privacy policy

scope and identity of the organization

for purposes of the eu general data protection regulation and other applicable privacy laws, the controller responsible for the personal information described in this policy is:

legal business name:
pippify

trading name:
maison solani

chamber of commerce registration:
kvk 89040988

vat identification number:
nl004685220b60

privacy contact:
info@maisonsolani.com

website:
maisonsolani.com

pippify is established in the netherlands. depending on your location, dutch and european privacy law and additional privacy laws in canada, the united states or other jurisdictions may apply to particular processing activities.

personal information we collect

the information we collect depends on how you interact with maison solani. it may include:

we do not intentionally request special-category or highly sensitive personal information through ordinary shopping or customer-service interactions. please do not send sensitive information unless it is genuinely necessary for a specific request.

how we collect information

we may collect personal information:

• directly from you when you place an order, create an account, contact us, subscribe, make a return or submit content;
• automatically through cookies, pixels, tags, local storage, server logs and similar technologies;
• from shopify and shopify services used to operate our online store;
• from aftership where it is used for tracking, returns or related customer-service functionality;
• from payment providers, banks, fulfilment partners, warehouses, carriers and customs providers involved in completing an order;
• from analytics, advertising and social media partners where those tools are enabled and the collection is permitted by law;
• from fraud-prevention and payment-risk providers;
• from information you make public or ask another party to provide to us.

how we use personal information

we may use personal information to:

• process, fulfil, ship and administer orders;
• take payments, issue refunds and manage chargebacks;
• provide order tracking and returns functionality;
• provide customer service and respond to enquiries;
• create and manage customer accounts;
• send transactional messages relating to orders, returns, delivery, account security and support;
• send marketing communications where permitted;
• personalize website content, product recommendations and advertising where permitted;
• measure website use, campaign performance and customer experience;
• detect, investigate and prevent fraud, misuse and security incidents;
• maintain accounting, tax, transaction and consumer-service records;
• comply with legal obligations and valid requests from authorities;
• establish, exercise or defend legal claims;
• improve our website, collections, services and business operations.

if we intend to use personal information for a materially different purpose, we will provide additional information and obtain consent where required.

legal bases for processing

eea and other gdpr-covered processing

where the general data protection regulation or comparable european law applies, we process personal data on one or more of the following legal bases:

• contract: to process payment, fulfil orders, arrange delivery, manage returns and provide requested customer service;
• legal obligation: to comply with tax, accounting, consumer-protection, fraud-prevention and other legal requirements;
• legitimate interests: to secure and improve the website, prevent fraud, administer our business, understand service performance and defend legal claims, where those interests are not overridden by your rights;
• consent: for non-essential cookies, certain personalized advertising and direct marketing where consent is required;
• legal claims: where processing is necessary to establish, exercise or defend legal claims.

where processing is based on consent, you may withdraw that consent at any time. withdrawal does not affect processing that took place lawfully before withdrawal.

canada and other consent-based regimes

where canadian private-sector privacy law applies, we seek meaningful consent where required and otherwise collect, use and disclose personal information only as permitted by applicable law. the form of consent may depend on the sensitivity of the information and the reasonable expectations of the individual.

cookies and similar technologies

we and our service providers may use cookies, pixels, local storage, tags and similar technologies to operate the website, remember preferences, secure accounts and checkout, understand website activity and support advertising.

these technologies may include:

• strictly necessary: technologies required for checkout, security, account access, fraud prevention and other essential website functions;
• functional: technologies used to remember choices and provide enhanced features;
• analytics: technologies used to understand visits, navigation, performance and conversions;
• advertising: technologies used to measure campaigns, personalize advertising or create audiences where permitted.

where required by law, non-essential technologies are activated only after you make a choice through our cookie banner or privacy controls. you can change or withdraw a previous consent choice by using the privacy or cookie controls made available on the website or by clearing your browser cookies and revisiting the website.

