DATA PRIVACY POLICY

This Policy ( « Policy » ) outlines the the data privacy and cookie practices of Maison 123, Etam SCE SAS subsidiaries of the Etam Group, also referred to as “we”, “our” , or “Maison 123”. This Policy aims to inform you of the conditions in which Maison 123 collects your personal data, reasons for which this information is collected, the use of this data, and your respective rights. This policy applies to all the information provided by you or collected by Maison 123 during your interaction(s) with us.

Maison 123 places great importance on the protection and respect of your privacy. As this is a subject of significant importance, we urge you to read our privacy policy carefully and in its entirely to know and understand our practices regarding the collection of your personal data. This Policy establishes rules concerning the personal data of all our customers and prospects, regardless of the data collection channel.

When referring to our platform, we are mean to one of the digital and/or physical channels or means through which you can interact with us, such as the website, https://maison123.co.uk "Website"), mobile application, physical Maison 123 stores, mail, or telephone.

In the course of using our Platform, Maison 123 may process personal data concerning you, either collected directly from you or provided by you.

By using our Platform, you are bound by the currently effective Policy, signifying your acceptance of it. As we reserve the right to modify our Policy at any time in accordance with the conditions outlined in Article 7, we strongly recommend reviewing it before every use of our Platform.

1. GENERAL INFORMATION

The distinct entities responsible for processing your personal data are:

MAISON 123, Simplified Joint-Stock Company, with its registered office at 57/59 rue Henri Barbusse 92110 Clichy, France. Registered with the RCS of Nanterre under number 444 600 464
ETAM SCE, Simplified Joint-Stock Company, with its registered office at 57/59 rue Henri Barbusse 92110 Clichy, France. Registered with the RCS of Nanterre under number 450 966 445

Marketing and e-commerce are managed by Maison 123. Therefore, your personal data may be used by either or both companies. Etam SCE is the service provider for the Etam Group and manages the information systems of the Etam Group. Together, we have established common directives and ensure the handling and protection of your personal data.

Through our platform, you may be prompted to provide Maison 123 with personal data, for example, in the context of creating your online customer account, product orders, or subscribing to the newsletter.

Maison 123 may also collect certain information about your navigation on the Site, as more extensively described in the “Cookies” section below.

In compliance with applicable regulations, POGGI AVOCAT IT, Anne-Sophie Poggi, lawyer at Court, 33 rue de l’Opéra, 75002 Paris, FRANCE has been appointed as the Data Protection Officer (DPO) for Maison 123 and Etam SCE.

Maison 123 relies on Global-e to proceed to the payment and execute your order. Therefore, Global-e is considered as Data controller for specific data processing. You may find more information at Article 5 of this privacy policy.

2. CONCERNING DATA

The data we collect, and use varies depending on the products, services, or features you wish to access. The personal data we collect or that you decide to provide include, in particular:

Identification Data: Such as your first name, last name, phone numbers, home address for order delivery, email address for creating your profile account and for sending the newsletter, photographs you provide, or images when you visit our stores equipped with surveillance systems.
Electronic Identification Data: Available on or from your computer (such as “cookies” or “IP addresses”). Your electronic identification data allows the identification or geolocation (no more specific than the city) of your connection terminal, or the pages viewed on the Website during your navigation and are generally insufficient alone to identify you nominatively. For more information on the collected browsing information, please refer to Article 6 regarding cookies and connection witnesses.
Data Related to Your Online or In-Store Purchases: For example, the type, quantity, and price of products purchased.
Data on Your Tastes and Preferences: Such as your preferences regarding our collections, color preferences, habits, and size.
Financial data: such as your credit card numbers and the name of the cardholder, your orders history.

3. YOUR RIGHTS

In accordance with the UK Data Protection Act (2018), as well as the European Regulation (EU) 2016/679 dated April 27, 2016, relating to the protection of personal data, you hold various rights concerning your personal data. These rights can be exercised directly and at any time by contacting us at privacy@maison123.com, at the postal addresses indicated in point 1 above, simply indicating the reason for your request and the right you wish to exercise. Once we receive your request, we commit to processing and responding to it diligently within a maximum period of 30 days. In case of doubt about your identity, we may ask for a copy of your identity card or other supporting documents. The rights you are entitled to are as follows:

