PRIVACY POLICY

Effective Date: 22 May 2026

Denim Pro SPRL, trading as Maison Arca ("we", "our" or "us"), based at Avenue Louise 539, 1050 Brussels, Belgium (company number BE 0836.467.226), takes your privacy seriously. This policy explains what personal data we collect, why we collect it, and what your rights are under the General Data Protection Regulation (GDPR).

1. What We Collect

When you interact with our site, we may gather the following:

Identity and contact details: Your name, email, phone number and delivery address.

Payment details: Card or other payment information used to make a purchase. This data is handled entirely by our secure payment providers and is never stored on our servers.

Account details: If you register for an account, we store your login credentials and your order history.

Browsing data: Technical information such as your IP address, browser type, device, and the pages you visit on our site.

2. Why We Use It

Your data allows us to:

Fulfil your orders: Process purchases, arrange deliveries and manage returns.
Support you: Answer your questions, resolve issues and provide after-sales service.
Keep you informed: Send you news, launches and offers, but only if you have signed up for them. You can unsubscribe at any time via the link in any email or by contacting us directly.
Improve the site: Understand how visitors use our site so that we can enhance the experience.

3. The Legal Grounds for Our Processing

We rely on the following grounds to process your data:

Contract: We need your details in order to process and deliver your order.
Consent: For marketing emails and non-essential cookies. You can withdraw your consent at any time.
Legitimate Interest: For analytics, fraud prevention and service improvement.
Legal Obligation: Tax records, accounting and regulatory compliance.

4. Who Sees Your Data

We never sell your personal information. We only share it with:

Trusted partners: Payment processors, shipping carriers and platform providers who need your data to help us serve you. They are contractually required to protect it.
Authorities: Only where required by law, regulation, or a valid legal request.

5. How Long We Keep It

We keep your data only for as long as we need it for the purposes described above. Order records are retained for the period required by Belgian tax and accounting law. If you ask us to delete your data, we will do so promptly unless a legal obligation requires us to retain it.

6. Your Rights

The GDPR gives you the right to:

Access: Request a copy of the data we hold about you.
Correction: Have inaccurate or incomplete data corrected.
Erasure: Ask us to delete your data, subject to legal constraints.
Objection: Refuse certain types of processing.
Portability: Receive your data in a standard, machine-readable format.

To exercise any of these rights, email contact@maisonarca.com.

7. Keeping Your Data Secure

We use appropriate technical and organisational safeguards to protect your information against unauthorised access, loss or misuse.

8. Transfers Outside the EEA

Some of the service providers we work with may be located outside the European Economic Area. Where this is the case, we ensure that adequate protections are in place as required by the GDPR.

9. Questions or Complaints

If anything in this policy is unclear, or if you wish to exercise your rights, contact us at contact@maisonarca.com. You also have the right to raise a concern with the Belgian Data Protection Authority (Autorité de protection des données) at www.dataprotectionauthority.be.

10. Policy Updates

We may revise this Privacy Policy from time to time. The updated version will be published on our site and takes effect immediately.