Privacy

Last updated: 19 February 2025

This Privacy Policy describes how Le Marais (the ‘Site’, ‘we’, ‘us’ or ‘our’) collects, uses and discloses your personal information when you visit our Site, use our services or make a purchase at checkout.lemarais.nl (the ‘Site’) or otherwise communicate with us via the Site (collectively, the ‘Services’). For the purposes of this Privacy Policy, ‘you’ and ‘your’ refers to you as a user of the Services, whether you are a customer, website visitor, or any other person whose information we collect subject to this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the updated Privacy Policy on the Site, change the date next to ‘Last updated’ and take all other steps required by applicable law.

How we collect and use your personal data

In order to provide the Services, we collect (and have collected over the past twelve months) personal information about you from various sources, as set out below. The information we collect and use depends on your interactions with us.

In addition to the specific uses set forth below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

What personal data we collect

The type of personal data we obtain about you depends on your interactions with our Site and your use of our Services. When we use the term ‘personal data’, we mean data that identifies, relates to, describes, or is capable of being associated with you. The following sections describe the categories and specific types of personal data we collect.

Information we collect directly from you

Information you provide directly to us through our Services may include:

Contact details, including your name, address, telephone number and email address.
Order details, including your name, billing address, delivery address, payment confirmation, email address and telephone number.
Account details, including your username, password, security questions and other information used for account security.
Shopping details, including the items you view, place in your shopping cart, save in your account, such as loyalty points, reviews, referrals or gift cards, or purchases.
Loyalty points/product reviews/referrals/gift cards
Information from customer support, including the information you share in communications with us, for example when you send a message via the Services.

Some features of the Services may require you to provide us with certain information about yourself directly. You may choose not to provide this information, but in that case you may not be able to use or access these features.

Information we collect about your use

We may also automatically collect certain information about your interaction with the Services (‘Usage Data’). For this we may use cookies, pixels and similar technologies (‘Cookies’). Usage Data may include information about how you visit and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information about your interaction with the Services.

Information we obtain from third parties

Finally, we may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

Companies that support our Site and Services, such as Shopify.
Our payment processors, who collect payment details (for example, bank account, credit or debit card details, billing address) to process your payment, fulfil your orders and deliver the products or services you have requested, so that we can fulfil the agreement we have with you.
When you visit our Site, open or click emails that we send you, or interact with our Services or advertisements, we or third parties we work with may automatically collect certain information using online tracking technologies, such as pixels, web beacons, software developer kits, third-party libraries, and cookies.

All information we obtain from third parties is handled in accordance with this Privacy Policy. See also the section below, Websites and links from external parties.

How we use your personal data

Delivery of products and services. We use your personal data to provide you with the Services in accordance with our agreement with you, including processing your payments, fulfilling your orders, sending notifications regarding your account, purchases, returns, exchanges or other transactions, creating, maintaining and otherwise managing your account, arranging shipping, facilitating returns and exchanges, and other features and functionalities related to your account. We may also improve your shopping experience by enabling Shopify to match your account with other Shopify services that you may wish to use. In this case, Shopify will process your data as set out in the Privacy Policy and the Consumer Privacy Policy.
Marketing and advertising. We may use your personal information for marketing and promotional purposes, such as to send you marketing, advertising and promotional communications by email, text message or post, and to show you advertisements for products or services. This may include using your personal information to better tailor the Services and advertisements on our Site and other websites. If you are a resident of the EEA, the legal basis for these data processing activities is our legitimate interest in the sale of our products, in accordance with Art. 6 (1) (f) GDPR.
Security and fraud prevention. We use your personal data to detect, investigate or take action against possible fraudulent, illegal or malicious activities. If you choose to use the Services and register an account, you are responsible for keeping your account login information safe. We strongly encourage you not to share your username, password or other credentials with anyone else. If you think your account has been hacked, please contact us immediately. If you are a resident of the EEA, the legal basis for these data processing activities is our legitimate interest in keeping our website safe for you and other customers, according to Art. 6 (1) (f) GDPR.
Communication and service improvement. We use your personal data to provide you with customer support and to improve our Services. This is in our legitimate interest to communicate with you, to provide you with effective services and to maintain our business relationship with you in accordance with Art. 6 (1) (f) GDPR.

Cookies

Like many other websites, we use cookies on our site. Specific information about the cookies we use in relation to supporting our shop with Shopify can be found at https://www.shopify.com/legal/cookies. We use Cookies to support and improve our Site and our Services (including to remember your actions and preferences), to perform analyses and to gain more insight into user interaction with the Services (in our legitimate interest to manage, improve and optimise the Services). We may also allow third parties and service providers to use cookies on our Site in order to better tailor the services, products, and advertising on our Site and other websites.

Most browsers automatically accept cookies by default, but you can set your browser to delete or reject cookies. Please be aware that deleting or blocking cookies can negatively impact your user experience and result in some Services, including certain features and general functionality, not working correctly or not being available at all. In addition, blocking Cookies may not completely prevent how we share information with third parties, such as our advertising partners.

Please be aware that, although you may be able to set your browser to send a ‘Do Not Track’ signal, our Site, like many other websites, is not designed to respond to such signals. For more information on ‘Do Not Track’ signals, go to http://www.allaboutdnt.com/.

