Privacy Policy – Maison 103
Last updated: October 8, 2025
Maison 103 places the highest importance on protecting your personal data and safeguarding your privacy when you use our website and our high-end concierge services. This policy explains how we collect, use, share, and protect your personal information.
1. Data Controller
The data controller is:
Maison 103
Email: contact@maison103.com
Address: [company’s physical address]
For any question regarding your personal data, you may contact us directly at this email address.
2. Data We Collect
2.1 Data Provided Directly by You
- First and last name
- Email address and phone number
- Mailing address (if provided)
- Payment information (for bookings or deposits)
- Travel preferences, interests, and specific needs submitted via form or email
2.2 Data Collected Automatically
- IP address
- Browser type and operating system
- Pages visited and time spent on the website
- Traffic source (referrer, search engine, advertising campaigns)
2.3 Cookies and Similar Technologies
- Necessary cookies for website operation
- Analytics cookies (e.g., Google Analytics) to improve website performance
- Marketing or tracking cookies (when applicable)
3. Legal Basis for Processing
Under the GDPR, data is processed based on:
- Consent: when you submit a form or subscribe to the newsletter
- Contract performance: for organizing your travels and services
- Legal obligation: storing information for accounting and tax purposes
- Legitimate interest: improving our services and securing our website
For U.S. residents (CCPA), your data is collected solely to:
- Provide the requested services
- Manage the website and client relationship
- Comply with applicable laws
4. How Your Data Is Used
Your data is used to:
- Process contact requests and bookings
- Organize and personalize your travel and concierge services
- Communicate important information about your stay
- Improve our services and website content
- Send newsletters or promotional offers with your consent
- Comply with legal or regulatory obligations
5. Sharing and Disclosure of Data
Maison 103 does not sell or rent your data to third parties.
We may share your information with:
- Service providers and partners involved in delivering services (transfers, activities, restaurants, events), strictly when necessary
- Website host and IT providers (WordPress, plugins, email services)
- Legal authorities, if required by law
International Data Transfers
If your data is transferred outside the EU (e.g., to the USA), appropriate safeguards are implemented, such as Standard Contractual Clauses approved by the European Commission.
6. Cookies and Tracking
Types of Cookies
- Necessary: required for navigation and website functionality
- Analytics: for measuring performance and improving user experience
- Marketing: for personalized ads and content
You may manage your cookie preferences through your browser or via the website’s cookie banner.
7. Data Retention Periods
- Contact forms and inquiries: 2 years after the last interaction
- Booking data: 5 years (legal and accounting obligations)
- Analytics data: 13 months
- Marketing data: until consent is withdrawn
8. Data Security
We use appropriate technical and organizational measures to protect your data:
- SSL encryption for all website communications
- Regular backups and secure data storage
- Limited access for authorized staff and providers only
- Access controls and secure password practices
9. Your Rights (GDPR & CCPA)
You may exercise the following rights:
- Access: know what data we hold about you
- Rectification: correct inaccurate or incomplete data
- Deletion: request the removal of your data (right to be forgotten)
- Restriction or objection: limit or oppose certain processing activities
- Withdraw consent at any time
- Data portability: receive your data in a structured, readable format
For California residents:
- Right to opt out of the sale or sharing of personal data
To exercise your rights:
Email: contact@maison103.com
Contact form: available on the website
You may also file a complaint with:
- CNIL (France)
- California Privacy Protection Agency (USA)
10. Data Breach Procedure
In the event of a data breach:
- We will notify affected users within the required legal timeframe
- We will inform relevant authorities, when required
- Corrective measures will be implemented immediately to secure your information
11. Changes to This Policy
This policy may be updated at any time. The last updated date will always be indicated at the top of the page.
We encourage you to review it regularly.
12. Contact
For any question regarding your personal data or this policy:
Mailing address: [company’s physical address]
Email: contact@maison103.com
Contact form: [link to your website form]
