PRIVACY POLICY

Privacy Policy

Last updated: 12 August 2026

Maison Lorne operates this online store and website, including all related information, content, features, tools, products and services made available to you (the "Services").

Maison Lorne is operated by NORTHBRIDGE GLOBAL COMMERCE LTD, a company registered in England and Wales under company number 16826998, with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX.

Our store is powered by Shopify, which provides the ecommerce platform that enables us to offer the Services to you.

This Privacy Policy explains how we collect, use, disclose, store and otherwise process your personal information when you visit our website, make a purchase, communicate with us or otherwise interact with the Services.

For the purposes of applicable UK data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, NORTHBRIDGE GLOBAL COMMERCE LTD is the data controller of the personal information described in this Privacy Policy, except where another organisation acts as an independent controller for its own processing activities.

1. Personal Information We Collect

Depending on how you interact with the Services, we may collect or process the following categories of personal information:

Contact Information

This may include:

• your name;
• email address;
• telephone number;
• billing address;
• delivery address.

Order and Transaction Information

This may include:

• products viewed or purchased;
• products added to your basket;
• order history;
• returns, refunds and cancellations;
• delivery information;
• transaction details;
• discount or promotional code usage.

Payment Information

Payments may be processed through Shopify and third-party payment providers.

Depending on the payment method used, payment-related information may include:

• payment card details;
• payment method;
• billing information;
• payment status;
• transaction confirmation.

We may not directly receive or retain complete payment card details where these are processed securely by our payment providers.

Account Information

Where customer accounts are available, we may process information such as:

• account login details;
• preferences;
• saved addresses;
• order history;
• account settings.

Communications

We collect information that you provide when you contact us, including through:

• email;
• contact forms;
• customer support enquiries;
• return or refund requests;
• other communications with Maison Lorne.

Device and Usage Information

When you access our website, certain information may be collected automatically, including:

• IP address;
• browser type;
• device type;
• operating system;
• network information;
• pages viewed;
• interactions with the website;
• referring pages;
• approximate location derived from technical information;
• cookies and similar technologies.

2. How We Collect Personal Information

We may obtain personal information:

• directly from you;
• automatically when you use our website;
• from Shopify;
• from payment providers;
• from delivery and fulfilment providers;
• from service providers acting on our behalf;
• from advertising or marketing partners where permitted by law;
• from other third parties where permitted or required by law.

3. How We Use Your Personal Information

We may use personal information to:

Provide Our Services

Including to:

• process and fulfil orders;
• process payments;
• arrange delivery;
• provide order confirmations and updates;
• process returns, refunds and cancellations;
• operate customer accounts;
• provide customer support;
• respond to enquiries.

Improve Our Website and Services

We may analyse how customers interact with our website to:

• improve website functionality;
• understand customer preferences;
• improve our products and services;
• diagnose technical issues;
• improve the customer experience.

Marketing and Advertising

Where permitted by law, we may use personal information to:

• send promotional communications;
• provide information about products or offers;
• measure advertising effectiveness;
• personalise marketing;
• display relevant advertising.

You may unsubscribe from promotional emails at any time by using the unsubscribe link contained in the communication.

Where consent is required by law for electronic marketing, cookies or similar technologies, we will seek that consent.

Security and Fraud Prevention

We may process personal information to:

• prevent and detect fraud;
• protect our customers;
• protect our business;
• secure our website and systems;
• identify suspicious transactions;
• investigate misuse of the Services.

Legal and Regulatory Purposes

We may process personal information where necessary to:

• comply with legal obligations;
• maintain accounting and tax records;
• respond to lawful requests from authorities;
• establish, exercise or defend legal claims;
• enforce our terms and policies.

4. Lawful Bases for Processing

Under UK data protection law, we rely on one or more lawful bases depending on the circumstances.

These may include:

Performance of a Contract

Where processing is necessary to fulfil an order or take steps at your request before entering into a contract.

Legal Obligation

Where processing is necessary to comply with a legal or regulatory requirement.

