Privacy policy

Privacy Policy

Last updated: 10 September 2026

1. Data controller

VELORIA SASU, 47 rue Vivienne, 75002 Paris, France (trading as Maison Kireru) is the controller of the personal data collected on maisonkireru.co.uk. Contact: info@maisonkireru.co.uk. As we are based outside the UK, this policy is written to comply with the UK GDPR and the Data Protection Act 2018 as well as the EU GDPR.

2. Data we collect

• Order data: name, delivery and billing address, email, telephone number, products ordered, payment status (card details are handled by Shopify Payments and the payment provider; we never see them).
• Account data: if you create an account, your login details and order history.
• Communications: emails and messages you send us.
• Technical data: IP address, browser and device, pages visited, collected via cookies and similar technologies (see section 7).
• Marketing data: your email address if you subscribe to our newsletter, and your preferences.

3. Why we use it (legal bases)

• To process and deliver your order, manage returns and the guarantee — performance of a contract.
• To comply with accounting, tax and customs obligations, and with the age restriction on the sale of knives — legal obligation.
• To answer your questions and improve our products and website — legitimate interests.
• To send you marketing emails — consent, which you can withdraw at any time via the unsubscribe link.
• To prevent fraud — legitimate interests.

4. Who we share it with

Shopify (platform, hosting and payments), payment providers (PayPal, Klarna where chosen), our fulfilment partner and carriers (name, address, telephone, for delivery only), email and analytics providers, and our accountants. We never sell your data. Some providers are located outside the UK; transfers are protected by the UK International Data Transfer Agreement, EU standard contractual clauses or adequacy decisions.

5. Retention

Order data is kept for 6 years after the order to meet accounting and tax obligations. Account data is kept while your account is active. Marketing data is kept until you unsubscribe. Technical data is kept for up to 13 months.

6. Your rights

You can ask to access, correct, delete or restrict your data, object to processing, request portability, and withdraw consent at any time by writing to info@maisonkireru.co.uk. We respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113) or, in the EU, to the CNIL.

7. Cookies

We use essential cookies (cart, checkout, security), analytics cookies (to understand how the site is used) and marketing cookies (to measure our advertising). Non-essential cookies are only set with your consent, which you can give or withdraw via the cookie banner or your browser settings.

8. Security

The site is served over HTTPS and payments are processed on PCI-DSS compliant systems. We restrict access to personal data to staff and providers who need it.

9. Changes

We may update this policy; the date at the top shows the latest version.