At Maison OYO, we are dedicated to protecting your personal data and upholding the highest standards of discretion and privacy.

This Privacy Policy outlines how Maison OYO, headquartered in Soleuvre, Grand Duchy of Luxembourg, collects, handles, and safeguards your information in full compliance with the General Data Protection Regulation (EU GDPR) and Luxembourg data protection regulations.

When you explore maisonoyo.com, subscribe to our waitlist, or place an order, we may collect the following information:

• Contact & Identity Details: Full name, email address, delivery address, billing address, and phone number.
• Transactional Information: Selected scarves, order history, and payment status. (Payment details are securely encrypted and processed by certified payment gateways; Maison OYO never has access to or stores your credit card numbers).
• Digital & Browsing Data: IP address, device type, browser settings, and interaction logs captured via cookies to ensure smooth site navigation.

Your personal data is used strictly for legitimate business and customer service purposes:

• Order Fulfillment: Preparing your order, managing transactions, and providing complimentary tracked worldwide standard shipping with our courier partners (DHL / UPS).
• Customer Care: Answering inquiries and assisting with returns, exchanges, or styling advice.
• Brand Communications: Keeping you informed of limited edition drops, waitlist privileges, and news from The OYO Journal, solely when you have opted in.
• Security & Legal Obligations: Preventing fraudulent transactions and complying with statutory Luxembourg tax and accounting requirements.

We never sell, rent, or monetize your personal details.

Information is shared exclusively with certified third-party service providers bound by strict confidentiality agreements to deliver our services:

• E-Commerce Platform: Shopify Inc., hosting our secure digital infrastructure and checkout.
• Logistics Partners: International courier networks (DHL, UPS) to complete delivery directly to your door.
• Payment Processors: Regulated banking and payment solutions for end-to-end encrypted transactions.

We retain your personal data only as long as necessary to complete the purposes outlined in this policy, or to comply with mandatory statutory retention periods under Luxembourg law (including commercial and fiscal accounting archives).

Under the General Data Protection Regulation (GDPR), you possess full control over your personal data:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Ask us to correct inaccurate or incomplete details.
• Right to Erasure: Request the deletion of your personal records ("Right to be Forgotten"), where legally permissible.
• Right to Restrict or Object: Withdraw your consent for marketing communications or object to specific processing at any moment.

To exercise any of these rights, please contact our concierge at contact@maisonoyo.com.

You also have the right to lodge a formal complaint with the Luxembourg data protection supervisory authority: Commission Nationale pour la Protection des Données (CNPD) at cnpd.public.lu.

For any questions or requests regarding your personal information, please contact our Data Concierge:

Email: contact@maisonoyo.com
Postal Address: Maison OYO, 15 rue de Sanem, L-4485 Soleuvre, Grand Duchy of Luxembourg.