PRIVACY POLICY

The charter below details the confidentiality policy (hereinafter the “Confidentiality Policy”) of the company MAISON ARCANE, a Sole Trader company whose registered office is located at 127 Avenue du Maine 75014 Paris, registered in the Paris Trade and Companies Register under number 940 705 577, operating the MAISON ARCANE brand (hereinafter “MAISON ARCANE”), regarding personal data on the Website www.maisonarcane.fr (hereinafter the “online site”).

MAISON ARCANE attaches great importance to protecting the privacy and personal data of its customers, both potential and existing. The importance of this protection contributes to the quality of MAISON ARCANE's services and products.

The purpose of the Privacy Policy is to define and explain how MAISON ARCANE collects, processes and protects personal data, in compliance with the European General Data Protection Regulation (Regulation No. 2016/679, hereinafter the “GDPR”), when a customer consults the Website, uses its applications or when he purchases MAISON ARCANE products via the online site.

1 – THE DATA CONTROLLER

The Data Controller is the company MAISON ARCANE, a Sole Trader whose registered office is located at 127 Avenue du Maine 75014 Paris, registered in the Paris Trade and Companies Register under number 940 705 577, represented by its President, Mrs. Martine Vézant.

The Site is hosted by the company MAISON ARCANE, a sole proprietorship company whose registered office is located at 127 Avenue du Maine 75014 Paris, registered in the Paris Trade and Companies Register under number 940 705 577.

MAISON ARCANE may then communicate information to its affiliated companies, in accordance with the guarantees provided by the Confidentiality Policy.

All sales made through the site's online store are made by MAISON ARCANE and all marketing communications are sent to you by MAISON ARCANE.

If you wish to contact MAISON ARCANE or its Data Protection Officer (DPO), you can send an email to the following address: contact@maisonarcane.fr.

2 – PERSONAL DATA COLLECTED AND THEIR COLLECTION

Personal data is defined as any information relating to an identified or identifiable natural person, directly or indirectly, by reference to an identification number or to one or more elements specific to them such as their surname, first name, date of birth, customer or order number, photo, etc.

MAISON ARCANE collects the following personal data:

2.1. AGE REQUIREMENTS FOR USE OF THE SITE AND COLLECTION OF PERSONAL DATA

The online site is for the sale of candles, wax and olfactory accessories, under the brand "MAISON ARCANE" and is intended for adults: customers or prospects must be adults under the laws in force in the country of which they are nationals to communicate their personal data. MAISON ARCANE therefore does not collect data from children of minors and, if it turns out that, by mistake, such data was collected, it would be advisable to immediately inform MAISON ARCANE at the email address "contact@maisonarcane.fr" in order to allow their deletion.

2.2. DIRECT COLLECTION

This is information collected online on the online site (examples: account creation, placing an order, etc.).

When collecting this data, mandatory fields are those that are not indicated as optional. If these fields are not filled in, this may prevent the customer from accessing MAISON ARCANE products and/or services. The other information is optional and is intended to better understand the customer in order to better serve them.

2.3. INDIRECT COLLECTION

MAISON ARCANE also collects, this time indirectly, information about the customer when the customer consults the site online.

The collection of this information is necessary for the proper technical functioning of the online site, the quality of your navigation on the online site and allows MAISON ARCANE to carry out analyses in order to be able to better serve the customer and personalize the services offered.

This information, collected indirectly, is:
- Technical information related to browsing the online site, for connection purposes and identification of the country and city by geolocation (example: IP address and cookies).
- Information concerning the online customer profile and data relating to the use of the online site (example: monitoring of navigation on the online site, recording of products placed in the shopping cart).

3 – THE PURPOSES OF PROCESSING PERSONAL DATA

This processing of personal data is necessary to enable MAISON ARCANE to comply with the laws and regulations applicable to its sector of activity and to sales.

This processing is also essential for the execution of the sales contract concluded with customers as well as for the provision to customers, whether potential or existing, of the website or any other online service which makes it possible to support and conclude the sales contract.

This processing of personal data is necessary for the proper functioning of MAISON ARCANE, whose activity consists of making sales and offering personalized and high-quality products, services, and after-sales support. MAISON ARCANE therefore has a legitimate interest in being able to carry out its activity and offer a high and personalized quality of services. In addition, MAISON ARCANE must be able to process personal data in order to carry out the sales concluded and the services ancillary to these sales.

MAISON ARCANE may use personal data for:
- allow browsing on the online site and access to the customer account;
- allow you to obtain information on products and services;
- allow you to purchase MAISON ARCANE products on the online site;
- allow access to after-sales services;
- subject to the customer's consent, offer personalized offers, taking into account needs and wishes;
- collect opinions on MAISON ARCANE products and services;
- establish statistics and carry out financial and commercial studies;
- keep customers, whether potential or existing, informed of the latest products, campaigns, events by sending MAISON ARCANE communications (by email, post or SMS and through third-party media platforms);
- meet legal and administrative requirements;
- regarding applications: recruiting and selecting candidates.

