PRIVACY POLICY
This privacy policy outlines how Maison Gala SASU, a French simplified joint stock company with registered offices at 5 avenue Ingres, 75016 Paris, listed with the Paris Trade and Companies Register, VAT number FR 64 889 372 421 (« we », « our », or « MG »), in its capacity as data controller, processes the personal data of its customers (« you ») when using the website www.maisongala.com (the “Site”).
This document explains how we collect, store, and use personal information that can directly or indirectly identify you (« Personal Data ») when you interact with our Site.
Thank you for your interest in our website. Your privacy matters deeply to us. That is why we treat your data with care, precision, and in strict accordance with legal data protection regulations.
1. What Personal Data Do We Collect?
1.1. Data You Provide Directly
When using our Site — creating an account, subscribing to our newsletter, contacting us via our contact form or email, or purchasing items — you may be asked to provide personal information, including but not limited to:
- Information required to create an account or place an order: your first and last name, postal address, email address, and phone number;
- Information submitted via our contact form or email, including your message content and any attachments;
- The email address you use to subscribe to our newsletter or receive product updates;
- Any correspondence you send to us;
- Details of transactions carried out on our Site and the orders you place.
1.2. Data We Collect Automatically
a. Use of Services
We may collect usage logs that tell us how you interact with the Site. These help us understand and improve its performance.
b. Cookies
When visiting our Site, we collect data via cookies related to your device or browser, such as IP address, connection and navigation data, browser and operating system types, and more.
What is a cookie?
A cookie is a small text file stored on your device by a website. It contains an anonymous and unique identifier.
What cookies do we use?
- Strictly necessary cookies: essential for the functioning of the Site;
- Security cookies;
- Authentication cookies (with your consent): to keep you logged in;
- User interface cookies (with your consent): to remember preferences such as language;
- Analytics cookies (with your consent): to measure traffic and improve performance;
- Social media sharing cookies (with your consent): placed when you choose to share content.
Third-party cookies:
We use Google Analytics to analyze Site traffic. Google may collect anonymized IP addresses (unless exceptions apply). Data may be stored on servers in the U.S., subject to privacy safeguards.
We also use Google reCAPTCHA to detect bots on forms. This involves sending your IP address and certain browser data to Google. Learn more here:
https://www.google.com/policies/privacy/
Managing Cookies
Upon your first visit, you may accept or refuse cookies. You can update your preferences at any time via email at contact@maisongala.com or by adjusting your browser settings.
To opt out of Google Analytics tracking, click here: Disable Google Analytics. Note: if you clear cookies, you must opt out again.
2. How Do We Use Your Personal Data?
We process your Personal Data in order to fulfill our contractual obligations and respond to your requests. This includes:
- Giving you access to the Site and its features;
- Providing support;
- Processing your payments;
- Informing you of changes to the Site or our terms;
- Ensuring compliance with our user agreements.
We also rely on legitimate interests to:
- Improve and optimize the Site and our services;
- Conduct internal operations (bug fixing, research, surveys, etc.);
- Send promotional communications about similar services;
- Handle complaints and disputes, and protect our legal rights.
We also process your data to comply with legal requirements (e.g., tax and accounting), or with your consent, for marketing emails or certain cookie placements. You may withdraw consent at any time.
3. How Long Do We Retain Your Data?
Cookies are stored for up to thirteen (13) months.
Other personal data is retained for five (5) years after account closure or last activity — unless required longer for legal or judicial reasons.
After two (2) years of inactivity, your data is archived securely and used only to meet legal obligations or defend legal claims. It is not shared or otherwise processed.
4. Who Has Access to Your Personal Data?
Internally, only authorized personnel have access to your data.
Externally, your data may be shared with:
- Financial institutions;
- Public or judicial authorities;
- Legal representatives (lawyers, bailiffs, etc.);
- IT providers, auditors, tax consultants, fraud protection specialists, and payment processors — under strict contractual safeguards.
In case of business acquisition or asset sale, your data may be shared with potential buyers under strict conditions.
We do not transfer your data outside the EU/EEA, except when using services such as Google (see above), which comply with data protection rules through standard contractual clauses.
5. How Do We Protect Your Personal Data?
We comply with GDPR (Regulation (EU) 2016/679) and relevant laws. We implement technical and organizational security measures to safeguard your data against unauthorized access or misuse.
Unless stated otherwise in section 4, we never share your data with third parties without your express consent.
All information is stored on secure servers located in Europe. Payment data is encrypted using SSL technology.
Please note: while we do our best to protect your data, online transmission is never 100% secure.
6. Your Rights
You have the right to:
- Access and correct your personal data;
- Confirm whether your data is being processed;
- Receive information about data usage and recipients;
- Receive a copy of your data in intelligible format.
Under certain conditions, you may also:
- Object to data processing for personal reasons;
- Request erasure or restriction of your data;
- Exercise your right to data portability;
- Provide posthumous data instructions.
To exercise your rights, contact us at: contact@maisongala.com
We may ask for proof of identity to process your request.
You also have the right to lodge a complaint with a data protection authority such as the CNIL in France.
7. Updates to Our Privacy Policy
We reserve the right to update this Privacy Policy to comply with legal changes or reflect changes to our services. The updated policy will apply upon publication.
Effective Date: November 13, 2020
