Privacy policy

Last updated: 12 October 2026

Max Daumin cares about the protection of your personal data. This page explains what data we collect on maxdaumin.com, why, how long we keep it and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Who is responsible for your data?

The data controller is: ETOIL, a French SAS registered with the Bourg-en-Bresse trade and companies register (RCS), located at 35 rue des Etaillers, 01450 Leyssard, France, SIRET 822 156 352 00012. ETOIL operates the maxdaumin.com website under the Max Daumin brand. You can contact us at donnees-personnelles@maxdaumin.com for any question about your data.

2. What data do we collect?

Identity and contact details: title, first name, last name, e-mail address, phone number (if provided), company and VAT number (business customers).
Addresses for delivery and billing.
Orders: products ordered, amounts, delivery method, payment method, history and messages related to the order.
Customer account: identifier (e-mail) and password, which we only store in encrypted form.
Messages: the content of your exchanges with us through the contact form, the site chat, Instagram or Messenger, as well as the information you give (name, e-mail) or that the platform sends us (name or identifier of your Instagram or Facebook account).
Technical data: IP address, browser type, pages viewed, through cookies (see our cookie policy).

Site chat. The chat only loads when you click on its button. Once a conversation has started, it stores a technical cookie in your browser, needed to find your conversation again if you change page or come back later. This cookie is not used for audience measurement or advertising, and it is not set until you start writing.

We never collect your bank details: payment is handled directly by our payment providers (see section 5).

3. Why, and on what legal basis?

Purpose	Legal basis
Process and deliver your order, handle payment, invoicing and after-sales service	Performance of a contract
Create and manage your customer account	Performance of a contract
Comply with our accounting, tax and legal obligations	Legal obligation
Send our newsletter	Your consent (checkbox, which you can withdraw at any time)
Prevent fraud and secure the site	Legitimate interest
Produce traffic statistics	Your consent (cookies)
Measure the effectiveness of our advertising and show you tailored ads (Google Ads, Facebook)	Your consent (cookies)
Answer your requests and messages (form, chat, Instagram, Messenger)	Legitimate interest

4. How long do we keep your data?

Orders and invoices: 10 years (accounting obligation).
Customer account: until the account is deleted or, failing that, 3 years after your last order or login.
Newsletter: until you unsubscribe or, failing that, 3 years without interaction with our e-mails (opens, clicks) or purchases.
Contact requests and conversations (form, chat, Instagram, Messenger): 3 years after the last exchange.
Cookies: 13 months at most.

5. Who receives your data?

Your data is intended only for ETOIL (Max Daumin) and our service providers, who only use it to provide us with their service:

Payment: CM-CIC Paiement, PayPal.
Transport and delivery: Colissimo, GLS, Mondial Relay.
Order and service e-mails: Brevo.
Newsletter: Klaviyo.
Chat and messaging: Chatwoot, a support software that we host ourselves. Push notifications to our team's mobile app go through a relay operated by Chatwoot Inc. (United States). If you write to us through Instagram or Messenger, your messages go through Meta, which processes them according to its own privacy policy.
Customer reviews: Société des Avis Garantis.
Hosting and management tools: Scaleway.
Audience measurement: Google Analytics and Google Tag Manager, only if you accept audience measurement cookies.
Advertising: Google Ads and Meta (Facebook), only if you accept advertising cookies.

We do not sell your data. It may be disclosed to the competent authorities upon a legal request.

6. Transfers outside the European Union

Some of our service providers (Google, Meta, Klaviyo, PayPal, Chatwoot Inc. for push notifications) may process data outside the European Union, notably in the United States. These transfers are governed by the European Commission's adequacy decision (Data Privacy Framework), by standard contractual clauses or by binding corporate rules. Our other service providers process your data within the European Union.

7. What are your rights?

You have the following rights over your data:

access to your data and a copy of it;
rectification of inaccurate data;
erasure, within the limits of our legal retention obligations;
objection to processing and restriction of processing;
portability of the data you provided to us;
withdrawal of your consent at any time (newsletter, cookies), without affecting what was done before the withdrawal;
the right to set instructions on what happens to your data after your death.

From your customer account, the "My personal data" page lets you get a copy of your data. To exercise your other rights, write to us at donnees-personnelles@maxdaumin.com. We reply within one month; we may ask for proof of identity if in doubt.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr/fr/plaintes.