4 – THE RECIPIENTS OF THIS PERSONAL DATA

4.1 WITHIN ARCANE HOUSE

Personal data will only be accessible to employees who need to know this data to perform their duties. These employees must be authorized and have a secure connection to the processing.

Thus, for a current client or a prospect of MAISON ARCANE, only MAISON ARCANE employees who work within the teams needing to hold this information and who process this information (Employees of the Digital and Marketing teams) will have access to personal data.

If an application is submitted, employees of the Digital and Marketing teams, and the human resources department responsible for recruitment, will have access to this data.

4.2 OUTSIDE THE ARCANE HOUSE

Personal data will not be disclosed to third parties, except to other MAISON ARCANE entities located in France, for the aforementioned purposes, and to trusted service providers (e.g., IT maintenance, security and support service providers, hosting providers, payment service providers, etc.) acting on behalf of MAISON ARCANE, on the basis of secure contractual agreements that include strict data protection obligations.

MAISON ARCANE may also be required to transfer personal data to third parties if requested to do so by authorized authorities, in accordance with applicable laws and regulations.

In the event of a merger or sale, personal data will be permanently transferred to the successor.

5 – TRANSFERS OF DATA ABROAD

MAISON ARCANE does not transfer any personal data abroad.

In the event that such a transfer is implemented, particularly outside the European Union, it will be carried out with appropriate guarantees and in compliance with the applicable regulations regarding the protection of personal data.

6 – RETENTION OF PERSONAL DATA

In order to guarantee quality and personalized services, MAISON ARCANE needs to retain personal data for the time necessary to be able to provide said services and to fulfill its legal obligations.

MAISON ARCANE retains personal data.

6.1 FOR MAISON ARCANE CUSTOMERS

Due to the quality and nature of MAISON ARCANE products and services, the lifespan, purchasing cycle and after-sales service are longer than for ordinary consumer products and require appropriate customer support and appropriate deadlines.

Customer account data is thus stored and used for a maximum period of 5 (five) years from the last purchase or the last interaction with the MAISON ARCANE brand (request for customer service, participation in an event). At the end of this period of 5 (five) years, MAISON ARCANE may contact the customer again to find out whether or not they wish to continue receiving information on its offers, news and events.

Data relating to transactions with MAISON ARCANE are retained and archived for periods that may vary depending on the type of data and not exceeding 10 (ten) years so that MAISON ARCANE can meet its administrative and legal obligations. Beyond these periods, the data will be destroyed.

6.2 FOR ARCANE HOUSE PROSPECTS

That is, if the potential customer has requested information about MAISON ARCANE but has never purchased MAISON ARCANE products or created a MAISON ARCANE customer account.

The data of this potential customer, which he agreed to transmit when subscribing to the newsletter, is kept for a period of 3 (three) years from the collection of his data. This period is renewed each time the said customer interacts with MAISON ARCANE (for example, participation in an event). At the end of this period of 3 (three) years, MAISON ARCANE may contact this person again to find out whether or not he wishes to continue receiving information on its offers, news and events.

6.3 FOR CANDIDATES FOR PROFESSIONAL OPPORTUNITIES WITHIN MAISON ARCANE

The data will be kept for 2 (two) years from the application.

6.4 BANK CARD DATA

Retention of bank card data following a payment: this data is kept for 15 (fifteen) months by a secure payment provider.

Storage of the bank card in the electronic wallet for subsequent purchases: this data is stored by a secure payment provider only if the potential customer has consented and until the withdrawal of consent or the expiry of the bank card.

7 – SECURITY

MAISON ARCANE has implemented appropriate technical and physical measures to ensure the confidentiality and security of personal data.

MAISON ARCANE's IT systems are subject to state-of-the-art physical and IT protection. Access control procedures for premises, computers, servers, and software are in place. In addition, physical and electronic backup of collected data is implemented in accordance with current French legislation on the protection of personal data and market standards.

MAISON ARCANE employees who, due to their position, have access to personal data are subject to strict confidentiality obligations.

Potential and existing customers should be aware, however, that no data transmission over the Internet is 100% secure and that any information communicated online may potentially be intercepted and used by persons other than the intended recipient.

