Privacy Policy

Maison Cleon collects and processes your data to manage your orders, communicate with you, and improve its services. Your data is processed in accordance with the GDPR; you have the right to access, rectify, erase, and object to the use of your data. To learn more about the purposes, durations, and service providers, please see the full policy below or contact us at: contact@maisoncleon.com.

Data Controller and Contact

Controller: Maison Cleon (Lucas CROSSOUARD)
Email for GDPR inquiries: contact@maisoncleon.com
DPO (Data Protection Officer): No DPO appointed. Please use the email address above for any inquiries.

 

 
Data Collected

We may collect, depending on the case:

  • Identification data: name, surname, address, email, phone number.

  • Order data: purchased products, price, billing, delivery addresses.

  • Payment data: payment token managed by Stripe (we do not store card numbers).

  • Connection and browsing data: IP address, browser type, pages visited, visit duration (logs, cookies).

  • Data from forms: contact requests, customization requests, newsletter subscriptions.

  • Marketing/tracking data: if you consent (Google Analytics, Poptin, pixels, etc.).

 

 
Purposes and Legal Bases for Processing

For each purpose, the corresponding legal basis is:

  • Order and billing management — contract performance / legal obligation (invoice retention).

  • Payment processing (via Stripe) — contract performance.

  • Customer support / after-sales service — contract performance or legitimate interest for pre-contractual requests.

  • Newsletters & marketing — explicit consent (opt-in).

  • Analytics & site optimization — consent (for non-essential cookies).

  • Security, fraud prevention — legitimate interest (logs, security).

Consent must be free, specific, informed, and revocable (as reminded by CNIL / EU regulations).

 

 
Data Recipients (Processors / Service Providers)

Data may be shared with the following recipients:

  • Payment provider: Stripe (tokens / payment management).

  • Hosting / infrastructure: o2switch (web hosting).

  • Analytics & marketing tools: Google Analytics, Poptin, Complianz, Calendly (if used).

  • Logistics providers: Delivery-related data (name, surname, postal address, phone, email) may be transmitted to carriers responsible for shipping your orders. These carriers include La Poste / Colissimo, Chronopost, Mondial Relay, or equivalent providers depending on the option selected at checkout.

  • Advisors / accountant: In compliance with legal obligations, some billing and payment data are kept and may be transmitted to our advisors or accounting providers if necessary. As a sole proprietorship, Maison Cleon does not currently collect VAT, but must keep invoices and accounting records for 10 years under French law. Payment data is processed and secured by Stripe; Maison Cleon never has access to customers’ credit card numbers.

 

 
Data Retention Periods

Data are kept only for the time necessary for their purposes:

  • Prospects / contact form data (if not a customer): 3 years from last contact (CNIL guidelines for marketing).

  • Customers / orders / invoices: 10 years (legal and accounting obligations).

  • Payment data: only transaction-proof data kept by providers.

  • Cookies / technical logs: 13 months (if anonymized or subject to consent).

  • Marketing data: 3 years from last contact/consent, unless opt-out earlier.

 

 
Security and Technical/Organizational Measures

We implement appropriate measures: secure hosting at o2switch, backups, HTTPS/TLS encryption, access controls, password encryption, software updates, contracts with service providers guaranteeing data security.

 

 
Data Subject Rights

In accordance with GDPR, individuals have the following rights:

  • Right of access.

  • Right to rectification.

  • Right to erasure (“right to be forgotten”), subject to legal obligations.

  • Right to restriction of processing.

  • Right to object.

  • Right to data portability.

  • Right to withdraw consent (retroactively).

To exercise your rights: send an email to contact@maisoncleon.com with a copy of an ID document if necessary.

 

 
Cookies and Trackers

 

 
Minors

The Site is not intended for minors. Parents/guardians are asked not to provide minors’ personal data. If we learn that data was collected without parental consent, it will be deleted as soon as possible.

 

 
Data Retention & Deletion Examples

  • Orders: 10 years.

  • Accounting invoices: 10 years.

  • Prospects: 3 years.

  • Server logs and security logs: 13 months.

 

 
Policy Updates

This Privacy Policy may change. Any significant updates will be notified on the Site, and the update date will be modified.

 

 
List of Subcontractors / Processors

For each provider: specify address, legal basis for any data transfer outside the EU, and where applicable, provide a copy of the standard contractual clauses.

 

 
Specific Clauses — Payments and Fraud

Payments are secured by Stripe; no card information is stored on our servers.
For fraud prevention, we retain necessary logs and may transmit information to authorities if required by law.

 

 
Useful References

 

Last update date: 28/09/2025
Controller: Maison Cleon — Lucas CROSSOUARD
Address: 11 Le Pé de Sèvre, 44330 Le Pallet, FRANCE
Email: contact@maisoncleon.com
SIRET: 878 976 679

Scroll to Top