Privacy
Policy

When you interact with the Maison Écho site, whether by browsing, creating an account, or placing an order, we may collect the following categories of personal data: identification data (name, email address), transactional data (order history, payment method type, shipping address), technical data (IP address, browser type, device identifiers, cookie data), and usage data (pages visited, session duration, referral source).

We collect this information directly from you at the point of input, automatically via cookies and similar tracking technologies, and, where applicable, from third-party processors such as Shopify and our payment gateway partners.

We do not collect or store full payment card numbers. Card data is processed and held by our payment processor in accordance with PCI-DSS Level 1 compliance standards.

Your personal data is processed on the following legal bases: (a) performance of a contract, to fulfil orders, process returns, and provide customer support; (b) legitimate interests, to improve our site and services, detect fraud, and conduct internal analytics; (c) consent, to send marketing communications where you have opted in; and (d) compliance with a legal obligation, where required by applicable law.

We will never sell your personal data to third parties. We may share your data with carefully selected service providers (including Shopify, courier and logistics partners, payment processors, and email marketing platforms) solely to the extent necessary to fulfil the purposes above, and always under contractual data processing agreements.

You have the right at any time to access, rectify, erase, restrict, or object to the processing of your personal data, and to request data portability, by contacting us at the address below. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We use strictly necessary cookies to maintain session state, shopping cart contents, and authentication tokens. These cookies cannot be disabled without impairing the functionality of the site.

We use analytical cookies to understand how visitors interact with the site (page views, scroll depth, click events). These cookies collect aggregated, anonymised data and are only set with your consent.

We use functional cookies to remember your preferences (e.g., preferred currency). You may control or withdraw consent for non-essential cookies at any time via the cookie preference panel accessible from the site footer.

Third-party cookies may be set by Shopify and other integrated platforms. Please refer to their respective privacy notices for detail on how they process data collected via their cookies.

For a full breakdown of every cookie we use, including exact names, purposes, and how long each one lasts, see our dedicated Cookie Policy.

Our site is built on the Shopify platform. Shopify processes certain personal data on our behalf as a data processor. For information on Shopify's data practices, please visit shopify.com/legal/privacy.

Our site is hosted on Vercel, which processes technical data (such as IP addresses and request logs) as part of delivering the site to your browser.

Payments are processed by Shopify Payments and/or Stripe. These processors operate independently certified data security environments. We do not have access to your full card number at any point in the transaction.

We may use transactional and marketing email services (such as Klaviyo) to send order confirmations, dispatch notifications, and, where consent has been given, promotional communications. You may unsubscribe from marketing emails at any time via the unsubscribe link contained in each message.

This site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy notices independently.

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Transactional data is typically retained for six years in line with UK tax record obligations.

For any privacy-related requests, complaints, or queries, please contact our data controller at: support@maisonecho.co.uk. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

This Privacy Policy was last updated on 01 June 2026. We reserve the right to update this policy at any time; material changes will be communicated by notice on the site.

This site and our products are intended for adults. We do not knowingly collect personal data from children under the age of 18. If you believe a child has provided us with personal data without appropriate parental or guardian consent, please contact us at support@maisonecho.co.uk and we will take steps to remove it.

We do not make any decision about you that produces a legal effect or similarly significantly affects you based solely on automated processing of your personal data. We do not use your personal data to build an advertising profile: see our Cookie Policy for a full account of the cookies and similar technologies we use, and why none of them currently serve advertising purposes.

Some of the service providers described in this policy (including our hosting, payment, and email service providers) may process or store personal data outside the United Kingdom. Where this happens, we require appropriate safeguards to be in place, such as the UK's International Data Transfer Agreement, standard contractual clauses, or reliance on a country that the UK government has found to provide an adequate level of data protection.

If you are located in the European Union, your personal data may be transferred to and processed in the United Kingdom, which the European Commission has recognised as providing an adequate level of protection for personal data.