8 – THE RIGHTS OF CUSTOMERS AND PROSPECTS

Customers and prospects have various rights to enable them to better protect and control the protection and use of their personal data:
- A right to information: the right to be informed of how personal data is processed.
- A right of access and rectification: the right to obtain confirmation as to whether or not personal data concerning them is being processed, and, where applicable, to access said personal data and obtain a copy thereof. Customers and prospects have the right to rectify, update or complete their personal data.
- A right to erasure: in certain cases, the right to obtain the erasure of personal data. However, this is not an absolute right and MAISON ARCANE may have legal or legitimate reasons to retain this data.
- A right to restriction of processing: in certain cases, the right to obtain restriction of the processing of personal data.
- A right to data portability: the right to receive the personal data provided to MAISON ARCANE in a structured, commonly used and machine-readable format; the right to transmit this personal data to another data controller without hindrance from MAISON ARCANE. This right only applies if the processing of personal data is based on consent or the performance of a contract and this processing is carried out using automated processes.
- A right to object to processing: the right to object at any time to the processing of personal data for commercial prospecting purposes.
- A right to lodge a complaint with the competent supervisory authorities in the event of a violation of applicable data protection laws and regulations, in particular the GDPR, but also any other national or regional data protection law that concerns customers and prospects.

To exercise these rights, please contact MAISON ARCANE or its Data Protection Officer (DPO) by sending an email to the following address: contact@maisonarcane.fr and providing the following information: first name, last name, email address or any other information necessary to confirm identity and allow MAISON ARCANE to process the request, such as postal address for example. To ensure the greatest data security, proof of identity may be requested before the request is processed.

Customers and prospects can also decide to unsubscribe from the Newsletter, mail or SMS at any time by following the following procedure: click on "unsubscribe" at the bottom of the Newsletter page (on the online site), or send an email to contact@maisonarcane.fr requesting to be unsubscribed from the Newsletter.

In accordance with Article L.223-2 of the Consumer Code, customers and prospects have the right to register free of charge on a list to oppose telephone canvassing available on the website www.bloctel.gouv.fr .

9 – COOKIES

Cookies are files that store small amounts of data related to the use of the website (including the IP address) on the hard drive of the user's computer. The data collected by cookies used on the website is anonymous and does not include personal data.

9.1 COOKIES GENERATED BY MAISON ARCANE

Some of the cookies generated by the MAISON ARCANE server allow the online site to function, including orders, while others allow them to monitor traffic on the online site, identify visitors' interests, conduct analyses, and adapt the personalization of the online site and the advertising offer accordingly. By storing information on previous visits, they help potential and existing customers access the online site more quickly and efficiently.

9.2 COOKIES GENERATED BY THIRD-PARTY COMPANIES

MAISON ARCANE may include on the online site computer applications from third parties in order to allow the sharing of site content and/or opinions on products with other people.
Social media and websites may identify personal data when browsing their applications included on the online site. MAISON ARCANE does not have information or control over the use and processing of personal data by these sites. Users should therefore refer to their own personal data protection policies.

9.3 MANAGEMENT AND CONTROL OF COOKIES

Most internet browsers accept the use of cookies by default and by accessing the website online, customers and prospects consent to this use.

Customers and prospects can, however, change their browser settings to control the use of cookies or prohibit them. If this option is chosen, please be aware that the online site may not function correctly, or may not function at all. The procedure for changing these settings varies depending on each browser (such as Internet Explorer, Firefox, Safari, Chrome, etc.), and users are encouraged to consult the "Help" menu of their browser for any additional information.

9.4 COOKIES

Cookies managed by MAISON ARCANE are kept for a maximum period of 13 (thirteen) months.

9.5 LIST OF COOKIES

A cookie is a small data file (text file) that a website, when visited by a user, asks the browser to store on the device in order to remember information about the user, such as their language preferences or login information. MAISON ARCANE sets these cookies, called first-party cookies. MAISON ARCANE also uses third-party cookies, which are cookies from a domain other than the Site, for MAISON ARCANE's advertising and marketing efforts. Specifically, MAISON ARCANE uses cookies and other tracking technologies for the following purposes:

9.6 STRICTLY NECESSARY COOKIES

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the website will not then work. These cookies do not store any personally identifiable information.

9.7 PERFORMANCE COOKIES

These cookies allow us to count visits and traffic sources, so we can measure and improve the performance of our website. They also help us identify which pages are the most and least popular and see how visitors move around the website. All information collected by these cookies is aggregated and therefore anonymous. If you do not allow these cookies, we will not be informed of your visits to our website.

9.8 COOKIES FOR TARGETED ADVERTISING

These cookies may be set through the site by MAISON ARCANE's advertising partners. They may be used by those companies to build a profile of users' interests and show them relevant advertisements on other websites. They do not store directly personal information, but are based on uniquely identifying the user's browser and internet device. By refusing these cookies, the advertising received by the user will be less targeted.

10. MODIFICATIONS AND UPDATES TO THE PRIVACY POLICY

By using the online site, the user accepts the collection and use of his personal data in the manner described in the Privacy Policy.

This Privacy Policy reflects the professional practices in force within MAISON ARCANE.

In the event of modification or update, the revised Privacy Policy will be posted on the website with a mention of the date of the last update.

11. DATE OF UPDATE OF THE PRIVACY POLICY

September 2025