advertising and personalization

maison solani may use digital advertising and analytics services to measure campaigns, understand how customers discover the store and, where permitted, provide more relevant advertising.

when advertising tools are enabled, those providers may receive information such as cookie or device identifiers, ip address, browsing events, product views, cart events, purchase events or privacy-protected forms of contact information.

we do not assume that every advertising platform is active at all times. the technologies actually operating on your device depend on our current store configuration, your region and your cookie or privacy choices.

where law requires consent for advertising or cross-site tracking, we rely on that consent. where applicable law gives you a right to opt out of targeted advertising, sharing or similar processing, you may exercise that right through the privacy controls available to you or by contacting us.

when we share personal information

we may disclose personal information to recipients that need it for legitimate business and legal purposes, including:

• shopify and providers supporting our ecommerce infrastructure;
• payment processors, banks and fraud-prevention providers;
• warehouses, fulfilment providers, shipping carriers and customs providers;
• aftership where used for tracking, returns or related services;
• customer-service, returns, reviews and help-centre providers;
• email, sms and marketing service providers where enabled;
• analytics, advertising and social media providers subject to applicable consent and opt-out choices;
• professional advisers, accountants, auditors, insurers and legal representatives;
• government bodies, regulators, courts or law-enforcement authorities where disclosure is required or permitted by law;
• buyers, investors, lenders or advisers involved in a genuine business sale, financing, restructuring or similar transaction.

service providers acting on our behalf are expected to process personal information only for authorized purposes and to apply appropriate safeguards. certain providers may act as independent controllers or businesses with their own legal responsibilities.

shopify and aftership

shopify

our online store is powered by shopify. shopify processes personal information to provide ecommerce hosting, checkout, payment-related functionality, fraud prevention, infrastructure, analytics and other merchant and consumer services.

depending on the shopify service involved, shopify may process information on our behalf or for its own purposes. shopify may also provide consumer-facing services, including shop or shop pay, under its own privacy terms.

aftership

where enabled on our store, aftership may process order, delivery, tracking, returns and related customer information so that we can provide shipment tracking, return-management or customer-service functionality.

these providers may process information from locations outside your country. their own privacy notices provide additional information about processing they perform for their independent purposes.

international data transfers

maison solani is established in the netherlands, but our ecommerce, payment, fulfilment, shipping, tracking, analytics and technology providers may process personal information in the european economic area, canada, the united states and other countries.

where personal data protected by european data-protection law is transferred to a country that is not recognized as providing an adequate level of protection, we use or rely on an appropriate transfer mechanism where required, such as standard contractual clauses, an adequacy decision or another legally recognized safeguard.

information processed outside your country may be subject to the laws of the country where it is processed, including lawful access by public authorities. contact us if you would like more information about relevant transfer safeguards.

data retention

we retain personal information only for as long as reasonably necessary for the purposes described in this policy and for the periods required by applicable law.

in determining retention periods, we consider:

• how long the information is needed to complete orders and provide customer service;
• mandatory tax, bookkeeping and accounting retention requirements;
• return, warranty, chargeback and dispute periods;
• fraud-prevention and security needs;
• the duration of a customer account or ongoing relationship;
• whether consent has been withdrawn or marketing has been unsubscribed;
• applicable limitation periods for legal claims.

transaction and accounting records may be retained for the period required under dutch tax and bookkeeping law. other categories are deleted, anonymized or securely disposed of when they are no longer needed, subject to technical backup cycles and legal requirements.

security and privacy incidents

we use administrative, technical and organizational safeguards appropriate to the nature and sensitivity of the information we process. these may include access controls, secure payment processing, encryption in transit, account-access restrictions, monitoring and service-provider management.

no method of transmission or storage is completely secure. you are responsible for protecting your account credentials and should contact us promptly if you suspect unauthorized account activity.

if a personal-data breach occurs, we will investigate, contain and document it and notify affected individuals and the appropriate supervisory authority where notification is required by applicable law.

