Privacy policy

Last updated: 10 October 2026

Your privacy matters to us. This policy explains what personal data Maison Jollise collects when you visit maisonjollise.com, place an order, join our members' club or contact us; why we use it; who we share it with; and the rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

Maison Jollise is the data controller. Our full company details are listed in our Legal notice. For any privacy question or request, write to contact@maisonjollise.com.

2. What we collect

  • Contact and delivery details: name, email address, phone number, billing and delivery address.
  • Order details: products bought, prices, discount codes used, returns and refunds.
  • Payment details: payment method and confirmation. Card details are handled by our payment providers; we never see or store your full card number.
  • Account details: if you create an account, your login and preferences.
  • Communications: messages you send us by email, live chat or contact form.
  • Device and usage data: IP address, browser, device type, pages viewed and how you arrived on our site, collected through cookies and similar technologies (see section 7).

3. Why we use it, and our legal basis

  • To process and deliver your order, handle returns and provide customer service — necessary to perform our contract with you.
  • To keep accounting and tax records — required by law.
  • To prevent fraud and keep our store secure — our legitimate interest.
  • To understand and improve our website through analytics — your consent, given through our cookie banner.
  • To send you our members' club emails, early access and offers — your consent, which you can withdraw at any time with the unsubscribe link in every email.
  • To show you relevant ads on other platforms — your consent, given through our cookie banner.

4. Who we share it with

We never sell your personal data. We share only what is necessary with trusted service providers who process it on our behalf:

  • Shopify — our e-commerce platform, which hosts our store and processes checkout and payments.
  • Our suppliers and packing partners — only where needed to prepare your order. They receive your name, delivery address and the items ordered.
  • Couriers and tracking providers — to deliver your parcel and send you tracking updates.
  • Payment providers (such as Shopify Payments and PayPal, where offered) — to process payments and prevent fraud.
  • Email, live chat, review and analytics tools we use to communicate with you and improve our service.
  • Authorities — where the law requires it.

5. International transfers

Some of our providers may process data outside the European Economic Area. When that happens, we rely on safeguards recognised by the GDPR, such as an adequacy decision of the European Commission or the Commission's Standard Contractual Clauses.

6. How long we keep it

  • Order and invoicing data: for the period required by Romanian accounting law (currently up to 10 years).
  • Customer service messages: up to 3 years after your last contact.
  • Newsletter data: until you unsubscribe.
  • Cookies: for the periods shown in our cookie banner, and never longer than 13 months for non-essential cookies.

7. Cookies

We use cookies and similar technologies. Essential cookies make the store work (your cart, checkout, language and currency) and cannot be switched off. Analytics and marketing cookies are only set if you accept them in our cookie banner. You can change your choice at any time through the cookie preferences link in the footer, or by clearing cookies in your browser.

8. Your rights

Under the GDPR you have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time (without affecting processing that took place before). To exercise any of these rights, email contact@maisonjollise.com. We'll reply within one month. We may need to verify your identity first.

You also have the right to complain to a data protection authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro). You may also contact the authority in your own EU country.

9. Children

Our store is not intended for children under 16, and we do not knowingly collect their personal data.

10. Security

Our store runs on a secure, encrypted (HTTPS) platform, and access to personal data is limited to the people and providers who need it. No system is completely secure, so please never send card details by email or chat.

11. Changes to this policy

We may update this policy when our practices or the law change. The date at the top shows the latest version.

12. More about Shopify

Our store is hosted by Shopify, which processes some data as an independent controller to provide and improve its services. You can learn more in the Shopify Consumer Privacy Policy, and exercise your rights through the Shopify Privacy Portal.