Privacy Policy

Last Updated: January 2025

This Privacy Policy outlines how MaisonZifan ("we," "us," "our," or "Site") collects, uses, discloses, and protects your personal information when you use our website, www.maisonzifan.com (the "Site"), or other services (collectively, the "Services"). By using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our Services.

 

1. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for operational, legal, or regulatory reasons. Updates will be posted on this page, and the "Last Updated" date will be revised. Significant changes may also be communicated via email or prominent notices on the Site.

 

2. Information We Collect

2.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, billing and shipping addresses.
• Order Information: Purchase details, payment confirmation, and transaction details.
• Account Information: Username, password, and security questions.
• Customer Support Information: Messages or other details provided during support interactions.

2.2 Information Collected Automatically

• Usage Data: Includes IP address, device and browser type, operating system, and interactions with our Site.
• Cookies and Similar Technologies: Tracks user preferences, sessions, and activities on the Site. See Section 6 - Cookies for more details.

2.3 Information Obtained from Third Parties

• Service Providers: Information from partners such as Shopify, payment processors, and shipping companies.
• Marketing and Advertising Partners: Data used to provide tailored advertisements and promotions.

 

3. How We Use Your Information

3.1 Service Delivery

• Process payments and fulfill orders.
• Provide customer support and account management.
• Facilitate returns, exchanges, and other account-related activities.

3.2 Marketing and Advertising

• Send promotional communications via email or text.
• Display tailored advertisements on our Site and partner websites.

3.3 Security and Fraud Prevention

• Detect, investigate, and address unauthorized activities.
• Protect the integrity of the Services and user accounts.

3.4 Legal Compliance

• Respond to legal obligations, subpoenas, and regulatory inquiries.

 

4. Sharing Your Information

We may share your personal information under the following circumstances:

4.1 With Service Providers

• Vendors assisting with order processing, IT management, payment processing, and data analytics.

4.2 For Marketing Purposes

• Business and marketing partners for promotional activities.

4.3 Legal and Business Transactions

• During mergers, acquisitions, or similar events.
• To comply with legal obligations or protect rights.

4.4 Summary of Sharing Practices

Category	Shared With
Contact Information	Service Providers, Marketing Partners
Order Information	Service Providers
Usage Data	Marketing Partners

 

5. Your Rights

Depending on your location, you may have the following rights:

• Access/Know: Request access to the data we hold about you.
• Correct: Update or correct inaccurate information.
• Delete: Request deletion of your personal information.
• Portability: Receive your data in a portable format.
• Opt-Out: Decline certain data uses, including targeted advertising.
• Withdraw Consent: Revoke consent for processing activities based on your approval.

To exercise these rights, contact us at privacy@maisonzifan.com. We may verify your identity before processing requests.

 

6. Cookies

6.1 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality.
• Performance Cookies: Analyze how you use the Site.
• Marketing Cookies: Deliver tailored advertisements.

6.2 Managing Cookies

You can modify your browser settings to block or delete cookies. Note that some features may not function properly without cookies.

6.3 Global Privacy Control

Our Site recognizes the Global Privacy Control (GPC) signal to manage opt-out requests for data sharing or targeted advertising.

 

7. Children's Privacy

Our Services are not intended for children under 13 years old. We do not knowingly collect information from children. If you believe a child has provided personal information, contact us to delete the data.

 

8. Security and Retention

We employ industry-standard measures to protect your data, including encryption and access controls. While no method is completely secure, we strive to safeguard your information. Retention periods vary based on legal, contractual, and operational requirements.

 

9. International Data Transfers

Your data may be processed in countries outside your residence, subject to applicable safeguards. Transfers to the EU rely on mechanisms like Standard Contractual Clauses.

 

10. Data Breaches

In the event of a data breach, affected users will be notified as required by applicable laws.

 

11. GDPR Compliance

If you are a resident of the European Union (EU) or the European Economic Area (EEA), the General Data Protection Regulation (GDPR) grants you specific rights regarding your personal data.

11.1 Data Processing Principles

We process your personal data in compliance with GDPR principles, ensuring transparency, fairness, and lawful data usage.

11.2 Lawful Basis for Processing

We rely on the following legal grounds to process your data:

• Consent: When you explicitly agree to specific processing activities.
• Contractual Necessity: To fulfill contractual obligations (e.g., order processing).
• Legal Obligation: To comply with legal or regulatory requirements.
• Legitimate Interests: For activities that do not override your fundamental rights.

11.3 Your GDPR Rights

Under GDPR, you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete information.
• Erasure ("Right to be Forgotten"): Request deletion of your data under certain circumstances.
• Restriction of Processing: Limit how we use your data.
• Data Portability: Receive your personal data in a machine-readable format.
• Objection: Object to processing, particularly for direct marketing.
• Automated Decision-Making: Avoid decisions based solely on automated processes, including profiling.

11.4 Cross-Border Data Transfers

We implement appropriate safeguards, such as Standard Contractual Clauses, to protect data transferred outside the EU/EEA.

11.5 Data Protection Officer (DPO)

For GDPR-related inquiries, you may contact our DPO at:

• Email: privacy@maisonzifan.com
• Mail: 418 Broadway STE R Albany, NY 12207

11.6 Complaints

If you believe your data rights are violated, you have the right to file a complaint with your local Data Protection Authority (DPA).

 

12. Updates and Notifications

Policy updates will be posted on this page. Significant changes may be communicated via email or prominent notices.

 

13. Contact Us

For questions or to exercise your rights, contact us at email: info@maisonzifan.com