Privacy Policy
Effective Date: October 15, 2025
1. Introduction
Welcome to La Maison Estelle (lamaisonestelle.nl).
We are committed to protecting the privacy and security of your personal data. As a retailer selling to consumers within the European Union, we fully comply with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and all applicable data protection laws.
This policy describes how we collect, use, process, and protect your personal information when you visit or make a purchase from our WooCommerce store.
2. Data Controller Contact Information
For the purposes of the GDPR, the Data Controller responsible for the processing of your personal data is:
| Detail | Information |
| Name of Company | Probiosanus, UAB |
| Registration No. | 302733890 |
| Business Address | Gėlių g. 2, Avižienių k., Vilniaus r. |
| Website | lamaisonestelle.nl |
| Email for Privacy Concerns | support@lamaisonestelle.nl |
3. Personal Data We Collect and How We Use It
We collect personal data primarily to fulfill your orders, provide customer support, and improve your shopping experience.
| Category of Data | Purpose of Processing (Why We Collect It) | Legal Basis (GDPR Article 6) | Retention Period |
| Identity & Contact Data | To process and ship your order, communicate order status, and for customer service. | Contractual Necessity (to fulfil the sale agreement). | 10 years (Legal requirement for EU tax and financial records). |
| Name, Address, Email, Phone Number | |||
| Transaction Data | To manage payments, returns, and exchanges; to comply with tax/legal obligations (VAT/OSS). | Contractual Necessity and Legal Obligation. | 10 years (Legal requirement for EU tax and financial records). |
| Products ordered, Purchase Price, Payment Method (not full card details) | |||
| Technical & Usage Data | To maintain security, troubleshoot, and analyze website performance (e.g., via Google Analytics, if used). | Legitimate Interest (improving and securing our website). | Varies (e.g., 14-26 months for Google Analytics, shorter for logs). |
| IP address, browser type, operating system, pages visited, time spent on site. | |||
| Marketing Data (Optional) | To send you newsletters and promotional offers (if you subscribe). | Consent (You must explicitly opt-in). | Until you withdraw consent (unsubscribe). |
| Email address, subscription preferences. |
4. WooCommerce Specific Data Processing
As your shop uses the WooCommerce platform on WordPress, certain actions collect data:
- Placing an Order: WooCommerce collects the necessary data listed above (Name, Address, Payment Info) to process and track your order.
- Customer Account: If you create an account, we store your Identity, Contact, and Transaction Data to enable faster checkout and view order history.
- Reviews/Comments: If you leave a review, we collect your name, email address, and IP address.
- Abandoned Carts: If a cart is left abandoned, your email (if entered) is temporarily stored so we can send a single reminder based on legitimate interest in completing a transaction.
5. Sharing of Your Personal Data (Third Parties)
We only share your data with trusted third parties necessary to run our e-commerce business and comply with our legal duties. These entities are our “data processors” and are contractually bound to process data securely and only on our instructions (Data Processing Agreements).
| Category of Recipient | Purpose of Sharing | Data Shared | Location / Safeguards |
| Payment Processors | To process secure electronic payments for your orders (e.g., Mollie, Stripe, PayPal). | Transaction Data, Name, Email. | EU-based or compliant with GDPR cross-border transfer mechanisms (e.g., Standard Contractual Clauses). |
| Shipping & Logistics Providers | To physically deliver your order (e.g., PostNL, DHL). | Name, Shipping Address, Phone Number, Email. | EU-based. |
| Analytics Providers | To measure and analyze website traffic and performance (e.g., Google Analytics). | Technical/Usage Data (Anonymized IP addresses are preferred). | EU-based or compliant with GDPR cross-border transfer mechanisms. |
| Tax/Legal Authorities | To comply with our legal and tax reporting obligations (e.g., VAT/OSS reporting). | Transaction Data, Company Data. | EU-based. |
6. Your Rights Under the GDPR
As a resident of the European Union, you have the following rights regarding your personal data. To exercise any of these rights, please contact us using the email address provided in Section 2. We will respond to your request within one month.
- The Right to Access: Request copies of your personal data.
- The Right to Rectification: Request correction of any inaccurate or incomplete information.
- The Right to Erasure (Right to be Forgotten): Request the deletion of your personal data, under certain conditions.
- The Right to Restrict Processing: Request that we restrict the processing of your personal data, under certain conditions.
- The Right to Object to Processing: Object to our processing of your personal data, under certain conditions (e.g., for direct marketing).
- The Right to Data Portability: Request that we transfer the data we have collected to another organization, or directly to you.
- The Right to Withdraw Consent: Withdraw any consent you have previously given (e.g., for marketing emails) at any time.
7. Cookies and Tracking Technologies
- Our website uses cookies (small text files) to improve your shopping experience, such as keeping items in your cart.
- We use necessary cookies which are essential for the website to function. These do not require your consent.
- We use analytical/marketing cookies (e.g., Google Analytics, Facebook Pixel) for non-essential purposes. These will only be used if you provide explicit consent via our Cookie Banner/Consent Management Platform.
- For a detailed list of the cookies we use, their purpose, and their expiry, please refer to our separate Cookie Policy page.
8. Security of Your Data
We implement appropriate technical and organizational measures to protect your personal data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These include:
- Using SSL/TLS encryption (HTTPS) across our entire website.
- Restricting access to your personal data to authorized personnel only.
- Regularly updating our software (WordPress and WooCommerce) to maintain security.
9. Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Effective Date.”
10. How to Complain
If you have a concern about our use of your personal data, please contact us first so we can try to resolve the issue for you.
You also have the right to lodge a complaint with the relevant supervisory authority. Since we are established in Lithuania, the lead authority is:
- In Lithuania (Lead Authority):
- The State Data Protection Inspectorate (VDAI)
- Website: www.vdai.lrv.lt
However, you always have the right to lodge a complaint with the authority in your country of residence (e.g., the Netherlands):
- In the Netherlands:
- Autoriteit Persoonsgegevens (AP)
- Website: www.autoriteitpersoonsgegevens.nl
