Privacy Policy

This Privacy Policy explains how PERFUMES OF TOMORROW HLDG, the operator of the MAISON MORO website (www.maisonmoro.com), collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the French Data Protection Act (Loi Informatique et Libertés) of 6 January 1978, as amended.

Data Controller

PERFUMES OF TOMORROW HLDG
91 rue de Monceau
75008 Paris, France
contact@maisonmoro.com

Personal Data We Collect

When you place an order or browse our website, we may collect the following personal data:

• Identification data (first name, last name, email address, telephone number);

• Billing and delivery addresses;

• Payment information, which is processed directly by Shopify Payments. MAISON MORO does not have access to your payment card or banking details;

• Browsing data, including pages visited, products viewed, IP address, and cookie-related information.

Purposes of Processing

Your personal data is processed for the following purposes:

• Processing and fulfilling your orders;

• Sending order confirmations and shipping notifications;

• Managing returns and providing customer support;

• Improving our website and your user experience;

• Sending marketing communications where you have provided your consent;

• Complying with our legal, regulatory, and tax obligations.

Where your telephone number is collected during the ordering process, it will be used solely for the performance of your orders or to contact you regarding new services that may be of interest to you.

Legal Basis for Processing

We process your personal data on the following legal bases:

• Performance of a contract, for processing and fulfilling your orders;

• Legitimate interests, including improving our website and preventing fraud;

• Your consent, for marketing communications and non-essential cookies;

• Compliance with legal obligations, including accounting and tax record-keeping requirements.

Data Retention

Order-related data is retained for ten (10) years, in accordance with applicable accounting legislation. Customer account data is retained for three (3) years from your last purchase or interaction with us. Marketing data is retained until you withdraw your consent.

Data Sharing

Your personal data may be shared with service providers involved in the provision of our services, including:

• Shopify Inc., for website hosting and payment processing;

• Our logistics and shipping partners for the delivery of your orders;

• Analytics providers, using anonymised or aggregated data where appropriate.

Your personal data may also be retained where necessary for security purposes or to comply with applicable legal and regulatory obligations.

We never sell your personal data to third parties.

Relationship with Shopify

Our website is hosted by Shopify, which also collects and processes certain personal data to provide and improve its services, including payment processing, fraud prevention, website hosting, analytics, and advertising functionalities. In this context, Shopify acts partly as our data processor and partly as an independent data controller for processing activities carried out on its own behalf. For further information on how Shopify processes your personal data and the rights available to you, please consult Shopify's Privacy Policy and Shopify's Privacy Portal.

International Data Transfers

Your personal data may be transferred to, stored, or processed outside the European Union, including by Shopify Inc. (Canada) and certain of its subprocessors.

Where such transfers originate from the European Economic Area, appropriate safeguards are implemented in accordance with the GDPR, including the European Commission's Standard Contractual Clauses or an adequacy decision where applicable, to ensure an adequate level of protection for your personal data.

Your Rights

In accordance with the GDPR, you have the right to:

• access your personal data;

• rectify inaccurate or incomplete data;

• request erasure of your data ("right to be forgotten");

• request restriction of processing;

• receive your data in a portable format;

• object to certain processing activities;

• withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at contact@maisonmoro.com, indicating your full name and email address. You also have the right to lodge a complaint with the French Data Protection Authority (CNIL) via www.cnil.fr.

Cookies

Our website uses:

• strictly necessary cookies required for the operation of the website (including shopping cart and user session management);

• performance cookies for website analytics;

• marketing cookies.

You can manage your cookie preferences through the consent banner displayed during your first visit.

You may also configure your browser to refuse cookies. Please note that doing so may affect the proper functioning of certain features of the website.

Children's Data

Our website is not intended for minors, and we do not knowingly collect personal data from individuals who have not reached the legal age of majority.

If you are a parent or legal guardian and believe that a minor has provided us with personal data, please contact us at contact@maisonmoro.com so that we may delete such information.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. All payment transactions are secured using SSL/TLS encryption.

Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time to reflect changes in our practices or applicable legal requirements. We encourage you to review this Privacy Policy regularly.

Last updated: June 2026