Privacy Policy

This English translation is provided for information only. In the event of any discrepancy, the French version prevails.

MAISON CHARLEE
PRIVACY POLICY

1. DATA CONTROLLER
MAISON CHARLEE
149 avenue d’En Carbouner, 66160 Le Boulou, France
SIRET: 478 869 647 000 48
EU VAT number: FR56478869647
Email: contact@maisoncharlee.com
Maison Charlee acts as data controller within the meaning of Regulation (EU) 2016/679 (GDPR).

2. DATA COLLECTED
The data that may be collected is:
- First and last name
- Postal address
- Email address
- Phone number
- Payment data (via a secure provider)
- Browsing data (cookies, IP address, technical logs)
Data needed to process orders is mandatory. If the required information is not provided, the order cannot be processed.

3. PURPOSES OF PROCESSING
Data is collected for:
- Order management and tracking
- Invoicing and accounting obligations
- Customer service
- Handling complaints and returns
- Improving the user experience
- Compliance with legal and regulatory obligations

4. LEGAL BASIS FOR PROCESSING (ARTICLE 6 GDPR)
Processing is based on:
- Article 6.1.b: performance of the contract
- Article 6.1.c: compliance with a legal obligation
- Article 6.1.a: consent (non-essential cookies, marketing where applicable)

5. RECIPIENTS OF THE DATA
Data may be passed on to technical providers involved in processing: host (Shopify), secure payment providers, carriers. These providers act as processors within the meaning of the GDPR and are contractually bound to ensure the confidentiality and security of the data.

6. TRANSFERS OUTSIDE THE EUROPEAN UNION
As the site is hosted by Shopify, some data may be transferred outside the European Union. These transfers are governed by appropriate safeguards, in particular the standard contractual clauses approved by the European Commission.

7. RETENTION PERIOD
Data is kept for a period proportionate to the purposes pursued:
- Customer data: 5 years after the end of the business relationship
- Invoicing data: 10 years (accounting obligation)
- Cookies: in line with CNIL recommendations

8. RIGHTS OF DATA SUBJECTS
In accordance with the GDPR (EU 2016/679), you have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to object
- Right to restriction of processing
- Right to data portability
Any request may be sent to: contact@maisoncharlee.com. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

9. SECURITY
Maison Charlee implements appropriate technical and organisational measures to ensure a level of security suited to the risk and to protect data against unauthorised access, loss, alteration or disclosure.

10. CHANGES TO THIS POLICY
This policy may be updated at any time. The applicable version is the one published on the site on the date you consult it.