Privacy Policy

Last updated: 8 May 2026

Maison Salombi respects your privacy. This policy explains what personal data we collect and your rights under the EU GDPR.

1. Data Controller

Maison Salombi · privacy@salombi.com

2. What We Collect

Order data: name, address, email, phone, items, payment method (we never see your full card number).
Account data: email + hashed password (if you create an account).
Device & usage data: IP, browser, pages visited (analytics cookies).
Marketing data: email + preferences (if subscribed).

3. Lawful Bases

Contract: to fulfil your order.
Legitimate interest: to improve the store, prevent fraud.
Consent: for marketing emails and ad cookies (withdrawable any time).
Legal obligation: tax and accounting records.

4. Who We Share With

Only the providers we need: Shopify (platform), shipping carriers (DHL, La Poste), payment processors (Shopify Payments, PayPal), email provider, Meta/Facebook (ads). We never sell your data.

5. International Transfers

Some providers store data in the US under EU Standard Contractual Clauses.

6. Retention

Order records: 10 years (legal).
Account: until you delete it.
Marketing: until unsubscribe + 30 days.
Analytics: 26 months.

7. Your Rights (GDPR)

Access · rectify · erase · restrict · portability · object · withdraw consent · complain to your supervisory authority. Email privacy@salombi.com. We respond within 30 days.