Privacy
policy

1. Data controller

The controller of the personal data collected through this site is [PENDING: company name], with tax ID [PENDING: NIF or CIF] and address at [PENDING: full registered address]. You can contact the controller at maisonrare@maisonrareofficial.com.

No data protection officer has been appointed, as none of the cases in article 37 of Regulation (EU) 2016/679 (GDPR) applies.

2. What data is processed and where it comes from

This site has no contact forms and no user registration. Personal data is only obtained when you choose to start a conversation yourself, through one of these three channels:

• WhatsApp. Pressing any contact button opens a conversation in your own app. Maison Rare receives your phone number, the profile name you have set and the content of the messages you send.
• Email. Your address, your name and the content of the message.
• Telephone. Your number and the details you give during the call.

If the conversation leads to a purchase or sale, the identification and billing details needed to formalise it will also be collected.

3. Why it is processed

• To answer your enquiry and send you information about the pieces you ask about.
• To manage reference sourcing commissions.
• To formalise, carry out and invoice purchases and sales.
• To comply with the applicable legal, accounting and tax obligations.

4. Legal basis

• Consent (art. 6.1.a GDPR) for answering enquiries: you are the one who starts the contact.
• Performance of a contract or pre-contractual steps (art. 6.1.b GDPR) for managing commissions, purchases and sales.
• Compliance with a legal obligation (art. 6.1.c GDPR) for keeping commercial and tax records.

5. How long it is kept

Enquiries that do not lead to a transaction are kept for as long as the relationship lasts and, at most, one year from the last contact. Data linked to a purchase or sale is kept for the statutory limitation periods: six years for commercial records (art. 30 of the Spanish Commercial Code) and four years for tax purposes (art. 66 of the Spanish General Tax Law).

6. Recipients

No data is passed on to third parties except where required by law. The technology providers needed to deliver the service act as processors:

• Vercel Inc. — website hosting.
• Cloudflare, Inc. — storage and delivery of catalogue images.
• WhatsApp Ireland Limited (Meta group) — messaging channel, when you choose to use it. WhatsApp’s processing of your data is governed by its own privacy policy, independent of Maison Rare.

Some of these providers may process data outside the European Economic Area. In that case the transfer relies on the standard contractual clauses approved by the European Commission or on an adequacy decision in force.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by writing to maisonrare@maisonrareofficial.com and stating the right you wish to exercise. If you consider that the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

Appropriate technical and organisational measures are applied to protect data against destruction, loss, alteration and unauthorised access. The whole site is served over an encrypted connection (HTTPS).

9. Minors

The site is not aimed at children under fourteen and their data is not knowingly collected.

This translation is provided for information only. In the event of any discrepancy, the Spanish version prevails.

Last updated: 14 September 2026.