Privacy policy
Last updated: October 24, 2025
Privacy Policy
In the course of its business activities, Maison Amorine SASU, a company with a capital of 10,000 euros, headquartered at 30 allées de Tourny and registered with the Bordeaux Trade and Companies Register under number 838873008 (hereinafter referred to as “Maison Amorine”), processes your personal data.
Maison Amorine Contact Information
For any questions regarding your customer account, your orders, our stores, or for advice on using our products, please contact us by email at “contact@maison-amorine.com”.
Data Protection Officer
Maison Amorine contact@maisonamorine.com
This Privacy Policy (hereinafter the “Policy”) informs you of how Maison Amorine, in its capacity as data controller, is committed to ensuring the protection, confidentiality, and security of the personal data it processes in accordance with the legislation in force in France, and in particular the GDPR (EU Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016) and the LIL (Law No. 78-17 of July 6, 1978 on Information Technology, Data Files, and Civil Liberties). This Policy applies to customers of products offered under the “Maison Amorine” brand and to visitors of the website www.maisonamorine.com. It may be subject to change. You are therefore encouraged to review it regularly. It may also be supplemented by specific information provided to you via email regarding a particular offer or service.
1. How does Maison Amorine use your data?
We collect and use your personal data for the purposes and durations described below, depending on your use of the website and your interactions with Maison Amorine:
Your purchases on the maisonamorine.com website
- Data collected for online purchases: shopping cart contents, last name, first name, shipping address and billing address, shipping method, payment method, credit card number
- Purposes and legal basis: this information allows us to manage your shopping cart, select the delivery method, process your order, prepare your packages, ship them, and notify you upon shipment or regarding availability at a Click & Collect location, based on your acceptance of the Maison Amorine Terms and Conditions (performance of the contract). We must also retain orders and corresponding invoices for the purpose of defending ourselves in the event of a dispute (this processing is based on Maison Amorine’s legitimate interests in defending its interests in court) and to comply with our legal accounting and tax obligations.
- Retention period: data regarding orders is retained in your account for 5 (five) years from the delivery of your order or until your account is deleted, and archived for 10 (ten) years on a separate server to meet our legal obligations. Data regarding shopping carts is retained for 3 (three) months; data sent to our service providers for delivery is retained for 12 (twelve) months.
Collecting Your Review
- Data collected for reviews: contact information, product ordered, date of purchase, review request, and submitted review.
- Purposes and legal basis: this information allows us to collect and gather your review of the products purchased or your shopping experience, based on your consent.
- Retention period: for the duration of the review’s publication or until consent is withdrawn.
Your Maison Amorine Account and Its Management
- Data collected for account registration: first name, last name, email address, password, gender, username, date of birth.
- Data collected for account management: last name, first name, email address, purchase history, billing and shipping addresses, phone number, loyalty card number, favorite products.
- Purposes and legal bases: This information allows us to manage your customer account (including account creation, password management, order history, saved addresses, benefits, etc.) based on the contractual basis of your account creation request. Optional data is collected based on your consent.
- Retention period:
Retained for the duration of the account’s activity and until you delete your account yourself or after a 2-year period of inactivity (or, for optional data, until consent is withdrawn).
Loyalty program management
- Data collected for the loyalty program: last name, first name, email address
- Purposes and legal basis: Based on your consent, Maison Amorine may offer members personalized offers, news, or advertisements based on your previous purchases and/or interests.
- Retention period: Data is retained for 3 years from the last contact, unless you object.
The processing does not involve automated decision-making, including profiling, except in the context of targeted communication campaigns based on the loyalty program member’s profile.
Our newsletters
- Your data: your consent to receive commercial communications via email, mail, and/or text message.
- Purposes and legal bases: to inform you of new products, promotions, themed selections, new services, or stores based on your ordering habits, and this only after obtaining your consent to receive these newsletters. When you are a Maison Amorine customer, we may also send you suggestions for purchasing our products or services similar to those you have already purchased, based on our legitimate interests as part of our commercial prospecting activities.
- Retention period: data is retained for 3 years from the last contact initiated by you, unless you object.
