Privacy Policy

The data controller for the personal data described in this policy is [LEGAL ENTITY NAME — e.g. Le Maison S.L.], registered at [REGISTERED COMPANY ADDRESS] (“Le Maison”, “we”, “us”). Le Maison operates the platform available at lemaisonprivee.co and its mobile application.

If you have any question about this policy or how your data is handled, contact our data protection contact at [DPO / PRIVACY CONTACT EMAIL].

We only collect data that is necessary to run the platform. This includes:

• Account and identity data — the email address you sign in with, your display name, profile photo, bio, location and country, and whether you are joining as a brand or a creator.
• Waitlist and application data — the information you submit when applying for access, such as company name and industry (brands) or social handles, niche, and follower counts (creators), plus the status of your application. The email address you submit is also passed to our email platforms, Loops and Beehiiv (see Subprocessors).
• Payout and address data — for creators who receive payments, the country, city, postal code, street address, and phone number needed to process payouts, and the connection to your Stripe Connect account.
• Performance and portfolio data — analytics, engagement rates, and portfolio links you upload or connect to showcase your work to brands.
• Campaign, deal and calendar data — the campaigns, offers, deliverables, content submissions, and scheduling information created as part of a collaboration between a brand and a creator.
• Messages — the content of chat messages you exchange with other members through the platform, including any files or links you share in a conversation.
• Payment and billing records — campaign budgets, platform fees, payout amounts, and transaction status, processed on our behalf by Stripe.
• Ratings and referrals — ratings left by a brand after a completed collaboration, and referral codes used to invite other members.
• Technical data — login timestamps, device and browser information, and basic usage logs needed to keep the platform secure and working correctly.

Under the EU General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Performance of a contract — to create and run your account, evaluate your waitlist application, and operate campaigns, deals, messaging, and payments between members.
• Legitimate interest — to keep the platform secure, prevent fraud and abuse, moderate reported content, and improve the service, balanced against your rights.
• Consent — where we ask for it separately, such as optional marketing communications.
• Legal obligation — to keep financial and billing records for the periods required by tax and accounting law.

• Reviewing waitlist applications and granting or denying access to the platform.
• Operating your account, profile, and the magic-link sign-in used to authenticate you.
• Matching brands and creators, and enabling campaigns, offers, deals, and messaging.
• Processing platform payments and creator payouts through Stripe and Stripe Connect.
• Sending transactional notifications and emails about your account and activity.
• Adding people who apply for access to our email platforms (Loops and Beehiiv), so we can send them a welcome email and email updates about their application and Le Maison.
• Investigating reports of abusive content or behaviour and enforcing our Terms of Service.
• Complying with our legal, tax, and accounting obligations.

We share data with a small number of carefully selected service providers, each bound by a data processing agreement:

Loops and Beehiiv are used only for the email address collected through the waitlist form; they do not receive your name, application answers, messages, or payment data.

Separately, to display the app, your device connects directly to two content providers: Google Fonts (Google), which serves the typefaces used across Le Maison, and Unsplash, which hosts placeholder images such as the default cover shown on creator profiles without a cover photo. These providers receive the technical data any web request includes, such as your IP address and browser details, but no account or application data from us.

Le Maison is a marketplace, so some data is visible to other approved members by design. Your profile (name, photo, bio, and public portfolio) is visible to approved brands and creators. When you engage in a campaign or deal, the relevant brand and creator can see each other's messages, deliverables, and deal details for that collaboration. We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

Our core infrastructure is hosted in the European Union. Where a subprocessor transfers data outside the EU/EEA (for example, certain Stripe, Resend, Loops, or Beehiiv operations), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

• Waitlist applications that are rejected are retained for a limited period and then deleted.
• Account and profile data is retained for as long as your account is active.
• Email addresses held by our email platforms (Loops and Beehiiv) are kept until you unsubscribe using the link in our emails or ask us to remove them at [DPO / PRIVACY CONTACT EMAIL].
• Messages and deal records are retained for as long as necessary to support the collaboration and resolve any disputes.
• Financial, billing, and payout records are retained for the period required by applicable tax and accounting law, even after an account is deleted (see Account deletion).

We use industry-standard technical and organisational measures to protect your data, including encryption in transit, access controls, and role-based restrictions on internal systems. No system is perfectly secure, and we continuously work to improve our safeguards.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data, subject to the retention rules described above.
• Port your data to another service in a structured, machine-readable format.
• Object to processing based on legitimate interest, and withdraw consent at any time where processing is based on consent.
• Restrict processing in certain circumstances.

To exercise any of these rights, contact us at [DPO / PRIVACY CONTACT EMAIL]. You also have the right to lodge a complaint with your local data protection authority.

Le Maison is intended solely for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will delete it promptly.

We may update this policy from time to time to reflect changes to the platform or applicable law. We will update the “Last updated” date above, and where a change is material we will notify you through the app or by email.

Questions about this policy or your data can be sent to [PRIVACY CONTACT EMAIL].