Privacy Policy

Last updated: April 2026

This website (maisonh.com) is operated by SETTERTREND S.L., trading as Maison Hotel, Calle Fernández de la Hoz 56, 28010 Madrid, Spain (VAT: ESB86530789).

For the purposes of applicable data protection law, SETTERTREND S.L. is the data controller of your personal information.

Contact for data protection matters: info@maisonh.com

We collect and process personal data for the following purposes, on the following legal bases:

Order processing and fulfilment

Name, delivery address, billing address, email, phone number, payment confirmation, and order history.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Account creation and management

Name, email address, password, and preferences.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Email marketing

Email address and purchase history, used to send newsletters, promotional communications, and personalised recommendations. You may withdraw consent at any time via the unsubscribe link in any email.

Legal basis: consent (Art. 6(1)(a) GDPR).

Abandoned cart and browse recovery

Email address and browsing/cart data, used to send reminders about items left in your cart or recently viewed. You may opt out at any time by contacting us.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Analytics and website improvement

Device information, IP address, pages visited, session data, and interaction behaviour, used to understand how our website is used and improve the customer experience.

Legal basis: consent (Art. 6(1)(a) GDPR), obtained via our cookie consent mechanism.

Fraud prevention and security

Order information and device data, used to detect and prevent fraudulent transactions.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Legal compliance

Order and transaction records, retained as required by applicable law (including Spanish tax and accounting legislation).

Legal basis: legal obligation (Art. 6(1)(c) GDPR).

To operate our store and services, we share data with the following providers, each acting as a data processor or independent controller under their own privacy policies:

Shopify

E-commerce platform hosting our store and processing orders. Shopify is certified under the EU-US Data Privacy Framework. Privacy policy: shopify.com/legal/privacy

PayPal

Payment processing. Privacy policy: paypal.com/privacy

Klaviyo

Email marketing platform. We use Klaviyo to send marketing emails and automated flows (abandoned cart, post-purchase). Klaviyo tracks email opens, clicks, and browsing behaviour via a tracking pixel, subject to your cookie consent. Privacy policy: klaviyo.com/legal/privacy

Meta (Facebook / Instagram)

Advertising platform. We use Meta Pixel to measure the effectiveness of our advertising and to show relevant ads. Requires your consent, managed via our cookie banner. Privacy policy: facebook.com/privacy/policy

Google Analytics

Website analytics. We use Google Analytics to understand how visitors interact with our website. Requires your consent, managed via our cookie banner. Privacy policy: policies.google.com/privacy

Microsoft Clarity

Session recording and heatmap tool. We use Clarity to understand user behaviour on our website (mouse movements, clicks, scroll patterns). Clarity does not capture payment information or passwords. Requires your consent, managed via our cookie banner. Privacy policy: privacy.microsoft.com

Windsor.ai

Marketing analytics aggregation. Windsor.ai consolidates anonymised performance data from our advertising channels. Processes aggregated, non-identifiable data only. Privacy policy: windsor.ai/privacy

REVER

Returns and exchanges management platform. REVER processes order and customer data solely for the purpose of facilitating returns.

Shipping and logistics providers

We share delivery address and order data with our logistics partners (including UPS) to fulfil and deliver your order.

Artificial intelligence tools (internal use)

We use AI-powered tools — including Anthropic Claude and OpenAI ChatGPT — to support internal operations such as customer communication drafting, content creation, and business analysis. In the course of these activities, limited personal data (such as customer email content or order details) may be processed by these tools.

These tools are used solely for internal operational purposes. We do not use AI tools to make automated decisions that produce legal or significant effects on individual customers. Neither provider uses your data to train their AI models.

Both providers act as data processors under Data Processing Agreements incorporating Standard Contractual Clauses (EU Commission Implementing Decision 2021/914):

Anthropic (Claude):  anthropic.com/privacy

OpenAI (ChatGPT):  openai.com/policies/privacy-policy

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — to improve the efficiency and quality of our internal operations.

Social media profiles

Maison Hotel maintains official profiles on Instagram, Facebook, TikTok, and Pinterest. When you interact with our profiles — by following, liking, commenting, sending a direct message, or sharing content — the respective platform collects and processes your data in accordance with its own privacy policy. Maison Hotel and the platform operator act as joint controllers for certain processing activities related to our page insights and audience analytics.