Legitimate Interests

Where processing is necessary for our legitimate business interests or those of another party and those interests are not overridden by your rights and freedoms.

Examples may include fraud prevention, improving our Services and protecting our business.

Consent

Where we rely on your consent, including for certain marketing activities, cookies or similar technologies where required by law.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to operate and improve our website.

These technologies may be used to:

• keep the website functioning;
• remember preferences;
• maintain your shopping basket;
• provide security;
• analyse website usage;
• measure performance;
• support advertising and marketing.

Some cookies and similar technologies may be used without consent where permitted by applicable law, including where they are strictly necessary or otherwise fall within a lawful exemption.

Where consent is legally required, we will request your consent before using the relevant technologies.

You may manage available cookie preferences through our website's cookie controls and, where applicable, through your browser settings.

6. Marketing Communications

We may send electronic marketing communications where you have provided consent or where another lawful basis permitted by applicable electronic marketing legislation applies.

Every marketing email will provide a method for unsubscribing.

Unsubscribing from marketing communications does not prevent us from sending essential transactional communications relating to your orders, account, returns, refunds or customer service enquiries.

7. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to:

• Shopify;
• payment processors;
• delivery companies;
• fulfilment partners;
• IT and hosting providers;
• customer service providers;
• analytics providers;
• professional advisers;
• advertising and marketing partners where legally permitted;
• government agencies, regulators or law enforcement authorities where required by law.

We may also disclose personal information as part of a merger, restructuring, acquisition, financing, sale of assets or similar business transaction.

We do not permit service providers acting on our behalf to use personal information for unrelated purposes except where independently permitted by applicable law.

8. Shopify

Our online store is hosted by Shopify.

Shopify processes information relating to your access to and use of our store in order to provide its ecommerce services.

Information submitted through our Services may therefore be transmitted to Shopify and other service providers involved in operating the store.

Depending on the particular Shopify service or feature involved, Shopify may process information on our behalf or as an independent data controller.

Shopify maintains its own privacy information explaining how it processes customer personal information.

9. International Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection law.

Where required, this may include relying on:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to approved Standard Contractual Clauses;
• another legally recognised safeguard.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

• fulfil orders;
• maintain customer accounts;
• provide customer support;
• comply with tax, accounting and legal requirements;
• prevent fraud;
• resolve disputes;
• enforce agreements.

Different categories of information may be retained for different periods.

When personal information is no longer required, we will delete, anonymise or securely dispose of it where appropriate.

11. Security

We use reasonable administrative, technical and organisational measures designed to protect personal information.

However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.

Customers are responsible for keeping any account credentials confidential and should contact us if they believe their account or personal information has been compromised.

12. Your Data Protection Rights

Subject to applicable law and certain exceptions, you may have the right to:

• request access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of your personal information;
• request restriction of processing;
• object to certain processing;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent;
• object to direct marketing;
• raise concerns about how your personal information is processed.

We may need to verify your identity before acting on a request.

To exercise your rights, contact:

contact@maisonlornelondon.com

13. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can investigate your concerns.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.

14. Children's Privacy

Our Services are not specifically directed at children.

We do not knowingly collect personal information from children where doing so would be unlawful.

If you believe that a child has provided personal information to us improperly, please contact us so that we can review the matter.

15. Third-Party Websites

Our website may contain links to websites, platforms or services operated by third parties.

We are not responsible for the privacy, security or content practices of third-party websites. We encourage you to review their privacy information before providing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• our business;
• our Services;
• our technology;
• applicable law;
• regulatory requirements.

The revised version will be published on this website with an updated "Last updated" date.

17. Contact Us

For questions about this Privacy Policy, our privacy practices or your personal information, please contact:

Maison Lorne
Operated by NORTHBRIDGE GLOBAL COMMERCE LTD
Company Number: 16826998
Registered Office: 128 City Road, London, United Kingdom, EC1V 2NX
Email: contact@maisonlornelondon.com

For the purposes of applicable UK data protection law, NORTHBRIDGE GLOBAL COMMERCE LTD is the data controller responsible for the personal information described in this Privacy Policy.