Privacy policy
Privacy Policy
Last updated: November 1, 2026
1. Who we are
Maison Marteen places great importance on protecting your personal data. This policy explains what data we collect on the website www.maisonmarteen.com, why we collect it, who we share it with, how long we keep it and how you can exercise your rights. It complies with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and the amended French Data Protection Act (Loi Informatique et Libertés) of January 6, 1978.
Data controller
Company name: MAISON MARTEEN, a French simplified joint-stock company (SAS) with a share capital of €1,000
Registered office: 38 rue Beaujon, 75008 Paris, France
Paris Trade and Companies Register (RCS) 130 588 940 — SIRET: 130 588 940 00010
Intra-community VAT number: FR31130588940
President: AC CONSULTING
Personal data contact: axelle@maisonmarteen.com
We have not appointed a Data Protection Officer (DPO), as this is not mandatory for our activity. Any questions may be sent to the address above.
2. Data collected, purposes and legal bases
We only collect the data necessary for each purpose. Mandatory fields are marked with an asterisk; without them, we cannot process your request.
| Purpose | Data concerned | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Processing and delivering orders, invoicing, after-sales service | Last name, first name, delivery and billing addresses, email, phone number, order details (including designs created in the configurator) | Performance of a contract |
| Online payment | Transaction data; card details are entered directly with the payment provider and are never stored by Maison Marteen | Performance of a contract |
| Customer account management | Login credentials, order history, saved addresses | Performance of a contract |
| Answering your questions via the contact form, email or WhatsApp | Name, email or phone number, content of exchanges | Legitimate interest (responding to your requests) or pre-contractual measures |
| Newsletter and marketing emails (Klaviyo) | Email, first name, preferences, email opens and clicks | Consent |
| Follow-up emails (abandoned cart, products similar to a recent purchase) sent to customers | Email, cart or order contents | Legitimate interest (Art. L34-5 of the French Postal and Electronic Communications Code), with the right to object at any time |
| Audience measurement and non-essential cookies | Cookie identifiers, pages viewed, browsing data | Consent |
| Accounting and tax obligations | Invoices, transaction data | Legal obligation |
We do not make any decision based solely on automated processing that produces legal effects concerning you. We do not sell your personal data.
3. Recipients and processors
Your data is accessible to authorized Maison Marteen staff and to the service providers listed below, who act on our instructions under a contract compliant with Article 28 of the GDPR. It may also be disclosed to authorities where required by law.
| Provider | Role | Location | Privacy policy |
|---|---|---|---|
| Shopify International Limited | Website hosting, order management, customer accounts and payments (Shopify Payments, operated in partnership with Stripe) | Ireland, with possible transfers to Canada and the United States | shopify.com/legal/privacy |
| Klaviyo, Inc. | Sending the newsletter, marketing and follow-up emails, managing subscriber lists | United States | klaviyo.com/legal/privacy |
| WhatsApp Ireland Limited (Meta group) | Messaging service used when you contact us via WhatsApp | Ireland, with possible transfers to the United States | whatsapp.com/legal/privacy-policy-eea |
| DHL (DHL Group) | Order delivery (name, address, phone number) | Germany and the parcel’s destination country, including outside the EU for international shipments | dhl.com — privacy notice |
About WhatsApp. If you choose to message us on WhatsApp, your number and messages pass through WhatsApp’s servers. WhatsApp also processes certain data on its own behalf, in accordance with its privacy policy, which you accepted when creating your account. We will never add you to a WhatsApp broadcast list without your express consent. If you prefer, you can always reach us by email.
4. Transfers outside the European Union
Some providers (Shopify, Klaviyo, WhatsApp) may process your data in Canada or the United States. These transfers are governed by one of the safeguards provided for in Articles 45 and 46 of the GDPR:
- an adequacy decision of the European Commission for Canada;
- for the United States, the provider’s certification under the EU–U.S. Data Privacy Framework where available, or otherwise standard contractual clauses adopted by the European Commission, supplemented where necessary by additional security measures.
