Privacy Policy

Maison Richefort – Privacy Policy

Last updated: 15-10-2025

Privacy Policy

This Privacy Policy explains how Maison Richefort (“we”, “us”, or “our”) collects, uses, and discloses your personal data when you visit our website www.maisonrichefort.com (the “Website”), use our services, make a purchase, or otherwise interact with us.

In this Privacy Policy, “you” refers to any individual who interacts with us, whether as a customer, a visitor to the Website, or another person whose data we collect.

Please read this Privacy Policy carefully. By accessing or using our services, you acknowledge that your personal data will be handled in accordance with this Privacy Policy and applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK Data Protection Act, the California Consumer Privacy Act (CCPA/CPRA), Canada’s PIPEDA, and the Privacy Acts in Australia and New Zealand.

Nothing in this Privacy Policy limits your statutory rights under these laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. When we make significant changes, we will:

update the “Last Updated” date at the top of this page,
post the revised version on the Website, and
provide additional notice (such as by email or a notice on our Website) if required by law.

How We Collect and Use Your Personal Data

To provide and improve our services, we collect personal data from various sources. The type of data collected depends on how you interact with us. Over the past 12 months, we have collected and used the following categories of data:

Contact information (such as name, email address, phone number, shipping and billing address) → to process orders, deliver products, and communicate with you.
Payment information (such as payment method and transaction details, but never full card numbers stored by us) → to complete purchases securely.
Account information (such as login credentials, preferences, and saved items) → to operate and personalize your account.
Usage information (such as browsing history, device type, IP address, and interaction with our Website) → to improve our Website, analyze performance, and prevent fraud.
Marketing preferences (such as opt-ins for newsletters or promotions) → to send updates, offers, or personalized communications, where permitted.

We also use your personal data to:

Communicate with you about orders, products, or inquiries.
Deliver, maintain, and improve our services.
Comply with legal obligations.
Enforce our Terms and Conditions.
Protect our rights, our services, users, or third parties.

Cookies

Like many websites, Maison Richefort uses cookies and similar technologies to enhance your browsing experience.

We use cookies to:

operate and improve the Website (including saving your preferences),
conduct analytics,
better understand user behavior, and
enable personalized services, content, and advertising (only where permitted by law and with your consent where required).

We may also allow approved third parties and service providers to place cookies on our Website to tailor services, products, and advertisements across our Website and other platforms.

Most browsers accept cookies by default. You can adjust your settings to block or delete cookies. Please note that doing so may affect certain Website functionalities. Blocking cookies may not fully prevent data sharing with advertising partners.

Depending on your location:

EU/UK users may manage consent for cookies and opt out of personalized advertising in accordance with the GDPR and UK Data Protection Act.
California residents may opt out of the “sale” or “sharing” of personal data under the CCPA/CPRA.
Canada, AU, NZ residents may opt out of marketing cookies as required by local privacy laws.

For more details on cookies used in connection with our Shopify-powered store, see Shopify’s Cookies Policy (available on shopify.com).

How We Share Personal Data

Under certain circumstances, Maison Richefort may share your personal data with third parties for legitimate purposes, as described in this Privacy Policy. Such sharing may occur in the following cases:

Service providers and contractors acting on our behalf (e.g., IT management, payment processing, analytics, customer support, cloud storage, order fulfillment, and shipping). These parties are contractually bound to process data only as instructed and in compliance with applicable privacy laws.
Business and marketing partners, including Shopify, for service provision and, where legally permitted, targeted advertising. These partners handle your data in accordance with their own privacy policies and only within the limits of applicable legislation (e.g., GDPR, CCPA).
With your consent or direction, such as when using social media widgets, login integrations, or requesting that we share data to complete product delivery.
Affiliated companies, where necessary for internal business operations and only to the extent permitted by applicable law.
Legal and compliance purposes, including business transactions (e.g., mergers, acquisitions), responding to lawful requests (such as subpoenas or court orders), enforcing our Terms, or protecting our services, rights, and users, where required or permitted by law.

Disclosures in the Past 12 Months

We have disclosed the following categories of data in the last 12 months for the purposes outlined above:

Data Category	Recipients
Identifiers (e.g., name, email, shipping address)	Service providers, marketing partners, affiliates
Commercial information (e.g., orders, support interactions)	Service providers, affiliates
Internet/network activity (e.g., IP, browser data, site usage)	Service providers, marketing partners

We do not use or disclose sensitive personal data (e.g., government ID, financial account credentials, health data) for profiling or without a valid legal basis or your consent.

“Sale” or “Sharing” of Data for Advertising

As defined under certain privacy laws (such as the CCPA/CPRA in California), in the past 12 months we have “sold” or “shared” the following categories of personal data for targeted advertising and marketing purposes:

Personal Data Category	Recipient Types
Identifiers (e.g., email, account/order data)	Business & marketing partners
Purchase data (e.g., product/service details)	Business & marketing partners
Website usage data	Business & marketing partners

You have the right to opt out of the “sale” or “sharing” of your data for advertising purposes, as described in the Your Privacy Rights section of this Policy.