The Right of Access: The right to request a copy of the personal data we hold about you. If your request is unfounded or excessive, we may charge you fees related to this request.
The Right to Rectification: The right to request the correction of inaccurate personal data we have about you. We remind you that if you have a customer account, you have the opportunity to access the section responding to your personal data to modify or update them. You must ensure that this data is true and accurate. Similarly, you commit to inform us of any changes or modifications to this data. We also remind you that, in principle, you should only provide your own personal data and not those of a third party. Any damage or loss caused by the communication of inaccurate or incomplete information in our data collection forms is exclusively the responsibility of the use of our Platform.
The Right to Erasure: The right to request the deletion of your data when one of the following conditions is met:

Your personal data is no longer necessary for the purposes of processing listed in Article 4 of this privacy policy.
You have withdrawn your consent, and there is no longer a legal basis justifying the continuation of the processing of your personal data.
You have validly exercised your right of objection.
The processing of your data is not legal.
Or your personal data must be erased to comply with a legal obligation.

However, there are cases where you cannot exercise your right to erasure, even if one of the conditions is filled (especially when the processing of your data is necessary for freedom of expression and information, in compliance with a legal obligation, the exercise/defense of a right in court, or for statistical, archival, public interest research, scientific or historical purposes).

To delete your customer account, you have the possibility to do it directly into your Maison 123 profile or by simply submit your request to privacy@maison123.com at the postal addresses in point 1.

The Right to Object: The right to object, for reasons relating to your specific situation, to the processing of your personal data based on our legitimate interest. In this case, we will cease processing your data unless we have a legitimate reason to continue processing your data. If your data is used for commercial prospecting purposes, you have the right to object without having to justify yourself.
The Right to Limit Processing: The right to request, in certain cases, the temporary suspension of the processing of some of your data or their retention, if necessary, for a longer period than necessary.
The Right to Data Portability: If the processing of your personal data is based on your consent or the execution of the contract, and if the processing is carried out by automated means, you have the right to request the receipt of data concerning you in a structured, commonly used, and machine-readable format, to be able to transfer them to another entity, provided that this is technically possible.
You also possess the right to withdraw your consent at any time for any processing based on content. To simply unsubscribe from our newsletter, just click on the unsubscribe link in each email.

You also possess the right to file a complaint against a supervisory authority, in the country of your residence, your place of work, or where the violation occurred, if you find that the processing of your personal data concerning you constitutes a violation of the applicable regulations.

In France, the supervisory authority is the following: Commission Nationale de l’Informatique et des Libertés (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, Tel : 0033 1 53 73 22 22

In the United Kingdom, you may lodge a complaint before the Information Commissioner’s Office https://ico.org.uk/make-a-complaint/

4. MANAGEMENT OF PERSONAL DATA BY MAISON 123

4.1 Purposes and Legal Bases for Data Collection

The following table elucidates the uses of your personal data by Maison 123 (“Purpose”) and the legal basis (“Legal Basis”):

