Privacy Policy
Last updated: 01/05/2026
INTRODUCTION
Maison Orynn, operated by SELLORA DISTRIBUTION (hereinafter "Maison Orynn", "we" or "the Seller"), is committed to protecting the privacy of its customers and users. This Privacy Policy describes how we collect, use, share and protect your personal data when you visit or make a purchase on the website https://www.maisonorynn.com/ (hereinafter "the Website").
It is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and, for residents of the United States, with applicable privacy laws, including the California Consumer Privacy Act (CCPA).
By using our site, you acknowledge that you have read this policy. We invite you to read it carefully.
ARTICLE 1 – DATA CONTROLLER
The data controller of your personal data is:
● SELLORA DISTRIBUTION
● 47 rue Vivienne, 75002 Paris, France
● SIRET: 103 170 437 00018
● E-mail: contact@maisonorynn.com
● Website: https://www.maisonorynn.com/
ARTICLE 2 – DATA COLLECTED
2.1. Data you provide us directly
When using our site, you may be asked to provide us with the following data:
● Identity: last name, first name
● Contact details: postal address, e-mail address, telephone number
● Order data: items purchased, order history, shipping and billing address
● Payment data: processed directly and securely by our payment providers (Stripe, PayPal, Klarna) — Maison Orynn does not store any bank details
● Communications: messages sent via our contact form or our customer service
2.2. Data collected automatically
When you browse the site, certain data is collected automatically:
● Browsing data: pages visited, visit duration, navigation path on the site
● Technical data: IP address, browser type, operating system, screen resolution
● Approximate location data: country, region (deduced from IP address)
● Cookies and similar technologies: detailed in Article 6
2.3. Data from third parties
We may receive data about you from third-party partners (advertising platforms, social networks) as part of marketing campaigns, to the extent that you have consented to such sharing with said third parties.
ARTICLE 3 – PURPOSES AND LEGAL BASIS OF PROCESSING
We process your personal data for the following purposes:
● Performance of the sales contract — order processing, payment, shipping, tracking, after-sales service and returns management. Legal basis: performance of a contract (Art. 6.1.b GDPR).
● Customer relationship management — responding to requests, complaints and disputes. Legal basis: legitimate interest (Art. 6.1.f GDPR).
● Marketing communication — sending newsletters, promotional offers and news via Brevo and Shopify Email, only with your consent. Legal basis: consent (Art. 6.1.a GDPR).
● Site improvement and targeted advertising — audience analysis, performance measurement and display of personalized advertisements via third-party tools (which may include Meta Pixel, Google Analytics, TikTok Pixel depending on active configurations). Legal basis: consent (Art. 6.1.a GDPR).
● Legal obligations — accounting, invoicing, fraud prevention. Legal basis: legal obligation (Art. 6.1.c GDPR).
ARTICLE 4 – RECIPIENTS OF THE DATA
Your personal data may be shared with the following categories of recipients, strictly within the limits of the purposes described above:
● Logistics and transport providers (Colissimo, Chronopost, Mondial Relay, etc.) — for shipping and delivery of orders
● Payment providers (Stripe, PayPal, Klarna) — for secure transaction processing
● Email marketing providers (Brevo, Shopify Email) — for sending commercial communications with your consent
● Advertising and analytics platforms (which may include Meta, Google, TikTok) — for performance measurement and targeted advertising, with your consent
● Website host (Shopify Inc., Canada) — for the technical operation of the website
● Administrative or judicial authorities — in case of legal obligation
Maison Orynn does not sell your personal data to third parties. Any sharing is governed by contracts guaranteeing a level of protection equivalent to that which we apply.
ARTICLE 5 – TRANSFERS OUTSIDE THE EUROPEAN UNION
Some of our service providers (including Shopify Inc., Brevo, Meta, Google) may process your data outside the European Union, particularly in Canada, the United States, or other countries.
These transfers are governed by appropriate safeguards in accordance with the GDPR, including:
● Standard Contractual Clauses (SCCs) approved by the European Commission,
● The Trans-Atlantic Data Privacy Framework, for transfers to the United States.