Our introductory offers and product discoveries
- Data collected for participation in the introductory offer and shipment of the offered products: skin type, product preferences, age group, email address, last name, first name, shipping address
- Data collected for feedback on the offered products: feedback, satisfaction survey
- Purposes and legal bases: this information allows us to select candidates wishing to participate in our launch offers, then to send you the products and collect your feedback on our new products, based on your consent. Your feedback may also be used for marketing and promotional purposes, in an anonymized form.
- Retention period: retained for the duration of the application phase and, if you are selected, for the product testing phase, then archived for 5 years for evidentiary purposes. If you withdraw your consent, the data will no longer be used for new tests, but may be retained in the archive regarding past tests based on our legitimate interest (for the purpose of asserting or defending our legal rights).
Personalization of the user experience
- Your data: cookie ID, browsing data (pages viewed, clicks, products viewed), technical data (browser type, language, device used), pseudonymized user segments.
- Purposes and legal bases: This data allows us to personalize content, product recommendations, or promotional offers on our site, and to analyze the effectiveness of user journeys. This processing is based on your consent, which you may withdraw at any time via our cookie management panel.
- Retention period: The collected data is retained for a maximum of 12 months from the date of collection, or until you withdraw your consent.
Your requests for advice, information, or complaints to our Customer Service
- Your data: last name, first name, email address, billing and shipping addresses, phone number, order history, order number, subject of the request, message content.
- Purposes and legal bases: This information allows us to respond to your requests in a personalized manner and provide you with quality service based on the contractual basis of your request (complaint following a purchase) or our legitimate interests in the context of our commercial activities and marketing efforts (request for information).
- Retention period: Customer data related to complaints is retained for 5 (five) years from the date of the complaint. Prospect data related to requests for information is retained for 3 (three) years from the date of the last contact.
Your responses to our questionnaires
- Your data: first name, age group, gender, skin type (dry, dehydrated, normal, oily, combination, sensitive, and reactive), makeup habits, frequency of sun exposure, skin tone, smoker or non-smoker, area of the face to be treated, concerns to be addressed, product preference, scent preference, allergies, preference for homemade or ready-to-use recipes, email address.
- Purposes and legal basis: This information allows us to respond to your requests in a personalized manner (e.g., hair care routine, skincare routine), enhance your customer profile to personalize our marketing communications via email and on our website, and compile statistics, based on your consent.
- Retention period:
Retained for the duration of the account’s activity and until you delete your account yourself or following a 2 (two)-year period of inactivity.
Your job applications
- Your data: first name, last name, email address, phone number, content of the cover letter, content of the resume
- Purposes and legal bases: This information allows us to search for relevant profiles (unsolicited applications and responses to job postings) and to manage recruitment procedures based on our legitimate interests in the context of our recruitment activities, as well as on the performance of pre-contractual measures when the candidate is selected. When the candidate consents, we also retain their data in our CV database to contact them again in the event of new opportunities.
- Retention period: the candidate’s data is retained for the duration necessary to complete the recruitment process. If the candidate is selected, their data will be incorporated into their personnel file and retained for the period applicable to that file. If the unsuccessful candidate does not consent to having their data retained in our CV database, we delete their data after 3 (three) months following the rejection decision. If the unsuccessful candidate consents to having their data retained in our CV database, we delete their data after 2 (two) years from the last contact.
Providing information is optional when indicated in parentheses or mandatory when indicated by an asterisk. If you do not provide the data, Maison Amorine will not be able to fulfill the stated purposes, and you will not be able to benefit from the corresponding service.
2. Who has access to your data?
The data collected is intended for Maison Amorine’s internal departments. However, it may be transmitted to and processed by third parties if the transfer of such data is necessary to fulfill the purposes mentioned in this Policy and to comply with Maison Amorine’s legal obligations, and in particular to any authorized third party when such disclosure is necessary:
- to comply with a legal obligation or a court order
- to conduct an investigation or legal proceedings against Maison Amorine
- to defend the rights of Maison Amorine
- to Maison Amorine’s service providers such as banks, auditors, lawyers, etc.
