The short version
A scarf should feel like a small mystery. Your personal data shouldn’t.
- We’re Maison GJvS (Particule A SRL), based in Brussels. When you shop with us, we look after your data ourselves.
- We collect only what we actually need — mostly to send you your order and, if you ask for it, our newsletter.
- We don’t sell your data. Ever. And we don’t run advertising trackers.
- A handful of trusted services help us (payment, shipping, email). We tell you exactly who, below.
- You can ask to see, correct or delete your data at any time. Just write to us.
The full detail follows.
Who we are
This website, maisonGJVS.com, is run by Particule A SRL, the company behind Maison GJvS.
- Particule A SRL — Chaussée de Wavre 171–173, 1050 Brussels, Belgium
- Belgian enterprise number: 0700.895.175 · VAT: BE 0700.895.175
- Write to us: contact@maisongjvs.com
In legal terms, we’re the data controller for everything processed through this site, under the GDPR (Regulation (EU) 2016/679) and Belgium’s data protection law of 30 July 2018. We don’t have a Data Protection Officer — our activity doesn’t require one — so any question comes straight to us.
Our shop runs on WooCommerce, installed on our own WordPress site. That means your account and order details live on our own hosting, not on someone else’s store platform.
What we collect, and why
We only ask for what we genuinely need, and here’s the honest breakdown.
When you shop. Your name, delivery and billing address, email, phone number and order details. We need these to make and deliver your order, handle any return, and keep proper invoices — the last part is a legal obligation for us in Belgium. (Legal bases: performing our contract with you, Art. 6(1)(b); and our legal obligations, Art. 6(1)(c).)
When you pay. Your card details go straight to Stripe, in their secure environment — we never see or store your full card number. We only get a “paid” confirmation and a few transaction references. (Legal basis: performing our contract, Art. 6(1)(b).)
When we ship. Your name, address and contact details are shared with Sendcloud and your chosen carrier, so your parcel reaches you and you can track it. (Legal basis: performing our contract, Art. 6(1)(b).)
When you create an account. Your name, email, an encrypted password and your saved preferences (like your wishlist and language), so you can manage your orders easily. (Legal basis: performing our contract / your request, Art. 6(1)(b).)
When you write to us. Your message and contact details, so we can reply. (Legal bases: handling your request, Art. 6(1)(b); our legitimate interest in answering you, Art. 6(1)(f).)
When you join the newsletter. Just your email (and, if you like, your first name and language). You opt in, and you can opt out from any email in one click. (Legal basis: your consent, Art. 6(1)(a).)
When you browse. Some anonymised statistics and basic security signals on our forms. Analytics only run if you say yesto cookies. (Legal bases: our legitimate interest in a secure site, Art. 6(1)(f); your consent for analytics, Art. 6(1)(a).)
We never make automated decisions about you, and we don’t profile you.
Who helps us
We don’t sell your data. We share it only with the services that make the shop work — each bound by a proper data-processing agreement.
| Who | What they do | Where |
|---|---|---|
| [Web host — e.g. Infomaniak ⚑ to confirm] | Hosts our WordPress/WooCommerce site & data | [Switzerland / EU] |
| Stripe (Stripe Payments Europe, Ltd.) | Handles payments | Ireland (EU), with transfers to Stripe, Inc. (US) |
| Sendcloud | Manages shipping & labels | Netherlands (EU) |
| [Carrier — e.g. bpost / DHL / GLS ⚑] | Delivers your parcel | EU |
| Klaviyo | Sends our newsletter | United States |
| Matomo (self-hosted) | Privacy-first, anonymised analytics | [With our host — EU/CH] |
| hCaptcha | Keeps our forms free of spam | United States |
We’ll also share data if the law genuinely requires it — for instance, a valid request from public authorities.
Where your data travels
Most of your data stays inside the European Economic Area or in Switzerland, which the EU recognises as offering equivalent protection.
A few services send some data to the United States — Stripe, Klaviyo and hCaptcha. When that happens, it’s covered by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses, with extra safeguards where needed.
How long we keep it
| What | For how long |
|---|---|
| Orders & invoices | 7 years (Belgian accounting law) |
| Account data | While your account is active; deleted on request or after 3 years of inactivity |
| Messages you send us | Up to 2 years after our last exchange |
| Newsletter | Until you unsubscribe |
| Analytics | Anonymised, kept per Matomo settings (13 months) |
When the time’s up, we delete it for good or anonymise it beyond recovery.
Your rights
This data is yours, and the GDPR backs that up. You can ask us to:
- show you the data we hold and give you a copy;
- correct anything wrong or incomplete;
- delete it (“right to be forgotten”), where that applies;
- pause how we use it, in certain cases;
- hand it over in a portable, machine-readable format;
- object to uses based on our legitimate interest — and to marketing, always;
- change your mind and withdraw consent whenever you like.
Just email contact@maisongjvs.com and we’ll reply within a month. We may check it’s really you first.
And if you ever feel we’ve got it wrong, you can complain to Belgium’s data protection authority:
- Autorité de protection des données / Gegevensbeschermingsautoriteit (APD/GBA) Rue de la Presse 35 / Drukpersstraat 35, 1000 Brussels +32 (0)2 274 48 00 · contact@apd-gba.be · www.autoriteprotectiondonnees.be
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Keeping it safe
We protect your data with encrypted connections (HTTPS), encrypted passwords, access controls, regular updates to WordPress, WooCommerce and our plugins, and partners chosen for their security. Card data lives entirely inside Stripe’s PCI-DSS-compliant systems. No system is ever perfect, but if something serious goes wrong, we’ll tell you and the authorities as the law requires.Who we share your data with
Children
This site isn’t meant for children under 16, and we don’t knowingly collect their data. If you think a child has shared theirs with us, tell us and we’ll remove it.
When this changes
If we update how we handle data, we’ll update this page and change the date at the top. Anything significant, we’ll flag clearly.
Talk to us
Particule A SRL — Maison GJvS Chaussée de Wavre 171–173, 1050 Brussels, Belgium 📧 contact@maisongjvs.com