Privacy Policy & GDPR

Last updated: 28.10.2025

At S.C. VIVIENNE MARIE S.R.L., we value your privacy and are committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law No. 190/2018. This policy explains what information we collect, how we use it, and your rights as a data subject.

Data Controller

All orders are processed from Monday to Friday, excluding public holidays.
Once your order is placed, you will receive an order confirmation email. Orders are typically processed within 1–3 working days, depending on product availability and order volume.

Custom or made-to-order items may require additional time for preparation before dispatch. Any extended lead time will be clearly indicated on the product page or during checkout.

If we anticipate any delay in processing your order, you will be notified promptly via email.

 Data We Collect

We collect personal data when you:

  • place an order,

  • create an account or subscribe to our newsletter,

  • contact us, or

  • browse our website.

Collected data may include:

  • name, email, phone number, and addresses,

  • order details and payment information (processed securely via Shopify or payment providers),

  • device information, IP address, and browsing activity (via cookies and analytics tools).

Purpose and Legal Basis

We process your personal data only for legitimate and clearly defined purposes, in accordance with the GDPR:


  • To process orders, payments, and deliveries – based on the performance of a contract (Article 6(1)(b) GDPR).

  • To provide customer support and improve your experience – based on our legitimate interest in ensuring quality service (Article 6(1)(f) GDPR).

  • To comply with legal obligations, such as accounting and tax requirements – based on our legal duty (Article 6(1)(c) GDPR).

  • To send marketing communications or newsletters – only with your explicit consent (Article 6(1)(a) GDPR).

  • To analyze website performance and enhance our services – based on our legitimate interest in improving the site’s functionality and user experience (Article 6(1)(f) GDPR).

Data Sharing

We share your data only with trusted partners as necessary to operate our store:

  • Shopify, Inc. (e-commerce platform) – GDPR-compliant processor

  • Payment providers (Stripe, PayPal, Shopify Payments)

  • Couriers and logistics partners

  • Email and marketing tools (only if you subscribe)

We never sell or rent your data. Shopify may store data outside the EU under approved Standard Contractual Clauses ensuring GDPR-level protection.

Data Retention

We retain data only as long as necessary:

  • Order and billing data – up to 10 years (legal obligation)

  • Marketing data – until consent is withdrawn

  • Customer support records – typically 2 years

Data is securely deleted or anonymized after the retention period.

Security

We protect your data with:

  • encrypted connections (HTTPS/SSL),

  • secure servers and firewalls,

  • access controls and staff confidentiality policies.

Despite these measures, no online system is entirely risk-free. We continually review and improve our safeguards.

Your Rights

Under GDPR, you have the right to:

  • access, correct, or delete your data,

  • restrict or object to processing,

  • data portability, and

  • withdraw consent at any time.

To exercise your rights, contact contact@maisonviviennemarie.com. 

You may also file a complaint with ANSPDCP (www.dataprotection.ro).

Cookies and Tracking

We use cookies to improve your shopping experience and website functionality.

Types of cookies:

  • Essential – required for checkout and site operation

  • Analytics – help us understand visitor behavior

  • Functional – remember preferences (language, region)

  • Marketing – personalize offers and advertising

You can accept, reject, or customize cookies through our banner or your browser settings.

Marketing Communications

If you subscribe to our newsletter, we’ll send occasional updates or offers. You can unsubscribe anytime by using the link in the email or contacting us directly. We never send unsolicited emails.

Changes to This Policy

We may update this policy to reflect changes in law or business practices. All updates will appear on this page with a revised “Last updated” date.