Privacy Policy

1. Who We Are

Maison Tulsi, operated by Tulsi Ankaiah in Cherbourg-en-Cotentin, Normandy, France, is the data controller for personal data collected through shop.maisontulsi.com. You can reach us at contact@maisontulsi.com with any question about your data.

2. What Data We Collect

Contact and account details: name, email address, phone number, delivery and billing address, and your account password (stored securely, hashed — we never see it in plain text).
Order information: the products you buy, your order history, and messages related to your orders.
Payment information: handled directly by Stripe, our payment processor — we do not store your full card number or security code.
Technical data: your language preference, session identifiers, and the basic technical information needed to keep the Site, your cart and your login working.
Anything you send us voluntarily, for example through the contact form.

3. Why We Use Your Data

To process and deliver your orders, and to communicate with you about them.
To manage your account, if you create one.
To respond to messages you send us.
To meet our legal obligations, including accounting, tax and consumer-protection requirements.
With your consent, to send you offers or a newsletter — you can withdraw this consent at any time.

4. Legal Basis for Processing

We process your data because it is necessary to perform our contract with you (fulfilling your order), to comply with our legal obligations, on the basis of your consent (for optional marketing), or because we have a legitimate interest in running and keeping the Site secure.

5. Who We Share Data With

We share only the data necessary with trusted providers who help us run the Site and fulfil orders: our payment processor Stripe, our hosting provider, and our delivery carriers. These providers may only use your data to provide their service to us, and are bound by data-protection obligations of their own.

We do not sell your personal data to third parties.

6. How Long We Keep Your Data

We keep order and account data for as long as your account is active, and afterwards for as long as required by our legal, accounting and tax obligations (generally up to 10 years for invoicing records under French law). Contact-form messages are kept only as long as needed to handle your enquiry.

7. Your Rights

Under the GDPR you have the right to access, correct, delete or export your personal data, to restrict or object to certain processing, and to withdraw consent at any time where processing relies on it. To exercise any of these rights, contact us at contact@maisontulsi.com. If you are not satisfied with our response, you may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

8. Cookies

The Site uses a small number of cookies, described in full in our Cookie Policy, to keep you signed in and remember your cart, language preference, and Site security.

9. Security

We take reasonable technical and organisational measures to protect your personal data, including encrypted payment processing through Stripe and secure password storage. No online service can guarantee perfect security, but we work continuously to keep your information protected.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The version published on the Site applies to your use of it.