadly by adjusting your cookie preferences or exercising your local privacy rights (see above).

Complaints
If you have concerns about how we process your personal data, you can contact us using the details provided below. Depending on your location, you may also:

appeal our decision if we deny your request, or
file a complaint with your local data protection authority.

We will cooperate with regulatory authorities to resolve any complaints.

International Users and Data Transfers
Your personal data may be transferred, stored, and processed outside your country of residence, including in the US or other countries where our service providers are located.

When transferring personal data outside the EU/UK, we rely on recognized legal transfer mechanisms such as the European Commission’s Standard Contractual Clauses (SCCs) or UK-approved equivalents, unless the destination country is deemed to provide adequate protection.

All transfers are carried out with appropriate safeguards to ensure your data remains protected in line with applicable privacy laws.

Contact Information
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:
Email: support@maisonrichefort.com
Phone: +1 437 537 5387
Address: Kreilerhof 33, 2151PJ Nieuw-Vennep, Netherlands (this is not a return address)
Business Name: E-Commerce QJ
Chamber of Commerce (KvK): 94704635
VAT Number: NL866865342B01

E-Commerce QJ, trading as Maison Richefort, acts as the data controller for the purposes of the GDPR, the UK Data Protection Act, and other applicable privacy laws.

Customer Service Availability:
Monday to Friday, 9:00 AM – 5:00 PM (Central European Time, CET).
We aim to respond to all inquiries within 24 hours on business days.