1. Who are we?

Maison Tisane B.V. (Chamber of Commerce no. 97487422) is located at Kastanjelaan 400, 5616 LZ Eindhoven, the Netherlands. We are the data controller for all processing described in this policy.

2. What personal data do we process?

• Identification data: name, address, city.
• Contact data: e-mail address, phone number.
• Order data: ordered products, invoice & delivery address, payment status.
• Payment data: (encrypted) payment and transaction information.
• Communication: messages via e-mail, WhatsApp, social media or contact form.
• Website data: IP address, cookie ID, browser type, click behaviour.

3. Purposes & legal bases

1. Contract performance – processing and delivering your order.
2. Customer service – answering questions and handling complaints.
3. Marketing (consent) – sending newsletters or special offers.
4. Legal obligations – fiscal records and anti-fraud measures.
5. Legitimate interest – website analytics and product improvement.

4. Retention periods

We do not keep personal data longer than necessary:

• Order & invoice data: 7 years (tax obligation).
• Newsletter subscriptions: until you unsubscribe.
• Service communications: max. 2 years after resolution.
• Analytics data: 26 months in anonymised form.

5. Sharing with third parties

We never sell your data. We only share it with:

• Logistics partners (postal and courier services).
• Payment service providers (e.g. Mollie, PayPal).
• IT & hosting providers for our webshop platform.
• Government authorities when legally required.

We conclude data-processing agreements with all processors in accordance with the GDPR.

6. Cookies

Maison Tisane uses functional, analytical and marketing cookies. On your first visit we show a cookie banner allowing you to accept or refuse marketing cookies. See our cookie policy for full details.

7. Security

We take appropriate technical and organisational measures:

• Encrypted (TLS) connections.
• Secure EU data centres.
• Role-based access control.
• Regular backups and software updates.

8. Your rights

You have the right to:

• request access to your data;
• have your data rectified or erased;
• restrict or object to processing;
• request data portability;
• lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Send your request to contact@maisontisane.nl. We respond within 30 days.

9. Complaints

If you are not satisfied with how we handle your privacy, please contact us first. If we cannot resolve the issue, you can file a complaint with the Dutch Data Protection Authority.

10. Contact details