User-Generated Content

Our services may allow you to post product reviews or other content in public areas. Please note that any information you choose to share publicly may be viewed, collected, or used by others, including third parties.

We cannot control how third parties use such public information. You are responsible for the information you share, but your statutory rights under applicable privacy laws remain unaffected.

Third-Party Websites and Links
Our Website may contain links to third-party websites or platforms. When you follow those links, you are subject to their respective privacy policies and terms. We are not responsible for the content, data practices, or privacy protections of such third-party websites. Please review their privacy notices carefully.

Any information you share publicly on third-party platforms (such as social media) may be visible and used by others. The inclusion of such links does not imply our endorsement unless explicitly stated.

Children’s Data
Our services are not directed to children, and we do not knowingly collect personal data from individuals under the age of 18.

In the EU/UK, the minimum age for valid online consent is generally 16.
In the US (COPPA), the minimum is 13.
In Canada, AU, and NZ, similar age thresholds apply under local law.

If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately so we can delete it. We are not aware of any “sharing” or “sale” of minors’ personal data as defined by applicable laws.

Data Security and Retention
We use appropriate technical and organizational measures to protect your personal data. These measures include encryption, firewalls, access controls, and regular security assessments. However, no system is completely secure, and we advise against sending sensitive information via unsecured channels.

We retain your personal data only as long as necessary to operate your account, deliver services, comply with legal obligations, and resolve disputes. For example, under EU and Dutch tax law, we are required to store order and invoice records for 7 years. After legal or operational retention periods expire, your personal data will be securely deleted or anonymized.

Your Rights and Choices
Depending on your location, you may have the following rights under applicable privacy laws:

EU/UK (GDPR & UK DPA): access, correction, deletion, restriction, portability, objection, and withdrawal of consent.
US (CCPA/CPRA, state laws): access, correction, deletion, opt out of “sale” or “sharing” of data, and non-discrimination.
Canada (PIPEDA): access, correction, and withdrawal of consent.
AU/NZ (Privacy Acts): access, correction, and complaint rights.

In all regions, you may manage your communication preferences (such as unsubscribing from emails).

To exercise these rights, please contact us using the details below. We may need to verify your identity before processing your request.

Advertising and Shopify Services
We use advertising services, including Shopify Audiences, to deliver personalized marketing. If you do not want your data used by Shopify merchants for advertising purposes, you may opt out via:Shopify Privacy Tools.

You may also opt out of targeted advertising more broadly by adjusting your cookie preferences or exercising your local privacy rights (see above).

Complaints
If you are not satisfied with how we handle your personal data, you have the right to file a complaint with your local data protection authority.

Examples include:
– Data Protection Commission (Ireland)
– Information Commissioner’s Office (United Kingdom)
– Federal Trade Commission (United States)
– Office of the Privacy Commissioner of Canada (Canada)
– Office of the Australian Information Commissioner (Australia)
– New Zealand Privacy Commissioner (New Zealand)

We will cooperate with the relevant supervisory authorities to resolve any concerns.

You also have the right to seek judicial remedy if you believe your privacy rights have been violated.

International Users and Data Transfers
Your personal data may be transferred, stored, and processed outside your country of residence, including in the United States, Canada, or other countries where our service providers and partners are located.

When transferring personal data outside the EU/UK, we rely on recognized legal transfer mechanisms, such as the European Commission’s Standard Contractual Clauses (SCCs) or UK-approved equivalents, unless the destination country has been officially recognized as providing adequate protection.

When personal data is transferred internationally, it may be subject to the laws of the receiving jurisdiction. This means that courts, law enforcement, or regulatory authorities in those countries may access your data under local laws.

These laws may differ from those in your home country, and local authorities in the receiving jurisdiction may have access to your data under applicable legislation

All international transfers are carried out with appropriate safeguards to ensure your personal data remains protected in line with applicable privacy and consumer protection legislation.

Contact Information
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:
Email: support@maisonrichefort.com
Phone: +1 437 537 5387
Address: Kreilerhof 33, 2151PJ Nieuw-Vennep, Netherlands (this is not a return address)
Business Name: E-Commerce QJ
Chamber of Commerce (KvK): 94704635
VAT Number: NL866865342B01

E-Commerce QJ, trading as Maison Richefort, acts as the data controller for the purposes of the GDPR, the UK Data Protection Act, and other applicable privacy laws.

Customer Service Availability:
Monday to Friday, 9:00 AM – 5:00 PM (Central European Time, CET).
We aim to respond to all inquiries within 24 hours on business days.