PURPOSE: WHY DO WE PROCESS YOUR DATA?	LEGAL BASIS: WHAT IS THE FOUNDATION OF THIS PROCESSING?	MORE PRECISIONS
Execution and Tracking of Your Product Orders Placed on the Website	To fulfill the contract	For the proper execution of a purchase contract or service agreement you have entered with us, we process your data through out point-of-sale software. This processing is carried out to manage payments for the products you purchase, as well as to generate associated invoices. Additionally, we process your data to successfully deliver your products and handle any potential returns after the purchase.
		In the context of the purchase, management, and the use of the gift card. Please read the “Gift Card” section of our General Terms and Conditions of Sale for more information.
	Consent	Certain processing of your personal data associated with the purchase process, such as the storage of your payment card details for future purchases, is only activated when you explicitly consent to it.
	Legitimate Interest	When you make a purchase, we can carry out the necessary verifications for the detection and prevention of potential fraud.
Execute and Track Your Product Orders Placed In-Store	To fulfill the contract	When you make a purchase in one of our stores, to allow the for the proper execution of your purchase order, our sales representatives will process all your information through our internal application called “App-Mag”. This application is used for placing orders and making purchases in-store, ensuring the proper follow-up of the customer relationship.
Allow and Manage Your Registration as a User of Our Platform	Consent	In creating a user account online, you are indicating certain necessary personal data for identification and to grant you access to various features, services, information, and products available to you as a registered user. The processing of your data is therefore required for the execution of the general conditions of our platform.
Carrying our Commercial Prospecting and Marketing Activities	Consent	If you decide to subscribe to our newsletter, you are consenting us to process your personal data to manage your subscription and/or send you information about our products and/or services, as well as commercial prospecting messages through various means, such as email or SMS. If you participate in a contest via our Platform or our social media networks, you are consenting to your data being used for the purpose of the contest and for the delivery of the prizes you have won. Unless expressed consented by you, the collected data is not used for advertising purposes by us or our business partners. If you accept the above applicable legal terms and conditions (especially on the social networks you use), we may publish on our Platform or various social media networks photographs that you have shared publicly or with us. Subject to obtaining your prior consent, we may record data related to your preferences (such as your size or color preferences) to further personalize your experience with Maison 123.
	Legitimate interest	We have a legitimate interest in contacting you by phone or by mail to inform you of our commercial offers, as long as you to not object to this during the collection of your data (please note that you can oppose at any time by sending an email to privacy@maison123.com) Similarly, unless objected by you, we have a legitimate interest in sending you commercial communications through digital channels (e.g. SMS or e-mail) if you are already a client with us and if this communication uniquely concerns product or services similar to those we have already sent to you.
	Legitimate interest	Finally, to tailor our marketing strategies to your preferences and your needs to better serve you and respond to your inquiries (personalization of our services via our Platform and messages), we believe that, in certain cases, we have a legitimate interest to carry out profiling with the data provided by you and the information we have about you through cookies that you have accepted to install on your device, including your journey on the site, your preferences (language, colors, type of products, etc.) or the history of your purchases. The performance or strictly necessary cookies for your navigation to your site, notably improve its operation, and offer you a better browsing experience.
Responding to Your Questions, Requests, or Complaints Transferred via Customer Service Channels:	To fulfill the contract	If your inquiry is relative to your purchase or to the product(s) purchased through our Platform, the processing is necessary for the fulfillment of the contract and proper management of after-sales service.
	Legitimate interest	We believe that we have a legitimate interest in processing your strictly necessary personal data to properly manage your requests and complaints and to respond to your inquiries. The data we may process can include photographs if you have decided to send them to us as part of your request or complaint. For the completion of after-sales service procedures (e.g. commercial gestures), we may contact you by SMS or email. When you contact our Customer Service, phone conversations may be recorded for quality control and training purposes.
	Legal Obligation	If your inquiry concerns the exercise of rights outlined in Article 3 “Your Rights” or relates to a complaint about our products and services, we will need to process your data to comply with our legal obligations.
Generate anonymous statistics on the Site’s traffic	Legitimate Interest	We believe that we have a legitimate interest in analyzing the ergonomics and quality of our Platform to enhance the user experience and to offer a better-quality Platform to our clients. Please refer to Article 5 “Cookies and Connection Witnesses”, for more information.
Conducting satisfaction surveys and consumer studies	Legitimate Interest	We consider that we have a legitimate interest in conducting surveys and studies aimed at analyzing the level of satisfaction of our customers to improve the quality of our products and services.

4.2 Duration of Personal Data Storage

The data retention regarding your data is determined in relation to the purpose that led to the collection of the said-data. Once this purpose is achieved, your data will be archived, deleted, or anonymized (especially for statistical purposes).

Initially, the data is stored for a duration that does not exceed the necessary time for which it was collected.

NATURE DES TRAITEMENTS	DUREE DE CONSERVATION
Management of Our Customer and Prospect File	Storage during a period of 3 years from your last contact with us (for example, for customers, a purchase, or for prospects, a click on a hyperlink in an email) or until the withdrawal of your consent.
Your Questions Addressed to Customer Service	Storage for the necessary period for the processing of your request. Regarding the recordings of phone conversations with our Customer Service, they are kept for a limited period (up to 6 months at most), except in exceptional cases (for example, for investigation purposes, fraud, or for a legal reason).
Your Electronic Identification Data (Your connection logs collected, subject to your agreement and the settings of your device, through the use of cookies and other trackers placed on our Site)	Storage in accordance with the applicable regulation for a period not exceeding 13 months. For more details on cookies, their operation, and your ability to disable them, see Article 6 “Cookies and Connection Witnesses” below.

In the second step, regardless of the duration necessary for the achievement of the data processing purpose, it may be justified for us to archive your data for limited period, in a secure manner and with restricted access, for various reasons:

To comply with a legal obligation to retain data (for example, the retention of personal data for accounting purposes is typically 10 years)
To protect against potential liability actions resulting from the processing of your personal data. To manage pre-litigation and litigation, we may archive your data for evidentiary purposes during the period in which our liability could be incurred (related to prescription periods: civil, commercial, etc.).

Once the data retention imposed by law has elapsed and any prescribed actions have expired, your personal data will be deleted or anonymized.

