Privacy Policy

1. Who we are

Maison Tuileries Company ("Maison Tuileries", "we", "us" or "our") operates maison-tuileries.com and the digital services connected to it, including Click & Collect ordering, customer accounts, masterclass registrations, contact/event enquiries and newsletter subscriptions.

Controller: Maison Tuileries Company
Address: Building 2194, Ibrahim Al Jaffali Street, Al Awali District, Makkah 24372, Saudi Arabia
General email: info@maison-tuileries.com
Privacy and data-rights requests: webmaster@maison-tuileries.com
Phone: +966 58 239 5059

This policy explains which personal data we process, the purposes and legal grounds for that processing, how long data is retained, who may receive it and how you can exercise your rights.

2. Personal data we collect

A. Click & Collect orders

When you place an order, we may process:

• first name and last name;
• email address;
• telephone number;
• the products, variants and quantities ordered;
• order price and total;
• requested pickup time;
• optional order comments;
• order, fulfilment and payment status;
• records showing when and which version of our Terms you accepted;
• communications relating to confirming, preparing, changing or completing your order.

The payment methods available for an order are presented to you before confirmation. Depending on the ordering channel, payment may be made at collection or through an authorised payment service or partner.

B. Customer account and email verification

Maison Tuileries uses passwordless email verification. We send a six-digit one-time code to the email address you provide. We do not ask you to create a password.

When a new customer successfully verifies their email for the first time, the system creates a Maison Tuileries customer account linked to that verified email. The account allows the customer to authenticate again and access their order history.

We may process technical security data necessary to protect your session and to apply reasonable limits on verification attempts, so the service cannot be misused. This process is not designed to store your IP address or device information.

C. Masterclass registration

When you register for a masterclass, we process:

• first name and last name;
• email address;
• telephone number;
• number of seats;
• masterclass/session selected;
• registration and payment status;
• communications and operational history related to the registration.

The applicable payment method and payment deadline are communicated during or after registration. Where bank transfer is required, the payment instructions are provided after registration.

D. Newsletter

If you choose to subscribe to the Maison Tuileries newsletter, we store:

• your email address;
• subscription status (ACTIVE / UNSUBSCRIBED);
• consent date and time;
• consent source;
• consent wording/version;
• selected language/locale;
• unsubscribe date where applicable.

Newsletter consent is separate from ordering, account creation and masterclass registration. It is optional and is not pre-selected.

E. Contact and event enquiries

When you contact us using a website form, we may process your name, email address and the message/information you submit. These enquiries are routed to the relevant Maison Tuileries mailbox and may therefore remain in our business email system for the retention period described below.

F. Cookies and similar technologies

We use cookies and similar technologies that are necessary for the operation of the website, including secure sign-in, language preferences and continuity of the shopping cart. This storage does not contain your name, email, phone number or payment details.

We also use Google Analytics, through Google Tag Manager, to understand in an aggregated way how the website is used — for example which pages are visited and from which type of device — so we can improve it. We do not use this information to identify you, and we do not use advertising cookies.

3. Why we use your data

We process personal data only for legitimate and defined purposes, including:

• taking, validating, confirming and fulfilling an order;
• contacting you about your order or pickup;
• creating and maintaining the customer identity needed to authenticate you and provide order history;
• registering and administering masterclasses;
• receiving and reconciling masterclass payment status;
• replying to contact, event and customer-service enquiries;
• sending marketing/newsletter emails only where the required consent has been obtained;
• protecting accounts and services against fraud, abuse and unauthorised access;
• maintaining financial, tax, accounting and other records required by applicable law;
• handling complaints, disputes, product-safety issues and legal claims.

The legal basis relied on for each activity depends on the purpose and applicable Saudi law. Depending on the processing, this may include steps necessary to enter into or perform a contract, compliance with a legal obligation, a legitimate interest recognised by applicable law, or your consent where consent is required, including direct marketing.

4. Mandatory and optional information

Information marked as required in an order or registration form is necessary to process that request. If you do not provide required information, we may be unable to complete the order, verify your identity or register you for a masterclass.

