Privacy Policy

Last updated: 11 October 2026

This notice explains how the personal data of visitors to maisonbourelly.com, and of those who request an appointment, are processed in accordance with Regulation (EU) 2016/679 («GDPR») and Italian Legislative Decree 196/2003 as amended.

1. Data controller

Nora Bourelly — Maison Bourelly, Piazza Camillo de Meis 1, Milan, Italy — VAT no. 12695610969
Email: maisonbourelly@gmail.com — Telephone: +39 389 491 2933

2. Data processed

• Data you provide through the «Private Appointment» form: first and last name, email, telephone, preferred language, purpose and place of the meeting, city of residence (if given), requested date and time, any notes.
• Data you provide when contacting the Maison by email, telephone or WhatsApp.
• Technical browsing data collected by the hosting provider’s systems (such as IP address and access logs), required for the operation and security of the website.

The website uses no profiling tools and no analytics or marketing cookies.

3. Purposes and legal basis

• Handling appointment and information requests, contacting you and confirming the meeting: steps taken at your request prior to entering into a contract (Art. 6.1.b GDPR).
• Ensuring the operation and security of the website: the controller’s legitimate interest (Art. 6.1.f GDPR).
• Complying with legal obligations, where applicable (Art. 6.1.c GDPR).

4. Methods and retention

Data are processed electronically, with appropriate measures to protect their confidentiality. Appointment request data are kept for as long as needed to handle the request and, if a relationship with the Maison follows, for its duration and the periods required by law. Requests that do not lead to a relationship are deleted within 12 months.

5. Recipients

Data are not disclosed to the public. They may be processed, as data processors, by the providers of the technical services the website requires: the hosting service, which also handles the sending of requests (Hostinger International Ltd.), and the email service used by the Maison (Google). These providers may process data outside the European Union, on the basis of the safeguards provided by the GDPR (adequacy decisions, including the EU-U.S. Data Privacy Framework, or standard contractual clauses).

If you choose to display the map on the Contact page, content from Google Maps (Google Ireland Limited) is loaded and is subject to Google’s privacy policy.

6. Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing, portability, or object to processing, by writing to maisonbourelly@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

7. Provision of data

Providing the data requested in the form is necessary to handle your appointment request; without it, the request cannot be processed.

8. Cookies

For information on cookies, please see the Cookie Policy.