4.3 Data Recipients

Your personal data are intended for the relevant Maison 123 services related to your requests. However:

When you order a product on our Site, the personal data that you have shared in the context of the purchase are intended for the Etam Group, or for its subsidiaries in charge of executing the said purchase.
The processing of your personal data is authorized for third-party that we use to provide certain services. These include:

Technical service providers and approved online payment services.
Service providers related to customer service and marketing.
Providers of fraud detection and prevention services.

Only when you have provided us with your consent, we may share your data with certain business partners.

The transfer outside of Europe of your personal data are carried out by putting into place the appropriate guarantees and in preserving the security of your data. Indeed, the transfers are based on a decision of adequacy from the European Commission assuring a certain level of adequate protection. In the UK, the decision is named the Data Protection Act, which has been adopted in 2018.

Maison 123 can also be required to relay your personal data concerning judicial and police instances, regulatory authorities, public bodies, or third-party companies to comply with a court order, summons, notice, search warrant, or all other legal or regulatory obligation or request. Such transfer may also be done to protect against fraud or for investigation.

4.4 Data Security

Maison 123 has endeavored to put into place the reasonable precautions to preserve the confidentiality, integrity, and availability of all processed personal data and to prevent that the previous be distorted, damaged, destroyed, or accessed by unauthorized third parties. Organizational and technical security measures have been installed for this purpose.

Maison 123 does not control all the risks associated to the function of the Internet and draws the attention of users to the possible risks inherent in its use and operation.

For the technical storage of your personal data, your data will be centralized with the following service providers.

OXya – in Ile-de-France and Hauts de France,
Salesforce Commerce Cloud - in Ireland,
Amazon Web Service - in Germany and in Ireland
OVH - in Hauts-de-France,
OCI – in Ile-de-France in Paris,

Maison 123 places the greatest importance to the protection and security of its information systems. Tools have been set into plays to permit Maison 123 to detect potential security vulnerabilities. These tolls may incidentally lead in access to personal data by security teams. This data will be collected and processed exclusively for the management of its vulnerabilities and in respect to the applicable regulations regarding the protection of personal data.

5. MANAGEMENT OF YOUR PAYMENTS AND DELIVERY OF YOUR PRODUCTS

The current Policy concerns the use of personal data, as described in the above-mentioned Article 4, by Maison 123, in its capacity as the data controller.

We inform you that although Maison 123 currently operates the Website maison123.co.uk, all purchases on the internet are dealt by a independent intermediary provider named Global-e France SAS.

Global-e is in charge to proceed to the payment of your order via the Global-e Payment Page once you want to proceed to the payment of your products on maison123.com.uk. To have a successful order, you need to accept the Terms & Conditions of Global-e as well as its privacy policy by ticking a box. Global-e oversees the preparation of your order and the delivery to you.

In regard to the applicable regulation, Global-e is a Data controller. Your personal data collected and used by Global-e are exclusively for the following purposes:

The execution and tracking of your orders placed on the Website maison123.com.uk
The payment of your orders
The response to your Questions Requests, Complaints regarding the delivery of the products.

To this end, you may find enclosed the <privacy policy> of Global-e for more details on how your personal data is used and stored.

6. COOKIES AND CONNECTION WITNESSES

6.1 What is a cookie?

A cookie is a text file susceptible to being stored in a dedicated space on your electronic device’s in the instance of the access of an online service using your web browser. A cookie file allows its issuer to identify the terminal in which is stored, during the cookies’ valid period or registration period.

6.2 Cookies issued on the website

When you connect to the website, Maison 123 can be brought, in conformity with your decision to consent, to install various cookies, allowing, in particular, the recognition of the browser you are using during the valid period of the relevant cookie.

Some of the cookies issued by Maison 123 do not require a consent from the user of the website. These cookies have the following purposes:

To establish statistics and volumes of attendance and use of various elements making up the Website (sections and contents visited, paths), allowing Maison 123 to improve the intent and ergonomics of services, as well as the visibility of the published contents.
To allow of facilitate your surfing on the Site, or to provide you with the online communication services that you request during your navigation, and thus:
To adapt the presentation of the Website to the display preferences of your terminal (language used, display resolution, operating system used, etc.) during your visits to the website, according to the visualization hardware and software or reading that your terminal contains.
To memorize information relative to a form that you have filled out on the Website (registration or access to your account) or to products, services, and information that you have chosen on the Website (subscribed service, content of a shopping cart, a wish list, etc.).
To allow you to access reserved and personal spaces on the site, such as your account, using identifiers or data that you have previously confided.
To put into place security measures, for example, when you are asked to log in again to content or a service after a certain period.

