Privacy Policy

Maison Van Irene ("we", "our", or "us") respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have, when you visit maisonvanirene.com, create an account, join our mailing list, or purchase our products.

Information You Provide

• Orders. Your name, email address, shipping address, billing address (if different), and phone number (optional). Payment card details are collected directly by Stripe or PayPal — we never see or store your card number.
• Accounts. If you create an account, your email and name are managed by Clerk, our sign-in provider, and mirrored to our systems along with the preferences you set — saved addresses, communication preferences, and an optional skin profile.
• Email sign-up. Your email address, and where a form offers it, your first name.
• Text-message sign-up.If you opt in to texts, your mobile number and the date of your consent (see "Text Messages" below).
• Contact form. Your name, email, subject, and message. Contact submissions are delivered to our inbox by email and are not stored in our database.
• Returns. The details of your return request, including any photos you choose to upload.
• Discount codes. When you enter a discount code, we record the code and the email used with it — this is how we enforce one-per-customer limits fairly.
• Back-in-stock and waitlists. Your email address, tagged with the product you asked about.

Information Collected Automatically

• Campaign attribution. If you arrive from an ad or a tagged link, a first-party cookie records the campaign parameters (such as utm_source and ad click identifiers), your landing page, and the referring site for 30 days, so we know which of our campaigns brought you here. If you purchase, that campaign information is stored with your order.
• Site analytics. We use Vercel Web Analytics and Speed Insights — privacy-preserving, cookieless measurement that tells us which pages are visited and how fast they load, without building a profile of you or tracking you across other websites.
• Security signals. Your IP address is used transiently to protect our forms and checkout — bot verification (Cloudflare Turnstile), rate limiting, and payment-abuse prevention (where it is hashed). We do not store your IP address with your order, and a scheduled safeguard removes any order-linked IP data older than 90 days. Administrative security logs retain the IP addresses of staff actions.
• Cart and preferences on your device.Your cart, guest wishlist, and small preferences (such as whether you dismissed our sign-up invitation) are kept in your own browser's storage.

Our Cookie Policy describes the cookies and similar technologies we use, and how to control them.

How We Use Your Information

• To process, fulfill, and ship orders — including sharing your name and shipping address with our fulfillment providers
• To send order confirmations, shipping updates, receipts, and other transactional messages
• To respond to support inquiries and return requests
• To send marketing email or texts — only where you have opted in, and always with a working unsubscribe
• To measure our own advertising and understand which campaigns work
• To keep the site secure — preventing bots, abuse, and payment fraud — and to enforce promotion limits
• To improve the site's content and performance

Service Providers

We share personal information only with providers who help us operate, each limited to what their role requires:

• Stripe & PayPal — payment processing; they receive your checkout details and handle your card or PayPal account directly
• Amazon & Fulfillrite — order fulfillment and shipping; they receive your name and shipping address
• Clerk — account sign-in and authentication
• Resend — sending our transactional email (order confirmations, shipping updates, receipts, and account notices)
• Klaviyo — our marketing-email platform, which holds mailing-list profiles (email, optional name and phone, sign-up source, and order events) when enabled
• Vercel — website hosting, cookieless analytics, and file storage
• Neon — our encrypted database
• Upstash — short-lived security counters for rate limiting
• Cloudflare — bot protection on our forms (Turnstile)
• Judge.me — product-review display
• Shopify — our companion storefront; orders placed there sync to our order system
• Sentry — error monitoring (configured not to collect personal data by default), when enabled

Each provider maintains its own privacy policy. We do not allow them to use your information for their own marketing.

Advertising Measurement

With your consent, our site loads the Meta Pixel and Google tag to measure our advertising in your browser — these load only after you accept marketing cookies, and never if you decline or your browser sends a Global Privacy Control signal.

Separately, when you complete a purchase or sign up from one of our campaigns, we may report that conversion to Meta and Google using hashed identifiers (a one-way fingerprint of your email or phone that cannot be read back), so we can tell which ads lead to real orders. We share this solely to measure our own campaigns — we do not sell your personal information, and we do not share it for others to advertise to you.

Text Messages

If you check the SMS box on our sign-up form, you consent to receive recurring automated marketing texts from Maison Van Irene at the number provided. Consent is not a condition of purchase. Message and data rates may apply, and message frequency varies. Reply STOP to opt out at any time, or HELP for help. Your number and the date of your consent are stored with your subscriber profile.

Your Rights & Choices

• Access, correction, deletion, portability. Account holders can submit these requests from Account → Security → Privacy Request; anyone can email us. We verify and respond to every request within five business days. Where the law requires us to keep certain records — completed orders, tax records — we retain those and delete the rest.
• Marketing email. Every marketing email carries a one-click unsubscribe. Account holders can also manage each email type under Preferences.
• Texts. Reply STOP to any message.
• Cookies. Use the Cookie Settings link in the footer to change your consent at any time — one step, no digging through browser settings.
• Global Privacy Control. We honor the GPC browser signal: if your browser sends it, marketing and analytics cookies are declined automatically.

California Residents

California residents have the right to know what personal information we collect and how it is used (this policy is that disclosure), to access it, to correct it, to delete it, and to be free from discrimination for exercising those rights. We do not sell personal information. To the extent sharing hashed identifiers with our advertising partners for measurement is considered "sharing" under California law, you can opt out via the Cookie Settings link in the footer or the Global Privacy Control signal, both of which we honor.

Data Retention

• Orders — retained for 7 years for tax and accounting requirements
• Mailing-list profiles — until you unsubscribe or ask us to delete them
• Abandoned checkout reminders — the email and cart you started checkout with are deleted after 90 days
• Contact messages — kept only in our email inbox, not in our database
• Security logs and discount-code records — retained as long as needed for security and promotion integrity

Security

All traffic is encrypted in transit (HTTPS with HSTS). Payment details are tokenized by Stripe and PayPal and never touch our servers. Administrative access is protected by two-factor authentication, session limits, and audit logging.

Children

Our site and products are not directed to children under 13, and we do not knowingly collect their information.

International Visitors

We are a United States business; our systems are hosted in the U.S., and we currently ship within the U.S. only. If you visit from elsewhere, your information is processed in the United States.

Changes to This Policy

When our practices change, we will update this policy and the "Last updated" date above before the change takes effect.

Contact

Questions, or a privacy request? Email hello@maisonvanirene.com. We respond within one business day.