Privacy Policy

(GDPR)

Last updated: [16 December 2025]

Maison GEM (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information in accordance with the UK GDPR and EU GDPR.

Data controller

Maison GEM is the data controller responsible for your personal data.

Contact:
[insert contact email]

Personal data we collect

Information you provide

When you contact us via the website, we may collect:

  • Name

  • Email address

  • Any information you include in your message

We only collect data that is necessary to respond to your enquiry.

Automatically collected data

When you visit our website, we may collect limited technical data, including:

  • IP address

  • Browser and device information

  • Pages visited and interaction data

This information helps us understand how the website is used and improve performance.

Lawful basis for processing

Under GDPR, we rely on the following lawful bases:

  • Consent – when you submit a contact form or accept cookies

  • Legitimate interests – to operate, secure, and improve our website

You may withdraw your consent at any time.

Cookies

We use cookies and similar technologies to:

  • Ensure the website functions correctly

  • Analyse website usage and performance

Where required, cookies are only set after you have given consent. You can manage or withdraw cookie consent at any time through your browser settings.

How we use your data

We use personal data to:

  • Respond to enquiries

  • Communicate with you when requested

  • Improve and maintain our website

We do not sell or use your data for marketing without explicit consent.

Data sharing

We may share limited personal data with trusted service providers (such as website hosting or analytics services) where necessary to operate the website. These providers process data on our behalf and are required to comply with GDPR.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law.

Your rights

Under GDPR, you have the right to:

  • Access your personal data

  • Request correction or deletion

  • Restrict or object to processing

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

To exercise your rights, please contact:
[insert contact email]

International transfers

Where data is transferred outside the UK or EU, appropriate safeguards are in place to ensure GDPR-level protection.

Third-party links

Our website may contain links to third-party sites. We are not responsible for their privacy practices.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.

Contact

If you have any questions about this Privacy Policy or how your personal data is handled, please contact us at:
[insert contact email]