Privacy Policy
Effective Date: 12/05/2025
At Maison d’Élixir, we are committed to protecting your privacy and handling your personal data with transparency, integrity, and respect. This Privacy Policy outlines how we collect, use, store, and protect your data in accordance with the General Data Protection Regulation (GDPR) and applicable Greek law.
1. Who We Are
Maison d’Élixir is a Greek-based business offering hand-decanted perfume samples. For the purposes of the GDPR, we are the “data controller” of your personal information.
Contact Information:
📧 info@maisondelixir.gr
2. What Data We Collect
When you browse or shop on our website, we may collect the following data:
- Identity & Contact Information: Name, billing/shipping address, phone number, email.
- Order Details: Products ordered, payment method, and transaction ID.
- Technical Data: IP address, browser type, device type, and cookies.
- Marketing Preferences: Your opt-in consent for newsletters (if applicable).
We do not store or process your full credit/debit card details. All payments are securely processed via trusted third-party gateways (e.g., Stripe).
3. How We Use Your Data
We use your personal information for the following purposes:
- To process and fulfill your orders.
- To communicate with you about your order, returns, or inquiries.
- To send marketing emails, only if you have provided consent.
- To comply with legal and tax obligations.
- To improve website functionality and user experience.
4. Legal Basis for Processing
Under the GDPR, we rely on the following legal bases to process your data:
- Contractual necessity – to fulfill your orders.
- Legal obligation – to retain invoices and transaction data.
- Consent – for marketing communications (you can withdraw at any time).
- Legitimate interests – such as website analytics and fraud prevention.
5. How We Store & Protect Your Data
Your data is stored securely on servers and systems that comply with industry standards for encryption, access control, and data retention. We limit access to your personal data to only those employees or partners who need it to perform their tasks.
6. Third-Party Sharing
We only share your data with trusted third parties when necessary:
- Payment processors: e.g., Stripe.
- Shipping carriers: to deliver your order.
- Analytics & IT services: such as Google Analytics or cloud storage providers.
We do not sell or rent your data to any third parties.
7. Cookies
Our website uses cookies to enhance your browsing experience and analyze website performance. You can control cookie settings via your browser or through our cookie banner.
8. Your GDPR Rights
As an EU resident, you have the following rights:
- Access – to request a copy of the personal data we hold about you.
- Rectification – to correct inaccurate or incomplete data.
- Erasure – to request deletion of your data under certain conditions.
- Restriction – to limit how we use your data in specific cases.
- Portability – to request your data in a machine-readable format.
- Objection – to object to processing based on legitimate interests or direct marketing.
To exercise any of these rights, contact us at info@maisondelixir.gr.
9. Data Retention
We retain your data only as long as necessary:
- Order and invoice data: minimum 6 years (Greek tax law).
- Newsletter data: until you unsubscribe.
- Analytics data: anonymized or deleted after a fixed period.
10. Changes to This Policy
We may update this Privacy Policy occasionally. The latest version will always be posted on this page, with the effective date updated.
11. Questions or Complaints
If you have any questions or are concerned about how we handle your data, please contact us directly.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA):
https://www.dpa.gr