Privacy Policy

Cookies and website use

Does MADC use Google Analytics?

No. MADC does not use Google Analytics, Google Analytics 4 (GA4), Google Tag Manager for analytics, or any other Google analytics service.

Does MADC use any analytics cookies or marketing cookies?

No. MADC does not use analytics cookies, marketing cookies, behavioural advertising cookies or advertising pixels. We do not use cookies to analyse how visitors use the website, build advertising audiences, or deliver targeted advertising.

Which cookies does MADC use?

MADC uses only strictly necessary cookies or equivalent technical storage required for the website to work securely and properly—for example, session management, account sign-in, shopping-cart functionality and security controls. These are not used for advertising or visitor analytics.

Why does the website show a Cookie Policy notice?

The notice tells you how cookies are used and records your cookie-related choice with a timestamp. It is part of MADC's commitment to transparent, accountable website operation. Because MADC does not use analytics or marketing cookies, declining optional tracking does not remove access to the website's normal public content.

Can I refuse or withdraw cookie consent?

Yes. You may decline optional cookies where presented, change your browser settings to manage cookies, or contact help@maisonatelierdc.com. Withdrawing consent does not affect processing that was lawful before the withdrawal. Please note that blocking strictly necessary cookies may prevent sign-in, secure checkout, shopping-cart or Client Portal functions from working correctly.

Does MADC sell my browsing behaviour or use it for targeted advertising?

No. MADC does not collect browsing behaviour through analytics or marketing cookies, and does not use such data to create advertising audiences or deliver targeted advertising.

Orders, consent and account information

Why must I accept the Terms and Service Agreement before placing an order?

Before an order can be submitted, MADC presents the Terms and Service Agreement and asks you to confirm acceptance. This ensures that the purchase terms, licence and other key conditions are available to you before checkout. Your agreement is recorded with a timestamp.

What personal data is needed to fulfil an order?

We process the information needed to administer and fulfil the purchase, such as your name, contact information, billing or delivery information where applicable, order details and payment-related information required for the transaction. We only seek the data needed for that purpose and legal record-keeping.

Do I have to agree to the Terms and Service Agreement to buy from MADC?

Yes. Agreement to the Terms and Service Agreement is required to place an order, because it forms the purchase agreement. If you do not agree, you will not be able to complete the order. This is separate from optional marketing or analytics consent: MADC does not use analytics or marketing cookies.

Is my agreement recorded?

Yes. MADC records the consent action, the relevant agreement and a timestamp so that we can demonstrate when and what was agreed. We retain only the minimum information needed for that purpose.

How long does MADC keep my order and consent information?

MADC keeps order and consent records only for as long as necessary to complete the transaction, provide the service, demonstrate compliance and meet applicable legal record-keeping obligations. Retention is not indefinite. Where you ask for deletion, we will assess the request against any information we are required to retain by law.

Security and consent records

How are consent records protected?

Consent records are stored in a secure database. MADC uses data-minimisation controls and timestamped records. Personal identifiers in the consent record are protected with a cryptographic hash combined with a server-side secret (a “pepper”); the pepper is stored separately in a secure secrets-management system. This means raw identifiers are not retained in plaintext in the consent record.

What does “hashed with a pepper” mean for me?

It means that a consent identifier is transformed into a protected value rather than being stored as readable plain text in that record. The separate server-side secret makes a database-only compromise substantially harder to reverse into the original identifier. No security control can eliminate all risk, but this design reduces exposure and supports privacy by design.

Does MADC keep a record of every action I take online?

No. MADC maintains the limited records necessary to demonstrate cookie-related choices and acceptance of the Terms and Service Agreement, together with information required to operate and fulfil an order. MADC does not use website analytics or marketing tracking to build a behavioural history of your browsing.

Your privacy rights

What GDPR rights do I have?

Depending on the circumstances and applicable law, you may have the right to be informed, access your data, correct inaccurate data, request erasure, restrict processing, receive certain data in a structured machine-readable form, object to processing and withdraw consent. You may also have the right to complain to your local data-protection authority.

How do I request a copy of my consent record or personal data?

Email help@maisonatelierdc.com with the subject line Privacy Request — Access. Please use the email address associated with your order or account and tell us what information you are requesting. We may need to verify your identity before disclosing personal information.

How do I correct inaccurate information?

Email help@maisonatelierdc.com with the subject line Privacy Request — Rectification, explain what is inaccurate and provide the correct information. We will review the request and update eligible records.

How do I ask MADC to delete my data?

Email help@maisonatelierdc.com with the subject line Privacy Request — Erasure. You may request deletion of consent records and other personal data. We will delete data where required or appropriate, except to the extent we must retain it for a legal obligation, fraud prevention, dispute handling, accounting or the establishment, exercise or defence of legal claims. If we cannot delete a particular record immediately, we will explain the reason.

Can I withdraw consent after an order has been placed?

You may withdraw consent at any time where processing is based on consent. Withdrawal does not invalidate processing that took place before it. Some data processing may still be necessary to fulfil an existing contract, provide purchased access, meet legal obligations or manage a legitimate transaction record; in those cases, consent is not the only relevant legal basis.

How do I object to or restrict processing?

Email help@maisonatelierdc.com with the subject line Privacy Request — Objection or Privacy Request — Restriction. Describe the processing concerned and your request. We will assess it under applicable data-protection law and explain the outcome.

How do I request my data in a portable format?

Email help@maisonatelierdc.com with the subject line Privacy Request — Portability. Where the right applies, MADC will provide the relevant data in a structured, commonly used, machine-readable format.

Contact

For any privacy, cookie or consent request, contact:

MADC Privacy Support
help@maisonatelierdc.com