You can obtain a copy of these safeguards by writing to axelle@maisonmarteen.com.
5. Retention periods
We keep your data for as long as necessary for each purpose, then delete or anonymize it. Where a legal obligation requires it, certain data is archived with restricted access.
| Data | Retention period |
|---|---|
| Order and delivery data | Duration of the business relationship, then archived for 5 years (commercial limitation period, Art. L110-4 of the French Commercial Code) |
| Online contracts of €120 or more | 10 years from delivery (Art. L213-1 and D213-1 of the French Consumer Code) |
| Invoices and accounting records | 10 years from the end of the financial year (Art. L123-22 of the French Commercial Code) |
| Bank card data | Not stored by Maison Marteen; handled by the payment provider for the duration of the transaction and any disputes |
| Customer account | Until you delete it, or 3 years after your last activity |
| Customer data used for marketing (Klaviyo) | 3 years after your last purchase or last contact with us |
| Newsletter subscribers who are not customers | 3 years after sign-up or your last interaction (open, click); unsubscribe requests take effect immediately |
| Proof of consent or unsubscription | 5 years |
| Exchanges via form, email or WhatsApp | 3 years after the last exchange (except order-related data, kept as stated above) |
| Cookies and trackers | 13 months maximum from placement |
| Your cookie preferences | 6 months, after which we ask for your choice again |
6. Cookies and trackers
On your first visit, a banner allows you to accept, refuse or customize non-essential cookies. Refusing is as easy as accepting, and you can change your choice at any time via the “Manage cookies” link at the bottom of the page.
- Strictly necessary cookies (cart, session, security, remembering your display preferences): placed without consent, as they are essential for the website to function.
- Audience measurement cookies: placed only with your consent, unless they qualify for the exemption provided by the CNIL (French Data Protection Authority).
- Marketing cookies (including Klaviyo tracking of browsing and carts for personalized emails): placed only with your consent.
A detailed list of the cookies used, including their issuer and duration, is available in the website’s cookie manager.
7. Your rights
You have the following rights over your data at any time:
- the right of access and to obtain a copy of your data;
- the right to rectify inaccurate or incomplete data;
- the right to erasure, except where we must keep the data to meet a legal obligation;
- the right to restrict processing;
- the right to portability of the data you have provided to us;
- the right to object, in particular to direct marketing, without having to give a reason;
- the right to withdraw your consent at any time, without affecting processing already carried out;
- the right to set instructions regarding what happens to your data after your death (Art. 85 of the French Data Protection Act).
How to exercise them. Write to us at axelle@maisonmarteen.com or by post to MAISON MARTEEN, 38 rue Beaujon, 75008 Paris, France. We will respond within one month, which may be extended by two months for complex requests; in that case, we will let you know. If we have reasonable doubts about your identity, we may ask for proof. To unsubscribe from the newsletter, simply click the unsubscribe link included in every email.
Complaint to the CNIL. If you believe your rights have not been respected, you may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr/fr/plaintes.
Opting out of telephone marketing. You can register free of charge on the Bloctel list (bloctel.gouv.fr).
8. Security
We implement appropriate technical and organizational measures to protect your data: encrypted connection (HTTPS), payments processed by PCI DSS-certified providers, and data access restricted to authorized personnel and protected by strong authentication. In the event of a data breach posing a risk to you, we will notify the CNIL and, where necessary, inform you in accordance with the GDPR.
9. Minors
The website is intended for adults. We do not knowingly collect data from minors under 15 without the consent of a holder of parental authority. If you believe a minor has provided us with data, please contact us so that we can delete it.
10. Changes to this policy
We may update this policy to reflect changes to our services or to regulations. The date of the last update appears at the top of this page. In the event of a significant change, we will inform you by email or through a notice on the website.