You can obtain information about these safeguards by contacting us at: contact@maisonorynn.com.
ARTICLE 6 – COOKIES AND SIMILAR TECHNOLOGIES
6.1. What is a cookie?
A cookie is a small text file placed on your device when you visit a website. It allows information about your browsing and preferences to be remembered.
6.2. Types of cookies used
● Strictly necessary cookies — essential for the website's operation (cart, session, security). They do not require your consent.
● Analytical cookies — allow us to measure the website's audience and performance (e.g., Google Analytics). Subject to your consent.
● Marketing and advertising cookies — allow us to offer you personalized advertisements on other sites (e.g., Meta Pixel, TikTok Pixel). Subject to your consent.
6.3. Managing your preferences
When you first visit the site, a cookie management banner allows you to accept or refuse non-essential cookies. You can change your preferences at any time from this banner or from your browser settings.
Maison Orynn respects the Global Privacy Control (GPC) signal. If you visit our site with this setting enabled, we will consider it a request to object to the placement of non-essential cookies.
ARTICLE 7 – DATA RETENTION PERIOD
● Customer and order data: retained for the entire duration of the business relationship, then archived for 5 years from the last order (accounting and tax obligations).
● Commercial prospecting data (newsletter): retained for 3 years from the last contact or until consent is withdrawn.
● Browsing data and cookies: retained according to the specific duration of each cookie (maximum 12 months for cookies requiring consent).
● Contact form data: retained for the time necessary to process the request, then deleted within 12 months.
ARTICLE 8 – YOUR RIGHTS
8.1. Rights of European Union Residents (GDPR)
In accordance with the GDPR, you have the following rights:
● Right of access: obtain a copy of your personal data
● Right to rectification: correct inaccurate or incomplete data
● Right to erasure (right to be forgotten): request the deletion of your data
● Right to restriction of processing: temporarily suspend the processing of your data
● Right to object: object to the processing of your data, particularly for prospecting purposes
● Right to data portability: receive your data in a structured and readable format
● Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.
To exercise these rights, please contact us at: contact@maisonorynn.com. We commit to responding within a maximum of 30 days. In case of a complaint, you can contact the CNIL: www.cnil.fr.
8.2. Rights of United States Residents (CCPA and similar laws)
If you reside in California or a U.S. state with a personal data protection law, you have specific rights, including:
● The right to know what personal data is collected and how it is used,
● The right to delete your personal data,
● The right to object to the "sale" or "sharing" of your data for targeted advertising purposes,
● The right to non-discrimination for exercising your rights.
To exercise these rights, please contact us at: contact@maisonorynn.com. Maison Orynn does not discriminate against users who exercise their privacy rights.
If you visit our site with the Global Privacy Control (GPC) setting enabled, we will consider this a request to object to the sharing of your data for advertising purposes.
ARTICLE 9 – DATA SECURITY
Maison Orynn implements all appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, disclosure, or alteration. These measures notably include:
● SSL/TLS encryption of communications on the site,
● Payment processing by PCI-DSS certified providers,
● Encrypted storage of passwords,
● Access to data limited to authorized personnel only.
In the event of a data breach likely to pose a risk to your rights and freedoms, we undertake to notify the competent authorities and, where applicable, the affected individuals, within the deadlines provided by the GDPR.
ARTICLE 10 – CHANGES TO THE PRIVACY POLICY
Maison Orynn reserves the right to modify this Privacy Policy at any time, particularly to comply with changes in regulations or our practices.
In the event of substantial changes, we will inform you by email or via a notification on the website. The date of the last update is indicated at the top of the document. We encourage you to consult this page regularly.
ARTICLE 11 – CONTACT
For any questions regarding this Privacy Policy or to exercise your rights, you can contact us:
● By email: contact@maisonorynn.com
● By mail: SELLORA DISTRIBUTION, 47 rue Vivienne, 75002 Paris, France
We undertake to process your request as soon as possible and within a maximum of 30 days.