Maison Affluency — Privacy & Cookie Policy

1. Overview & Data Architecture

At Maison Affluency, we are committed to handling your personal and corporate data with complete transparency. This policy outlines how we collect, process, and protect your information across our public website, our premium PWA standalone applications, and our dedicated /trade/* business workspaces.

As a Singapore-headquartered entity serving a global clientele, we operate under a strict Zero-Pre-Consent model. No non-essential tracking pixels, analytics, or third-party behavioral scripts will fire within your browser or device until you grant explicit, affirmative consent via our preference management center.

2. Granular Cookie & Tracking Infrastructure

We classify our automated data collection tokens into four distinct tiers. You can modify or withdraw your preferences at any time by clicking the permanent Privacy Shield Icon in the bottom-left corner of your screen.

Note: In compliance with EU GDPR Article 7(1), every modification of your tracking preferences is securely logged in an immutable, server-side ledger with an encrypted device fingerprint, timestamp, and policy version code to serve as our legally binding audit trail.

3. Trade Registration & Anti-Fraud Gating

When a corporate entity applies for wholesale access via our Trade Registration Form, we enforce stringent server-side verification protocols to protect our platform integrity:

• Data Collected: Registered Corporate Name, Legal Operating Address, UK/EU VAT numbers, local tax registrations (e.g., Singapore UEN), and identity verification documents (e.g., passports, trade licences).
• Automated Screening & Human Verification: Uploaded files undergo binary signature verification and cryptographic SHA-256 fingerprinting to detect duplicate or altered records. An AI sub-routine screens metadata for manipulation flags; however, no automated decision-making occurs. All accounts are securely held in a Pending_Human_Review queue until approved by an administrator.
• Strict Deletion Windows: If a trade application is rejected by our compliance team, all uploaded verification documents (passports, licences) are permanently and automatically deleted from our cloud storage arrays after exactly 14 days. Only an anonymised historical decision record is retained.

4. International Cross-Border Transfers & Taxation

Because Maison Affluency manages logistics from its Singapore hub using a Delivered Duty Paid (DDP) clearance model, your transaction and address data are handled under specific operational guardrails:

• Third-Party Processing: To calculate decimal-accurate localized checkout taxes, your input VAT or corporate tax numbers are verified in real-time using secure aggregators accessing the EU VIES and UK HMRC API networks.
• Landed Cost Data: Line-item descriptions and matched HS6 Customs Codes are securely transmitted to our partner carriers (including DHL Express, FedEx, and UPS) to process cross-border clearance and statutory customs manifests on your behalf.
• Data Hosting: Our database architecture utilizes secure global nodes. Transfers of European citizen data to non-EU cloud environments are protected via Standard Contractual Clauses (SCCs) embedded within our service level contracts.

5. Data Retention & Your Legal Rights

• Retention Limits: Marketing funnel tokens and abandoned cart tracking records are retained for a maximum of 180 days before automatic expiration. Confirmed transactional invoice data is retained for a mandatory 7-year period to satisfy Singapore corporate accounting and tax law regulations.
• Your Rights: Regardless of your geographic location, Maison Affluency extends fundamental privacy rights to all users. You have the right to request a complete export of your data profile, ask for the rectification of inaccurate information, or invoke your right to erasure ("Right to be Forgotten") for non-tax records.

You can submit a formal request below, or write to privacy@maisonaffluency.com. Every request is logged with a statutory 30-day deadline and answered by our compliance desk.