Privacy Policy

Last updated: 26 August 2026

1. Who is responsible for your data

The data controller for this store, Maison Favero, is:

ECDX LLC
12/F, Unit 1203, 8 Hennessy Road
Wan Chai
Hong Kong
Phone: +1 (914) 904-7796
Email: ecdxllc@gmail.com

2. What we collect

When you place an order or write to us, we collect:

your name, delivery address and billing address;
your email address and phone number;
the details of your order and your order history;
the content of the messages you send us;
technical data such as your IP address, browser type and the pages you visit.

Payment card details are entered directly with our payment provider. They never reach our systems.

3. Why we collect it

To take, prepare and deliver your order (performance of the contract).
To answer your questions and handle returns and warranty claims.
To prevent fraud and secure the store (legitimate interest).
To meet our accounting and tax obligations (legal obligation).
To send you news and offers, only if you have agreed to it (consent). You can unsubscribe at any time from the link in each email.

4. Who receives it

We share your data only with the service providers we need to run the store, and each receives only what it needs:

Shopify, which hosts this store and processes orders;
our payment provider, to process your payment;
our carriers, to deliver your parcel;
our email provider, to send order confirmations and answer you.

Some of these providers may process data outside the European Union. When they do, the transfer is covered by appropriate safeguards such as the European Commission's standard contractual clauses. We never sell your personal data.

5. How long we keep it

Order and invoice data: 10 years, as required by accounting law.
Customer account data: for as long as your account is active, then 3 years after your last order.
Messages and customer service exchanges: 3 years.
Marketing consent: until you withdraw it, and at most 3 years after your last contact with us.

6. Your rights

Under the General Data Protection Regulation (GDPR) you may:

ask for a copy of the data we hold about you;
ask us to correct it;
ask us to delete it, where the law allows;
ask us to limit how we use it;
receive it in a portable format;
object to its use for marketing at any time;
withdraw your consent at any time.

To exercise any of these rights, write to ecdxllc@gmail.com. We answer within 30 days. You may also lodge a complaint with the data protection authority of the country where you live.

7. Security

This store is served over HTTPS. Access to your data is restricted to the people who need it to process your order. Our providers apply their own security measures, including encryption of data in transit and at rest.