Privacy Policy
Data Controller
Grégoire KOSTYRA EI (trading as Maison Kema), SIREN 106 262 595, is the controller of personal data collected on maisonkema.com. Contact: vanillekema@gmail.com; postal address: see the legal notice.
Data Collected and Purposes
When placing an order: identity, delivery address, email and phone, in order to process and ship the order, issue the invoice and provide customer service. When subscribing to the newsletter: email address, in order to send you our news. When contacting us: the information you provide so we can respond to your request.
When withdrawing online ("Withdraw from the contract here"): order reference, email, name (optional) and products concerned, in order to record your withdrawal, send you its acknowledgement of receipt and process the refund. This data is kept with the corresponding order, then archived for the limitation period applicable to consumer disputes. To protect this form against automated attempts, each attempt is logged with the email entered and a fingerprint of your IP address hashed with a secret key, never the IP address itself; these entries are deleted after 24 hours.
Prospecting Professionals
We may send prospecting emails to professionals whose business relates to vanilla (pastry chefs, chocolatiers, restaurants, delicatessens, coffee roasters, tea houses, distilleries) to present our products. Data processed: company name, business sector, city and postal code, website, business email address and, where applicable, contact name and business phone, and the history and follow-up of our exchanges (status, internal notes). Source: these details are published by the companies on their own website (contact or legal notice pages); we record the page of origin. Legal basis: our legitimate interest in presenting our products to professionals for whom they relate to their business. Recipients: Supabase (hosting, European Union) and Resend (email delivery, see "Transfers Outside the European Union"). This data is neither sold nor transferred. Retention: 3 years from collection or from the last contact initiated by you; if you object, your email address is kept on a suppression list, solely so that we no longer write to you. You may object at any time, without giving reasons and free of charge, via the unsubscribe link in each message, by replying "STOP" or by writing to vanillekema@gmail.com.
Legal Bases
Processing is based on: performance of the sales contract (order, delivery, customer service); your consent (newsletter, non-essential cookies); compliance with legal obligations (invoicing, accounting); the Seller's legitimate interest (security and improvement of the site; prospecting professionals).
Recipients & Sub-processors
Your data is shared only with the service providers necessary to deliver the service: Stripe (payment), Resend (transactional emails, newsletter and business prospecting; hosting of mailing lists), Supabase (hosting of orders and customers, within the EU), Vercel (website hosting), Google (audience measurement via Google Analytics/Tag Manager and advertising conversion measurement via Google Ads, subject to your consent), Meta Platforms Ireland (advertising conversion measurement via the Meta pixel and Conversions API, subject to your consent). No data is sold to third parties.
Transfers Outside the European Union
Some providers (Stripe, Resend, Vercel, Google, Meta) may process data outside the European Union, in particular in the United States. These transfers are governed by appropriate safeguards (European Commission standard contractual clauses and/or Data Privacy Framework certification).
Retention Period
Order data is kept for the duration of the commercial relationship then for prospecting purposes for 3 years from the last contact; invoices and accounting records are kept for 10 years in accordance with legal obligations. Newsletter data is kept until unsubscription. Your cookie choice is kept for 6 months; advertising identifiers associated with an order are erased at the end of the payment (see the Cookies section).
Your Rights
Under the GDPR, you have the right of access, rectification, erasure, restriction, objection and portability regarding your data, as well as the right to set instructions concerning its fate after your death. To exercise these rights, write to vanillekema@gmail.com. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).
Cookies
The site uses audience-measurement cookies (Google Analytics via Google Tag Manager) and advertising cookies (Google Ads, Meta pixel) used to measure the effectiveness of our ads. In accordance with the regulations, these non-essential cookies are only set after your consent, collected via the banner shown on arrival (Google Consent Mode v2 mechanism, denied by default). Only with your consent, when you place an order, the order details (amount, products) and your billing contact details (email, phone, postal code, city, country) are sent to Google and Meta in irreversibly encrypted form (SHA-256 hashing), together with the advertising browser identifier and browser type (user-agent), in order to attribute the sale to an ad; these last two items are kept temporarily in the payment data at Stripe, then erased as soon as the payment is confirmed or declined, or the payment session expires without payment (at the latest 24 hours after it was opened); a copy may remain for about 30 days in the technical notification history kept by Stripe. Without your consent, nothing is sent. Your choice is stored in your browser (local storage "mk-consent") for 6 months, after which you will be asked again; it can be changed at any time via the "Cookie settings" link at the bottom of every page. Cookies strictly necessary for the operation of the site do not require consent.