Privacy Policy

Effective date: 1 January 2023

Last updated: 1 January 2023

1. Introduction

At MDMAISON, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.mdmaison.com or interact with us through other digital channels. We process your data in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Who We Are

MDMAISON is the Data Controller responsible for your personal data. If you have any questions about this policy or your data, please contact us at info@mdmaison.com.

3. What Personal Data We Collect

We may collect: identity and contact data (name, email, phone); order information (purchases, delivery); technical data (IP, browser, device, analytics via Google Analytics and Hotjar); marketing data (interactions via Meta Pixel); and payment data processed securely by Stripe Payments.

4. How and Why We Use Your Data

We use your personal data to process orders, provide customer support, improve our website, send updates (if you consent), analyze performance, prevent fraud, and ensure security.

5. Legal Grounds for Processing (GDPR Art. 6)

Processing bases: performance of contract (orders), consent (marketing, analytics), legitimate interest (service improvement, security), and legal obligation (tax and accounting).

6. Data Sharing and Processors

We share data only with trusted service providers acting on our behalf, including Stripe Payments (transactions), Google Analytics and Tag Manager (analytics), Meta Platforms (advertising), Hotjar (UX insights), and Cloudflare (security/CDN). We do not sell or rent your data.

7. International Transfers

Some partners may process data outside the EEA. We ensure appropriate safeguards through Standard Contractual Clauses approved by the European Commission.

8. Data RetentionWe retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, accounting, or reporting requirements. When data is no longer required, it will be securely deleted or anonymized.

9. Your Rights Under GDPR

You may access, correct, delete, restrict, or transfer your data, and object to processing or withdraw consent at any time. To exercise your rights, contact info@mdmaison.com. You may also file a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) via www.aki.ee/en.

10. Cookies and Tracking Technologies

We use cookies and similar technologies for essential site functions and analytics. See our Cookies Policy for details.

11. Data Security

We use SSL encryption and organizational measures to protect your data from loss, misuse, or unauthorized access.

12. Updates to This Policy

We may update this Privacy Policy periodically. The most recent version will always be available on our website.

13. Contact

For any questions, please contact us at info@mdmaison.com.