Some of the cookies issued by Maison 123 require a consent, specifically:

To share information with advertisers on other websites to offer you relevant advertising in line with your interests. In this instance, we use advertising cookies.
To establish statistics and volumes of attendance and use of various elements making up the Website by using pseudonymized data.
To provide personalized content or product to you in line with your interests.

6.3 Cookies issued on the Website by third parties.

Maison 123 is likely to include embedded tokens from third parties on the website, which allow you to share website content with other people or to inform these other people about your viewing or opinion regarding the site.

The issuance and use of cookies by third parties are subject to the privacy policy of these third parties. These cookies are subject to your consent.

Maison 123 does not control the process used by social networks to collect information regarding your browsing on the website. Maison 123 invites you to consult the privacy policy of these social networks to better understand the terms of use, including advertising, of the browsing information they may collect through these application buttons. These privacy policies should allow you to exercise your choices with these social networks, including by configuring your user accounts for each of these networks.

The Website may contain cookies issued by third parties (communication agency, audience measurement company, etc.) allowing these third parties, during the duration of the validity of these cookies, to collect browsing information about the devices consulting the website, particularly to measure the effectiveness of paid advertising campaigns with search engines.

6.4 Your choices concerning cookies.

Multiple possibilities are offered to manage cookies through our consent management platform OneTrust. Any settings that you may undertake will be likely to change your internet browsing and your access conditions to certain services requiring the use of cookies.

You can choose to make the choice at any moment to express and modify your cookies preferences through the means described below.

You can configure your browsing software to allow cookies to be stored on your device or, on the contrary, to reject them, either systematically or depending on their origin.

You can also configure your browsing software to accept or reject cookies on a case-by-case basis before a cookie is likely to be stored on your device. For more information, refer to the section “How to exercise your choices, depending on the browser you use?”

For more details about the deposit of cookies, follow this <a class="ot-sdk-show-settings">link</a>.

To modify your cookie preferences, check the “Cookie Settings” section at the bottom of the Website page.

(a) Cookie Consent.

The storage of a cookie on a device is essentially subject to the user’s will, which the user can express and modify at any time and free of charge through the choices offered by their browser software.

If you have accepted the storage of cookies in your browser software, cookies embedded in the pages and content you have viewed may be temporarily stored in a dedicated area on your device. They can only be read by their issuer.

(b) Refusal of Cookies.

If you refuse the storage of cookies on your device, or if you delete those that you have stored, you will no longer be able to benefit from several features that are necessary for navigating in certain areas of the site.

This would be the case if you tried to access content or services that require identification. This would also be the case if Maison 123 or its providers could not recognize, for technical compatibility purposes, the type of browser used by your device, its language and display settings, or the country from which your device appears to be connected to Internet.

In this case, Maison 123 declines all responsibility for the consequences related to the downgrade experience of its services resulting from our inability to store or consult the cookies necessary for their operation and that you have refused or deleted.

For the management of cookies and your choices, the configuration of each browser is different. It is described in the help menu of your browser, that allows you to understand how to modify your preferences regarding cookies.

6.5 If you share the use of your device with others.

If your device is used by multiple people and when a single device has multiple browsing software, Maison 123 cannot ensure with certainty that the services and advertisements intended for your device correspond to your own usage of the device and not to that of another user of this device.

In such case, sharing the use of your device with multiple people and the configuration of your browser settings regarding cookies are your free choice and responsibility.

7. MODIFICATION OF THE POLICY

Maison 123 may modify from time to time this Privacy Policy. Maison 123 recommends checking and verifying the last version of the privacy policy displayed on the website. Maison 123 may inform either by a special mention on the Website or by a personalized notification, particularly in the newsletter communications as well.

8. POLICY ON PERSONAL DATA RELATING TO MINORS

Our Website does not target minors as its audience. Therefore, we do not knowingly collect, nor do we wish to collect, the personal data of user who are under the age of 16, unless consented or authorized by the legal guardian.

If you are under the age of 16 and you do not have authorization from your legal guardian, we ask you to not provide us with personal data and to only use our Website if you have informed your legal guardian and have their consent and assistance.

We ask the legal guardian of children under the age of 16 to contribute to the enforcement of our Personal Data Privacy Policy by ensuring that they never provide us with personal data without their prior authorization.

If information of collected about a minor, the legal guardian of the minor may contact privacy@maison123.com to correct, modify, or delete this information. The person concerned, if she was a minor in the moment that her personal data was collected, may also contact us so to have the relevant data erased from our databases.

If we become aware that the personal data of individuals under the age of 16 have been collected by our Platform without the consent or authorization of the legal guardian, we will take all necessary measures to delete this personal data from our servers.