eea privacy rights

because pippify is established in the netherlands, the general data protection regulation applies to relevant processing of personal data. subject to the conditions and exceptions in applicable law, you may have the right to:

• receive information about how your personal data is processed;
• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion where the legal requirements are met;
• request restriction of processing;
• object to processing based on legitimate interests;
• object to direct marketing at any time;
• receive certain personal data in a portable format;
• withdraw consent where consent is the legal basis;
• lodge a complaint with a competent data-protection supervisory authority.

we normally respond to valid privacy-rights requests without undue delay and within the period required by applicable law. we may ask for information reasonably necessary to verify your identity before completing a request.

if you are in the netherlands, you may also lodge a complaint with the dutch data protection authority, the autoriteit persoonsgegevens.

canadian privacy rights

where canadian private-sector privacy law applies to our processing, individuals may have rights regarding the collection, use and disclosure of their personal information, including rights to request access or correction and to withdraw consent subject to legal or contractual restrictions.

canadian privacy rules can differ depending on the province and the nature of the processing. alberta, british columbia and quebec have private-sector privacy laws that may apply alongside or instead of federal rules in particular circumstances, while cross-border commercial data flows may be subject to federal privacy requirements.

if you make a canadian privacy request, we may ask for information reasonably necessary to verify identity and will respond in accordance with the law applicable to the request.

united states privacy rights

residents of certain united states states may have privacy rights under applicable state law. depending on your state and whether the relevant law applies to maison solani, these may include rights to request access, correction or deletion of certain personal information and rights to opt out of particular forms of targeted advertising, sale or sharing.

where a legally applicable opt-out right is available, we will honor valid requests and browser- or platform-based privacy signals where we are legally required to recognize them and our technology supports them.

we do not unlawfully discriminate against customers for exercising a privacy right. some requests may be subject to verification, exceptions or appeal procedures required by the relevant state law.

marketing communications

we may send promotional email, sms or similar communications only where we have the consent or other lawful basis required in the recipient's jurisdiction.

you can unsubscribe from marketing emails by using the unsubscribe link included in the message. where sms marketing is used, available opt-out instructions will be provided in accordance with applicable requirements.

customers in canada may also benefit from protections under applicable canadian anti-spam requirements. marketing directed to european recipients is handled in accordance with applicable european privacy and electronic-communications requirements.

unsubscribing from marketing does not stop necessary transactional or service communications such as order confirmations, delivery updates, returns information, security notifications or responses to customer-service requests.

children's privacy

maison solani is a fashion retail store intended for a general adult shopping audience and is not designed to collect personal information from young children.

we do not knowingly collect personal information from a child who is unable to provide valid consent under applicable law without the authorization required by that law. if you believe a child has provided personal information to us improperly, contact us so that we can investigate and take appropriate action.

third-party websites and services

our website may contain links to third-party websites, social platforms or services. those parties process personal information under their own privacy notices when they act independently from maison solani.

we are not responsible for the independent privacy practices of an external website or service. we recommend reviewing its privacy information before providing personal information.

changes to this privacy policy

we may update this policy to reflect changes in our operations, services, technology, providers, markets or legal obligations.

the current version will be posted on this page with a revised “last updated” date. where applicable law requires additional notice or renewed consent for a material change, we will provide it.

contact, requests and complaints

to ask a privacy question, exercise an eligible privacy right or submit a privacy complaint, contact:

privacy contact:
maison solani customer care

legal business name:
pippify, trading as maison solani

chamber of commerce registration:
kvk 89040988

vat identification number:
nl004685220b60

email:
info@maisonsolani.com

website:
maisonsolani.com

please describe your request and, where relevant, identify the account or transaction involved. we may request information reasonably necessary to verify identity and authority before disclosing or changing personal information.

if you remain dissatisfied after contacting us, you may have the right to submit a complaint to the privacy or data-protection regulator competent for your jurisdiction. customers in the netherlands can contact the autoriteit persoonsgegevens.