Optional fields, such as an order comment or newsletter subscription, are voluntary.

5. Who may receive your data

We do not sell or rent customer personal data.

Personal data may be processed by authorised Maison Tuileries personnel and by service providers that support hosting, communications, website audience measurement, payment, order fulfilment, delivery, professional advisory or other necessary business operations, subject to appropriate confidentiality and data-protection obligations.

We may also disclose information where required by applicable law or a valid request from a competent authority.

6. International processing and transfers

Where personal data is transferred or processed outside the Kingdom of Saudi Arabia, Maison Tuileries will apply the safeguards required by applicable Saudi data-protection law.

7. How long we keep data

We retain personal data only for as long as necessary for the purposes described in this policy and to meet applicable legal, accounting, tax and regulatory obligations, including:

• Orders, invoices/tax records, transaction records and financially relevant masterclass records: retained for at least 6 years where required for Saudi tax/accounting record-keeping, or longer where another legal obligation or active dispute requires it.
• Customer profile/account information: retained while the account is active or until a valid deletion request is actioned, except data that must still be retained for legal, tax, fraud-prevention, dispute or transaction-record purposes.
• Contact and event enquiries: normally retained for up to 12 months after the last meaningful interaction, unless the enquiry becomes part of a contractual relationship, complaint, dispute or legal requirement requiring longer retention.
• Newsletter subscription: retained while you remain subscribed. After unsubscribe, only the minimum evidence needed to demonstrate withdrawal and avoid accidental marketing reactivation is retained.
• Verification records: retained only for the short period needed to complete and secure the verification process, then removed once no longer needed.
• Security and correspondence records: retained only for as long as necessary for operational and security purposes, or longer where necessary to investigate abuse, a security incident or a legal claim.

When retention is no longer necessary, data is deleted or irreversibly anonymised where appropriate.

8. Newsletter and direct marketing

Maison Tuileries sends marketing/newsletter communications only where the required consent has been obtained and recorded.

You may withdraw marketing consent at any time. When a dedicated emailing provider is activated, every marketing email must include an easy unsubscribe mechanism. You may also request unsubscribe by emailing webmaster@maison-tuileries.com.

Withdrawing newsletter consent does not affect your ability to place orders, use your account or register for masterclasses.

9. Cookies and similar storage

We use the following:

We do not use advertising cookies. Audience-measurement cookies help us improve the website. You can refuse them at any time on our Cookies page (linked at the bottom of every page); you can also block or delete cookies in your browser settings. The website keeps working normally either way.

10. Your personal-data rights

Subject to the Saudi Personal Data Protection Law (PDPL), its Implementing Regulations and applicable exceptions, you may have rights including the right to:

• be informed about the processing of your personal data;
• access personal data held about you;
• obtain a copy where applicable;
• request correction or completion of inaccurate data;
• request destruction/deletion where the conditions for deletion are met;
• withdraw consent where processing is based on consent, including newsletter/direct marketing consent.

To exercise your rights, email webmaster@maison-tuileries.com. We may need to verify your identity before acting on a request.

Deletion of an account does not necessarily require Maison Tuileries to delete records that must be kept under tax, accounting, consumer-protection, security or other mandatory legal obligations.

11. Security

We apply reasonable technical and organisational measures designed to protect personal data, including restricting staff access to what is authorised, secure passwordless sign-in and controls intended to prevent abuse of the verification process.

No internet service is completely risk-free. If a personal-data incident occurs, Maison Tuileries will assess and handle it in accordance with applicable Saudi legal requirements.

12. Children and legal capacity

Our ordinary online ordering service is intended for customers with legal capacity to enter into the relevant transaction. We do not intentionally use the website to profile children or send them direct marketing.

13. External links

Our website may link to third-party services such as Google Reviews, social networks or other external pages. Once you choose to follow an external link, that third party's own privacy practices apply.

14. Complaints about privacy

For privacy questions or complaints, email webmaster@maison-tuileries.com. This does not affect any right you may have to complain to or contact a competent Saudi authority.

15. Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change. The current version and update date will always be published on this page.