Maison Restoré (“Maison Restoré”, “we”, “us”, “our”) is committed to protecting your personal data. This notice explains how we collect, use, disclose, and safeguard information when you visit our website, purchase from us, or use our restoration/authentication services.

Scope: This policy applies to our website, online store, restoration and authentication services, email communications, and any forms or file uploads you submit. It does not cover third-party sites we link to.

1) What data we collect

• Identity & contact: name, email, telephone, billing/shipping address, account details.

• Order & service data: items purchased, order numbers, restoration/authentication job details, communications with us.

• Media you provide: photographs/files of items for authentication/restoration; notes you supply.

• Payment data: payment method, transaction identifiers, last 4 digits/expiry (processed by our payment providers; we do not store full card details).

• Technical data: IP address, device/browser type, settings, pages viewed, cookies, analytics identifiers.

• Marketing preferences: newsletter opt-in/opt-out, campaign interactions.

2) How we collect it

• Directly from you (checkout, contact forms, email, uploads).

• Automatically via cookies/analytics when you use our site.

• From service providers (e.g., payment processors confirming a transaction).

3) Purposes & lawful bases (UK GDPR)

• To provide and manage orders/services (fulfilment, customer support, warranties): Art. 6(1)(b) contract.

• To authenticate/restore items (review files, produce reports/verdicts, status updates): Art. 6(1)(b) contract.

• Payments, invoicing, accounting, tax compliance: Art. 6(1)(c) legal obligation.

• Fraud prevention, security, record keeping, enforcing terms: Art. 6(1)(f) legitimate interests.

• Marketing communications (newsletters, offers) where permitted: Art. 6(1)(a) consent or Art. 6(1)(f) legitimate interests (soft opt-in). You can opt out at any time.

• Analytics and site optimisation: Art. 6(1)(f) legitimate interests (improving services and user experience).

We will seek consent for any use not compatible with the purposes above.

4) Sharing your data

We never sell personal data. We share only what is necessary with:

• Operational vendors: site host, e-commerce platform, payment processors (e.g., Stripe/PayPal), couriers, email and cloud-storage providers, IT/analytics tools.

• Professional advisers: accountants, auditors, legal counsel (confidentially).

• Authorities: where required by law or to protect rights/safety.

• Prospective buyers/investors: as part of a confidential business transaction, subject to safeguards.

All processors are bound by contracts requiring appropriate security and use only on our instructions.

5) International transfers

Some providers may process data outside the UK/EEA. Where this occurs, we rely on an adequacy decision (e.g., UK/EEA adequacy) or implement appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses, plus supplementary measures where needed. Details available on request.

6) Retention

We keep data only as long as necessary for the purposes collected, then securely delete or anonymise it.

• Orders & invoices: 6 years (tax/accounting).

• Service records (restoration/authentication, related communications): up to 6 years from completion.

• Uploaded item photos/files: up to 24 months from verdict/service completion unless needed for legal obligations, warranty, chargeback/fraud defence, or you ask us to retain longer.

• Marketing data: until you opt out or 24 months of inactivity.

• Website logs/analytics: typically 12–24 months (provider default).

7) Security

We use appropriate technical and organisational measures (encryption in transit, access controls, least-privilege, vendor due diligence, backups). No system is 100% secure; we maintain incident procedures and will notify regulators/you where legally required.

8) Cookies & analytics

We use necessary cookies for site operation and optional cookies for analytics/performance and marketing. You can manage preferences via our cookie banner and through your browser settings. For aggregated analytics, we receive statistical reports; we do not use them to identify you directly. See our Cookie Notice for details (provider list, lifespans, opt-outs).

9) Your rights (UK/EU)

You have the right to access, rectification, erasure, restriction, portability, and to object to processing based on legitimate interests, and to withdraw consent at any time (does not affect prior processing). We will verify identity before actioning requests.
To exercise rights, email support@maisonrestore.com.

You may lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or your local EEA authority. We would appreciate the chance to address your concerns first.

10) Children

Our services are not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided data, contact us to remove it.

11) Automated decisions

We do not perform automated decision-making producing legal or similarly significant effects. If this changes, we will inform you and explain your rights.

12) Third-party links

Our site may contain links to third-party websites. We are not responsible for their privacy practices. Review their notices before providing data.

13) Changes to this policy

We may update this notice from time to time. The latest version will be posted on our website and will state the effective date.

Contact: support@maisonrestore.com Business location: London, United Kingdom
Effective date: [15 April 2025]