How we disclose personal data

In certain circumstances, we may disclose your personal data to third parties for the purposes of contract fulfilment, legitimate purposes and other reasons that fall under this Privacy Policy. Such circumstances may include:

With suppliers or other third parties who perform services on our behalf (e.g. IT management, payment processing, data analysis, customer support, cloud storage, fulfilment and shipping).
With business and marketing partners to offer services and show you adverts. Our business and marketing partners will use your details in accordance with their own privacy statements.
When you instruct us, request us to or otherwise give us permission to pass on certain details to third parties, for example to deliver products to you or via your use of social media widgets or log-in integrations, with your permission.
With our affiliates or otherwise within our group of companies, in our legitimate interests to run a successful business.
In connection with a corporate transaction, such as a merger or bankruptcy, to comply with applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

We have disclosed the following categories of personal data and sensitive personal information about users for the purposes set out above in ‘How we collect and use your personal data’ and ‘How we disclose personal data’ in the past 12 months:

Category Recipient categories

Identification data such as basic contact details and certain order and account information
Categories of personal information listed in the California Customer Records statute, such as basic contact information and certain order and account information
Commercial information such as information about orders, shopping and customer support
Internet or other similar network activity, such as usage data
Geolocation data such as locations determined by an IP address or other technical measures
Suppliers and third parties who provide services on our behalf (such as internet providers, payment processors, fulfilment partners, customer support partners and data analysis providers)
Business and marketing partners
Affiliates

We do not use or disclose sensitive personal data without your consent or for the purpose of inferring characteristics about you.

Third-party websites and links.

Our Site may contain links to websites or other online platforms that are managed by third parties. If you follow links to sites that are not affiliated with us or not managed by us, it is important that you read their privacy and security policies and other conditions. We make no guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of the information on these sites. Information you provide on public or semi-public locations, including information you share on third-party social networks, may also be visible to other users of the Services and/or users of these third-party platforms, without limitation as to its use by us or by a third party. The inclusion of such links on our Site does not imply an endorsement of the content on such platforms or of their owners or operators, except as stated in the Services.

Children's data

The Services are not intended for use by children and we do not knowingly collect personal data about children. If you are the parent or guardian of a child who has provided us with personal data, you can contact us using the contact information below to request that it be deleted.

As of the effective date of this Privacy Policy, we are not actually aware that we ‘share’ or ‘sell’ personal data of persons younger than 16 years of age (as these terms are defined in applicable legislation).

Security and retention of your data

Please be aware that no security measures are perfect or impenetrable and we cannot guarantee ‘perfect security’. In addition, any information you send to us may not be secure during transmission. We urge you not to use unsecured channels to communicate sensitive or confidential information to us.

How long we retain your personal data depends on a variety of factors such as whether we need the data to maintain your account, provide the Services, comply with our legal obligations, resolve disputes or comply with other applicable contracts and policies.

Your rights

Depending on where you live, you may have some or all of the rights below with respect to your personal data. However, these rights are not absolute and may only apply in certain circumstances, and in some cases we may refuse your request, as permitted by law.

Right of access/to know: You may have the right to request access to the personal data we hold about you, including details about how we use and share your information.
Right to erasure: You may have the right to request that we delete the personal data we hold about you.
Right to rectification: You may have the right to request that we rectify any inaccurate personal data that we hold about you.
Right to portability: Under certain circumstances and with certain exceptions, you may have the right to receive a copy of the personal data we hold about you and to request that we transfer it to a third party.
Restriction of processing: You may have the right to request that we stop or restrict the processing of your personal data.
Withdrawal of consent: Where we are relying on your consent to process your personal data, you may have the right to withdraw that consent.
Right to appeal: You may have the right to appeal our decision if we refuse your request for processing. You can do this by responding directly to our rejection.
Managing communication preferences: We may send you promotional emails, and you may unsubscribe at any time using the unsubscribe option included in the emails we send you. If you unsubscribe, we may still send you non-promotional emails, such as emails about your account or orders you have placed.

You can exercise each of these rights where indicated on our Site or by contacting us using the contact details below.

We will not discriminate against you if you exercise any of these rights. We may need to collect information about you to verify your identity, such as your email address or account details, before responding to the substance of the request. In accordance with applicable law, you may designate an authorised representative to submit requests on your behalf to exercise your rights. Before accepting such a request from an authorised representative, we require that the authorised representative provides proof that they are authorised to act on your behalf, and we may ask you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

Complaints

If you have any complaints regarding the way we process your personal data, you can contact us using the contact details below. If you are not satisfied with our response to your complaint, depending on where you live, you may have the right to appeal our decision by contacting us using the contact information below or to lodge your complaint with your local data protection authority. For the EEA, you can find a list of responsible data protection supervisory authorities here.

International users

Please be aware that we may transfer, store and process your personal information outside of the country in which you reside. Your personal information will also be processed by staff and third party service providers and partners in these countries.

If we transfer your personal data outside of Europe, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant competent authority of the United Kingdom, as far as relevant, unless the data is transferred to a country that has been established to provide an adequate level of protection.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of the rights available to you, please call us or send us an email at opwebshop@lemarais.nl or contact us at Morenstraat 11, Maastricht, 6211 GE, NL.

In the context of the applicable data protection legislation and unless explicitly stated otherwise, we are the controller for your personal data.