01
Who We Are
MAISON AERO Limited, a company registered in Hong Kong SAR. For privacy questions or to exercise your rights under applicable data protection law, email privacy@maisonaero.com. We respond within 30 days.
02
What We Collect
When you place an order: name, shipping address, email, phone, and payment information (handled by our payment processor, we never see or store your card number). When you browse: device type, browser, approximate location based on IP, pages viewed, and referral source. When you sign up to our list: just your email. When you contact support: the content of your message and the email or phone number you use.
03
How We Use It
To fulfill and ship your orders, send transactional emails (order confirmations, shipping updates), respond to your questions, prevent fraud, comply with tax and accounting obligations, and improve the site. If you opted into our newsletter, we send brand updates no more than twice a month. We do not make automated decisions about you that produce legal or similarly significant effects.
04
Sub-Processors We Share Data With
We engage the following vendors to operate the business: Shopify Inc. (Canada) for commerce infrastructure; Shopify Payments (Canada and United States) for card processing; Airwallex (Hong Kong and Singapore) for international settlement; Google Analytics (United States) for anonymised traffic measurement; Meta Pixel (United States) for conversion tracking if you arrive via Instagram or Facebook; Klaviyo (United States) for transactional and marketing email; DHL Express, SF Express, and USPS for delivery. Each processor is bound by contract to use your data only for the stated purpose. We do not sell, rent, or trade your information to any third party for marketing purposes. Ever.
05
How Long We Keep It
Order records: 7 years, as required by tax and accounting regulations. Email list: until you unsubscribe, plus 30 days to process the request. Analytics events: up to 14 months, which is the default retention for Google Analytics. Customer service correspondence: 2 years. Abandoned-cart data: 90 days.
06
Cookies
Essential cookies keep your cart and checkout working. Functional cookies remember language and currency preference. Analytics cookies help us understand how the site is used. Marketing cookies (Meta Pixel, TikTok Pixel) measure ad performance. You can reject non-essential cookies in the banner shown on your first visit or through your browser settings without breaking the shopping experience.
07
Your Rights
You may request a copy of your personal data, ask us to correct it, or ask us to delete it entirely. Residents of the European Union, United Kingdom, and European Economic Area have additional rights under GDPR (access, rectification, erasure, restriction, portability, objection). California residents have rights under CCPA, including the right to opt out of sale or sharing of personal information, we honor this, and we do not sell or share for cross-context behavioural advertising outside of the pixel-based measurement already disclosed above. Hong Kong residents have rights under the Personal Data (Privacy) Ordinance. Email privacy@maisonaero.com to exercise any of these rights.
08
Data Transfers
Your data is processed in Hong Kong, the United States, Canada, and the European Union by the sub-processors listed above. Transfers from the EU or UK rely on Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner.
09
Children
MAISON AERO is not intended for children under 16. We do not knowingly collect personal information from minors. If you believe we have, email privacy@maisonaero.com and we will delete the record.
10
Data Breach Notification
In the event of a data breach affecting your personal information, we will notify affected users within 72 hours of confirmation, consistent with GDPR Article 33 and comparable state and national breach notification laws.
11
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised date. If the change affects how we use data you have already provided, we will email you at the address on file before the change takes effect.