Before publishing: every highlighted field below needs your real details, and this document should be reviewed by a lawyer in your jurisdiction. It is a starting draft, not legal advice.
1. Who we are
This policy explains how La Galerie de Marjorie LLC, trading as La galerie de Marjorie ("we", "us", "our"), handles personal information collected through lagaleriedemarjorie.com and any orders placed with us.
We are the controller of that information. Our registered address is Andover, MA 01810, United States, and you can reach us at [email protected].
2. What we collect
Information you give us
- Name, email address, phone number and delivery address when you place an order
- Billing address and order contents
- Your email address if you subscribe to our list, and your phone number if you opt into texts
- Anything you write to us — messages through the contact form, replies to our emails, product reviews
- Account details, if you create an account with us
Information collected automatically
- IP address, browser type, device type and operating system
- Which pages you visited, what you clicked, how long you stayed, and the site or ad you arrived from
- Cookie and similar identifiers, as described in section 6
We do not collect or store your full payment card details. See section 5.
3. How we use it
- To fulfil your order — taking payment, packing, shipping, sending confirmations and tracking
- To provide support — answering questions, handling returns, resolving problems
- To send marketing — new scents, restocks and offers, only where you have opted in
- To run and improve the site — understanding which pages and products people actually use
- To prevent fraud — checking suspicious orders and protecting against abuse
- To meet legal obligations — tax records, accounting and consumer law requirements
Where the law requires a legal basis for processing, we rely on performing our contract with you (orders), your consent (marketing and non-essential cookies), our legitimate interests (site security, fraud prevention, improving what we offer), and legal obligation (record keeping).
5. Payments
Payments are handled by third-party payment processors. Your card number is entered directly into their system and is never stored on our servers. We receive only what we need to identify the transaction — typically the last four digits, the card brand, and whether the payment succeeded.
Those processors handle your payment data under their own privacy policies and are required to meet PCI-DSS standards.
7. Email and SMS
We only send marketing emails and texts to people who have asked for them. Every marketing email carries an unsubscribe link, and you can stop texts by replying STOP. Both take effect straight away.
Opting out of marketing does not stop transactional messages — order confirmations, shipping notices and replies to your questions — because those are part of fulfilling your order.
8. How long we keep it
We keep order records for one year, unless tax, accounting or consumer protection law requires us to keep them for longer. Marketing contacts are kept until you unsubscribe, and for a short period afterwards so we can honour that request. Analytics data is kept in line with the retention settings of the tools we use.
When we no longer need information, we delete it or anonymise it.
9. Your rights
Depending on where you live, you may have the right to:
- Ask for a copy of the personal information we hold about you
- Have inaccurate information corrected
- Ask us to delete your information
- Object to or restrict how we use it
- Receive your information in a portable format
- Withdraw consent at any time, without affecting what we did before you withdrew it
- Opt out of the sale or sharing of personal information — note that we do not sell it
To exercise any of these, email [email protected]. We will respond within the timeframe the law allows and may need to verify who you are first. We will not treat you differently for exercising your rights.
If you are unhappy with how we have handled a request, you may complain to your local data protection authority.
10. Security
The site runs over an encrypted connection, access to order records is restricted, and payment details never touch our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but if a breach affects your information and the law requires it, we will notify you.
11. Children
Our shop is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has given us their information, contact us and we will delete it.
12. Other websites
Our site may link to other websites — a payment page, a carrier's tracking page, our social profiles. We are not responsible for their privacy practices, and we would encourage you to read their policies before handing over information.
13. Changes
We may update this policy as our shop, our tools or the law change. The revision date at the top always reflects the current version. If a change materially affects your rights, we will make that clear rather than quietly editing the page.
14. Contact us
Questions about this policy, or about the information we hold on you:
La galerie de Marjorie
La Galerie de Marjorie LLC
Andover, MA 01810, United States