Maison Malena respects your privacy. This policy explains what personal data we collect when you browse the site or submit an inquiry to acquire a work, how we use it, whom we entrust with its processing, and what rights you have. We follow the principle of data minimisation: we collect only what is necessary to respond to you and — should you decide to acquire a work — to arrange and complete the purchase.
01Who we are
The controller of your personal data is the Maison Malena studio (the “studio”, “we”). For any questions about your data, or to exercise the rights described below, write to us at privacy@maisonmalena.com.
02What data we collect
Inquiry data. When you submit an acquisition inquiry, we collect your name, email address, country, the work you are interested in and the text of your message, if you provide one, and we record the fact and date of your agreement to this policy.
Anti-spam. To distinguish people from automated bots, the form is protected by Cloudflare Turnstile, which processes a technical token and basic request signals. It does not track you across other sites.
Technical data. Hosting providers automatically keep standard server logs (IP address, browser and device type, timestamps); this is necessary for the security and stable operation of the site.
Payment data. When completing a purchase, card details are entered directly within Stripe’s secure environment (see below). The studio neither sees nor stores your full card number — only the amount, currency, transaction status and its Stripe identifiers.
03Why and on what legal basis
We process data in order to respond to your inquiry and discuss a possible acquisition — on the basis of steps taken at your request prior to entering into a contract, and your consent.
To arrange and complete a purchase, including payment, invoicing and delivery — on the basis of performance of a contract with you.
To maintain the security of the site, prevent abuse and meet our accounting and tax obligations — on the basis of our legitimate interests and legal requirements.
04Payments and Stripe
When card payment is available, payments are processed by Stripe, Inc. as an independent data controller. Card details are entered within Stripe’s secure, PCI-DSS-certified environment; the studio receives only confirmation of the amount, currency and transaction status, and a Stripe reference. For more information, see Stripe’s privacy policy: stripe.com/privacy.
Until card payments go live, this section describes how payment will work once it is enabled.
05Whom we share data with
We work with a limited circle of trusted providers that process data strictly on our instructions: Stripe (payments), Resend (transactional confirmation emails), Cloudflare (anti-spam verification of the form), and the application and database hosting providers. Each of them is required to use the data only on our instructions and to keep it secure. We do not sell your data and do not pass it to third parties for advertising purposes.
06Emails
After you submit an inquiry, we may send a transactional confirmation email to you and to the studio via Resend. These emails relate only to your inquiry — we do not add you to any marketing mailing lists.
07Cookies
The site uses only strictly necessary technical cookies, without which it does not function, together with the anti-spam verification of the form. We do not use advertising or cross-site tracking cookies.
08Retention periods
We retain correspondence relating to your inquiry for as long as necessary to handle it and to maintain our relationship with you. If a purchase takes place, payment and order records are kept for the periods required by accounting and tax law, after which they are deleted or anonymised.
09International transfers
Some providers may process data outside your country or the European Economic Area. In such cases, the transfer is protected by appropriate legal mechanisms — for example, the EU Standard Contractual Clauses or an adequacy decision.
10Your rights
To the extent provided by applicable law, you have the right to request access to your data, its correction or deletion, the restriction or cessation of processing and the portability of your data, and to withdraw your consent at any time — this does not affect processing carried out previously. To exercise these rights, write to privacy@maisonmalena.com. You may also lodge a complaint with the supervisory authority for data protection.
11Changes to this policy
We may update this policy from time to time to reflect changes in the studio’s operations or in legal requirements. The current version is always available on this page; we will give notice of material changes before they take effect.
12Contact
For questions about privacy and data processing, write to privacy@maisonmalena.com — we will respond within a reasonable time.
All
