Privacy
We collect what an order needs and what the site needs to work. We do not sell personal data, and we do not buy it. This page is long because it is specific, not because it is careful.
Last updated: {{DATE_MISE_EN_LIGNE}}
Who is responsible for your data
The data controller is CB Media Solution LLC, a company registered in the State of Wyoming, United States, trading as Maison Alcôve.
CB Media Solution LLC 5830 E 2nd St, Ste 7000 #21993 Casper, WY 82609 United States
Email: {{EMAIL_VIE_PRIVEE}} Phone: {{TELEPHONE}}
We are established in the United States and we sell to people in the United Kingdom. The UK GDPR applies to us because of that, and this notice is written to it.
{{REPRESENTANT_UK_RGPD}}
What we collect, and why
| What | Why | Legal basis |
|---|---|---|
| Name, delivery address, billing address, email, phone | To take, pack, ship and track your order, and to reach you if something goes wrong | Performance of a contract |
| Order history, amounts, VAT | To run the account, handle returns, and keep the records tax law requires | Contract, then legal obligation |
| Payment details | Taken and held by our payment provider, not by us. We see the last four digits and the result | Contract |
| Emails, form messages, call notes | To answer you, and to remember what was said last time | Legitimate interests: running a support service |
| Marketing email address | To send you an email when there is something to say | Consent, until you unsubscribe |
| Device, browser, pages viewed, referrer | To keep the site working and to see which pages fail | Legitimate interests for the essentials; consent for everything else |
| Advertising and analytics identifiers | To measure whether our advertising works | Consent |
We ask for nothing else. There is no date of birth field, no gender field, and no reason for us to know either.
We do not knowingly collect data from children under 16. Orders are for adults.
Cookies and similar technologies
Some cookies are needed for the basket and the checkout to work. Those are always on, because without them the site does not function.
Everything else (analytics, advertising measurement) runs only if you say yes in the banner. You can change your mind at any time:
Refusing does not change the price you pay, the delivery you get, or anything else on this site.
Who processes data for us
We use a small number of suppliers. Each of them acts on our instructions, under a written contract.
| Supplier | What it does | Where |
|---|---|---|
| Shopify | Hosts the shop, processes orders | {{LOCALISATION_SHOPIFY}} |
| {{PRESTATAIRE_PAIEMENT}} | Takes payment | {{PAYS_PRESTATAIRE_PAIEMENT}} |
| {{TRANSPORTEUR}} | Delivers parcels, provides tracking | {{PAYS_TRANSPORTEUR}} |
| {{OUTIL_EMAIL}} | Sends order emails and, if you asked for it, marketing email | {{PAYS_OUTIL_EMAIL}} |
| Google (Analytics, Ads) | Measures traffic and advertising, with your consent | United States and other countries |
We also disclose data when the law requires it, and to our accountant and advisers under confidentiality.
If the business is ever sold, customer records move with it. We would tell you first.
Where your data is processed
We are a United States company, so your order data is processed in the United States by us, and by suppliers in the United States and the European Union.
Being outside the UK does not put us outside UK data protection law, and we do not treat it as if it did. Your rights below are the rights the UK GDPR gives you, and we answer requests under it.
Where a supplier sits in a country without a UK adequacy decision, the arrangement runs on the UK International Data Transfer Agreement, or on the UK Addendum to the EU Standard Contractual Clauses. Ask us which one covers which supplier and we will tell you.
How long we keep it
| Data | Kept for |
|---|---|
| Order and invoice records | 6 years after the end of the tax year (required by HMRC) |
| Support conversations | {{DUREE_CONSERVATION_SUPPORT}} |
| Marketing consent and email address | Until you unsubscribe, then a suppression record so we do not email you again by accident |
| Analytics and advertising data | As set by the tool and your consent choice, {{DUREE_CONSERVATION_GA4}} |
| Account, if you created one | Until you ask us to close it |
Your rights
Under the UK GDPR you can ask us to:
- Show you the data we hold about you, as a copy.
- Correct anything wrong.
- Delete it, where we do not need it for an order or a legal record.
- Restrict or object to what we do with it, including any processing based on legitimate interests.
- Port it: send it to you, or to someone else, in a machine-readable file.
- Withdraw consent at any time, for marketing and for non-essential cookies. Withdrawing does not undo what was lawful before.
Write to {{EMAIL_VIE_PRIVEE}}. We answer within one month, free of charge. If a request is complex we may take longer, and we will tell you why before the month is up.
We may ask you to confirm who you are, usually the order number and the email you ordered with. That is to stop someone else asking for your data.
Marketing
You get order emails because you bought something: confirmation, dispatch, and anything that affects your delivery. Those are not marketing and you cannot unsubscribe from them without cancelling the order.
Marketing email is separate. It goes only to people who asked for it, there is an unsubscribe link in every message, and one click is enough.
Automated decisions
We do not make decisions about you by automated means. Fraud checks by our payment provider may flag a transaction; a person then looks at it, and you can always ask us to explain.
Complaints
Tell us first: {{EMAIL_VIE_PRIVEE}}. If we have not fixed it, you can complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk, 0303 123 1113.
When we open in other countries
Today we sell to the United Kingdom, and this notice is written to UK law. When the United States and Australia open, we will publish the additional notices those markets require before the first order is taken there, not after.
Changes
We update this page when what we do changes. The date at the top is the date of the current version, and material changes are announced by email to anyone we hold an address for.