- to all of Maison Amorine’s subcontractors involved in:
- IT services (hosting, security, etc.)
- sales prospecting and marketing (email marketing solutions, social media for targeted advertising and personalized audiences, Google for performance measurement, etc.)
- travel management
- commercial relations
- reception and event management
- security
3. How is your data processed on social media?
Maison Amorine is active on social media (Instagram, Facebook, TikTok, etc.), through which you can interact directly with us.
Your use of these social media platforms may result in the exchange of your personal data between Maison Amorine and these platforms, based on your consent.
The privacy and security practices of these social media platforms are not covered by this Privacy Policy.
We therefore invite you to refer to the privacy policies of these social media platforms for more information.
4. Is your data processed outside the EU?
Our website and online store are hosted and operated via the Shopify platform. As such, some of your data is processed by Shopify International Limited (Ireland) and may then be transferred and stored on servers located outside the European Union, particularly in the United States. These transfers are governed by legal mechanisms recognized by European regulations to ensure an adequate level of protection for your data.
Shopify uses technical service providers, including Amazon Web Services (AWS), to host its infrastructure and operate its content delivery network (CDN). This means that certain data (such as static content or information necessary for the site’s operation) may be temporarily sent to servers located in different countries to ensure optimal performance.
By using our site, you agree that your data may be transferred outside your country of residence under the conditions described above. Shopify is committed to implementing strict technical and organizational security measures to protect your data against unauthorized access, use, or disclosure.
5. How do we protect your personal data?
Maison Amorine secures your personal data by implementing appropriate physical, organizational, and technical measures to prevent unauthorized access, alteration, use, disclosure, modification, or destruction, in accordance with applicable laws.
Although Maison Amorine uses all possible means to protect your personal data, we cannot guarantee the security of information transmitted on our site when it is transmitted over the Internet via an unsecured protocol.
6. What are your rights regarding your data?
- The right of access: this is the right to obtain confirmation of the processing of your personal data as well as the disclosure of certain information regarding how your personal data is processed by Maison Amorine
- The right to rectification: this is the right to have your personal data corrected when it is inaccurate or incomplete
- The right to erasure (“right to be forgotten”): this is the right to have your personal data erased when it is no longer necessary for the purposes for which it was collected or in the event of an objection to the processing of your personal data. The right to erasure is not enforceable in the cases provided for in Article 17.3 of the GDPR. In particular, this right does not apply while a contract is being performed, nor in the case of archiving for the establishment, exercise, or defense of a legal claim
- Right to Object: This is your right to object to the processing of your personal data by Maison Amorine. You have the right to object at any time, on grounds relating to your particular situation, to any processing based on Maison Amorine’s legitimate interests. In this case, Maison Amorine undertakes to cease processing the personal data in question, unless it demonstrates that there are legitimate and compelling grounds for the processing that override your interests and rights, or for the establishment, exercise, or defense of legal claims. In the event of an objection to processing for marketing purposes, Maison Amorine undertakes to no longer process the personal data in question for such purposes
- The right to restriction of processing: this is the right to restrict the use of your personal data by Maison Amorine, subject to compliance with the criteria set forth in Article 21 of the GDPR
- The right to data portability: this is the right to have your personal data transferred in a readable and structured format directly by Maison Amorine to another data controller, where technically feasible
- The right to withdraw consent: this is the right to withdraw your consent for data processing based on such consent, with the withdrawal of consent taking effect for the future
- The right to register on the do-not-call list in the event your phone number is collected
- The right to file a complaint: this is the right to file a complaint with the French Data Protection Authority (CNIL) if you believe that the processing carried out constitutes a violation of your personal data
- The right to define guidelines regarding the fate of your personal data after your death.
7. How to exercise your rights?
You may exercise your rights at any time by contacting us at: contact@maisonamorine.com
You may also modify certain of your data yourself within your customer account.
8. Option to file a complaint with the CNIL
If your interactions with Maison Amorine have not been satisfactory, you may file a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the supervisory authority responsible for ensuring compliance with personal data obligations in France (www.cnil.fr).