1. Controller
Camaran Group OÜ, registry code 17403952, Sepapaja tn 6, Lasnamäe, Tallinn 15551, Estonia. Privacy contact: hello@maisonorivelle.com.
2. Data we process
We process contact details, delivery country, request notes, product images, communications, private offers, payment and transaction references, inspection records, shipping information, account identifiers and necessary technical/security logs.
3. Why and on what basis
We use data to answer requests and take pre-contractual steps; perform sourcing, sale, delivery and support contracts; comply with accounting, customs, sanctions and legal duties; prevent fraud and secure our systems on the basis of legitimate interests; and send optional marketing only where consent or another lawful basis applies.
4. Recipients and international processing
Data is shared only as needed with hosting and storage providers, professional source partners, authenticators, payment providers, couriers, customs representatives, professional advisers and authorities. A request concerning China may require limited data to be processed outside the EEA. We minimise shared data and use lawful transfer safeguards where required.
5. Retention
Unconverted sourcing requests are normally reviewed for deletion or anonymisation after 12 months. Contract, payment, customs and accounting records are retained for legally required periods. Security records and support correspondence are kept only as long as reasonably necessary for their purpose and disputes.
6. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier processing. You may complain to the Estonian Data Protection Inspectorate or your local supervisory authority.
7. Security
We use encrypted transport, access controls, private object storage, row-level database rules, mailbox two-factor authentication and authenticated administrative access. No internet service can promise absolute security.
8. Cookies and analytics
Essential technologies may be used for security and functionality. Non-essential advertising or analytics technologies will not be activated without the consent required in the visitor's jurisdiction. This policy will be updated when Meta, TikTok or other measurement tools are enabled.
9. Children and updates
The service is not directed to children. Material policy changes will be posted here with a revised date.