Charmsmaybe
Legal & Client Discretion

Privacy Policy & Data Protection

Effective: January 1, 2026•Last Revised: November 2026•Version 3.4

At Charmsmaybe Atelier, client discretion and confidentiality are foundational to our Place Vendôme goldsmithing heritage. This Privacy Policy details with absolute transparency how we safeguard, process, and honor the personal data you entrust to our care.

1. Maison Commitment & Principles

Charmsmaybe Atelier SAS (“Charmsmaybe”, “we”, “us”, or “our”) operates under strict European data governance standards (Regulation (EU) 2016/679 - GDPR) as well as the California Consumer Privacy Act (CCPA/CPRA). We adhere to four uncompromised principles:

  • Data Minimization: We request only the precise information necessary to craft, hallmark, insure, and deliver your fine creations.
  • Absolute Discretion: All client orders, custom engravings, and private salon appointments are strictly confidential.
  • Zero Monetization: We never sell, lease, or syndicate your personal data to marketing exchanges or third-party advertisers.
  • Client Sovereignty: You retain complete control to review, modify, export, or permanently erase your personal records at any time.

2. Information We Collect

Depending on your engagement with our digital catalogue and Paris salon, we may collect the following categories of information:

Client Identity & Contact Information

Full name, title, physical delivery address, billing address, email address, and mobile phone number (utilized solely for insured courier dispatch and delivery confirmations).

Atelier Measurements & Customization Notes

Specific wrist/finger circumference, custom talisman engraving scripts, gemstone selection preferences, and bespoke design briefs formulated during private salon appointments.

Secure Payment Authorization Data

All financial transactions are tokenized and processed via PCI-DSS Level 1 certified payment infrastructure. The Maison never stores raw credit card numbers or security CVV codes on its internal servers.

3. How We Use Your Data

We utilize your personal information exclusively for lawful operational purposes:

  • Artisan Fulfillment: Hand-crafting, resizing, hallmarking, and issuing individualized certificates of authenticity for your jewelry.
  • Secured Armored Delivery: Coordinating temperature-controlled, signature-verified transit with certified armored logistics partners.
  • Lifetime Atelier Service: Maintaining your serial numbers in our provenance ledger to honor your two-year artisan warranty and complimentary lifetime cleaning.
  • Legal Compliance: Fulfilling anti-money laundering (AML) and precious metal tax documentation mandated under French and international customs law.

4. Zero Data Selling Guarantee

We state unequivocally: Charmsmaybe does not sell, rent, trade, or monetize your personal information to third parties.

We do not participate in cross-context behavioral ad networks, data brokers, or marketing syndicates. Your order history and bespoke communications remain strictly between you and our Place Vendôme atelier.

5. Cookies & Local Storage

Our digital storefront is architected with modern privacy engineering:

  • Client-Side Local Storage: Your Wishlist (saved items) and Recently Viewed creations are stored entirely within your device’s local web browser storage (`localStorage`). This data is never harvested or transmitted to our backend servers.
  • Essential Security Cookies: We utilize minimal, strictly essential session tokens provided by Cloudflare Workers to prevent DDoS attacks, maintain edge security, and protect cart integrity.
  • No Invasive Third-Party Trackers: We do not deploy invasive third-party analytics pixels or canvas fingerprinters.

6. Armored Data Security & TLS 1.3

All digital communications between your browser and Charmsmaybe are encrypted using TLS 1.3 with modern cipher suites (AES-256-GCM / ChaCha20-Poly1305). Our Cloudflare Workers edge nodes feature automated DDoS mitigation and strict Content Security Policies (CSP). Stored client records in Sanity CMS are hosted in SOC 2 Type II certified data centers with encrypted backups.

7. Your Privacy Rights (GDPR & CCPA)

Under the European General Data Protection Regulation and California Consumer Privacy Act, you are entitled to exercise the following rights without penalty or discrimination:

Right to Access & Portability

Request a machine-readable copy of all personal records associated with your account.

Right to Rectification

Correct any inaccurate or obsolete personal details, addresses, or contact information.

Right to Erasure (Forgotten)

Request the complete deletion of your profile data, subject to statutory tax and hallmark retention periods.

Right to Object & Restrict

Opt out of any marketing or seasonal private salon communications at a single click.

8. Data Protection Officer (DPO) Contact

To submit a formal subject access request (SAR), exercise your privacy rights, or inquire about our data protection standards, please contact our designated Data Protection Officer:

Electronic Inquiriesprivacy@charmsmaybe.com
Maison Headquarters & DPO
Charmsmaybe Atelier SAS
Attn: Data Protection Officer
12 Place Vendôme, 75001 Paris, France

We respond to all verified privacy requests within 30 days without fee.