We use aggregated, anonymised statistics provided by these platforms to understand our audience and improve our content. We do not use this data to identify individual users.

If you send us a direct message via social media, we may use the information you provide to respond to your enquiry. We do not store direct message content beyond what is necessary to handle your request.

For full details of how each platform processes your data:

Instagram / Facebook (Meta):  facebook.com/privacy/policy

TikTok:  tiktok.com/legal/page/row/privacy-policy

Pinterest:  policy.pinterest.com/privacy-policy

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — to manage our brand presence and engage with our community.

Your personal data may be transferred to and processed in countries outside the European Economic Area, including the United States (Klaviyo, Meta, Google, Microsoft, Windsor.ai, Anthropic, OpenAI). Where we transfer data outside the EEA, we rely on recognised transfer mechanisms including the European Commission’s Standard Contractual Clauses (SCCs) and, where applicable, adequacy decisions or certification under the EU-US Data Privacy Framework.

 

Data	Retention period
Order and transaction records	10 years (Spanish tax law obligation)
Customer account data	Duration of account + 3 years after closure
Email marketing consent and history	Until unsubscribe or withdrawal of consent
Analytics and cookie data	13 months (see Cookie Policy)
Customer service correspondence	3 years from last interaction

 

Under the GDPR, UK GDPR, and Spanish Organic Law 3/2018 (LOPDGDD), you have the right to:

Access  the personal data we hold about you.

Rectify  inaccurate data.

Erase  your data (“right to be forgotten”), where applicable.

Restrict  the processing of your data.

Object  to processing based on legitimate interest.

Data portability  — receive your data in a machine-readable format.

Withdraw consent  at any time, without affecting the lawfulness of prior processing.

 

To exercise any of these rights, contact us at info@maisonh.com. We will respond within 30 days.

EEA residents may lodge a complaint with: AEPD — Agencia Española de Protección de Datos · aepd.es · C/ Jorge Juan 6, 28001 Madrid.

UK residents may lodge a complaint with: Information Commissioner’s Office (ICO) · ico.org.uk · Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom.

If you are a resident of California or another US state with applicable privacy legislation, the following additional rights and disclosures apply.

Categories of personal information we collect

We collect the following categories of personal information (as defined under the CCPA):

Identifiers (name, email address, IP address, account username)

Commercial information (purchase history, products viewed, cart activity)

Internet or network activity (browsing behaviour on our website, cookie data)

Geolocation data (delivery address, approximate location from IP)

Inferences (product preferences derived from browsing and purchase history)

 

Sharing of personal information for advertising purposes

Under the CCPA, sharing personal data with advertising platforms (such as Meta and Google) for targeted advertising purposes may constitute a “sale” or “sharing” of personal information. You have the right to opt out of this sharing at any time.

To opt out: manage your preferences via our Cookie settings in the website footer, or contact us at info@maisonh.com.

We honour the Global Privacy Control (GPC) signal. If your browser sends a GPC opt-out signal, we will treat it as a request to opt out of the sharing of your personal information for advertising purposes. Learn more at globalprivacycontrol.org.

 

Your rights as a US resident

Depending on your state of residence, you may have the right to:

Know  what personal information we collect, use, disclose, and sell or share.

Delete  personal information we hold about you, subject to certain exceptions.

Correct  inaccurate personal information.

Opt out  of the sale or sharing of your personal information for targeted advertising.

Non-discrimination  — we will not discriminate against you for exercising any of these rights.

Data portability  — receive a copy of your personal information in a portable format.

 

To submit a request, contact us at info@maisonh.com with the subject line “Privacy Request”. We will respond within 45 days.

We use cookies and similar tracking technologies on our website. For full details of the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

Our website is not intended for children under 16. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at info@maisonh.com.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Material changes will be notified to registered customers by email. We encourage you to review this page periodically.

For any privacy-related questions: info@maisonh.com

SETTERTREND S.L. · Calle Fernández de la Hoz 56, 28010 Madrid, Spain