Privacy policy

Last updated: October 2026

Maison OYO, located at 15 rue de Sanem, L-4485 Soleuvre, Grand Duchy of Luxembourg, protects your personal data in strict compliance with the General Data Protection Regulation (EU GDPR) and Luxembourg data protection laws.

1. Information We Collect

  • Identity & Contact Details: Full name, email address, delivery address, billing address, phone number.

  • Order & Transaction Records: Purchased scarves, order reference, payment status. (Payment details are securely encrypted and handled directly by certified payment processors; Maison OYO never stores full payment card numbers).

  • Digital Navigation Data: IP address, device type, browser settings, and interaction cookies.

2. Purpose & Legal Basis of Processing

We process your personal information strictly to:

  • Prepare, process, and deliver your orders with complimentary tracked standard shipping via premium courier partners (DHL / UPS).

  • Provide client assistance and handle exchanges or returns.

  • Send waitlist privileges and brand notes from The OYO Journal, solely upon your prior consent.

  • Comply with statutory accounting and tax retention obligations under Luxembourg law.

3. Data Sharing & Third-Party Processors

We never sell, rent, or trade your personal information. Data is transferred strictly to certified service providers necessary for our operations: Shopify Inc. (platform hosting), international couriers (DHL / UPS), and regulated payment processors.

4. Your Statutory GDPR Rights

Under the GDPR, you have the right to access, rectify, restrict, or request the deletion of your personal records. To exercise these rights, contact our Data Concierge at contact@maisonoyo.com.

You also have the right to lodge a complaint with the Luxembourg data protection supervisory authority: Commission Nationale pour la Protection des Données (CNPD) at cnpd.public.lu.