Privacy Policy

01Who is responsible for your data

The data controller is Rm Ecom - Luxury Bay, 18-26 rue Goubet, 75019 Paris, France, publisher of luxury-bay.com.

For any question about your personal data, write to contact@luxury-bay.com. We are not required to appoint a Data Protection Officer; this address reaches the person in charge of data protection at Luxury Bay.

02What data we collect

Reading Luxury Bay does not require an account. Depending on how you use the site, we process:

• Technical data: IP address, browser and device type, pages requested, date and time, collected automatically by our host to deliver and secure the site.
• Audience data, only if you accept it: a cookie identifier, pages viewed, approximate location derived from your IP address, device and browser information.
• Messages you send us: your name, email address, phone number and the content of your message when you write to us by email, through the live chat or through a contact form.
• Business contact data: name, company, role and contact details of the representatives of our partners and advertisers.
• Your cookie choices and, if you exercise your rights, the details of your request.

Read our cookie policy

03Why we use your data and on what legal basis

The table below lists each purpose, the data involved, its legal basis and how long we keep it. When a retention period ends, the data is deleted or irreversibly anonymised. We never collect sensitive data, and providing data is never required to read the site.

04Who receives your data

Your data is only accessible to the Luxury Bay team members who need it, and to public authorities when the law requires it. We never sell, rent or trade it.

We also rely on the following providers, bound by a data processing agreement (Art. 28 GDPR):

• Netlify, Inc. (United States): website hosting.
• Google Ireland Limited: audience measurement, only with your consent.
• Crisp IM SAS (France): live chat.
• EmailJS: delivery of messages sent through our contact forms.
• Our email service provider, to receive and answer your emails.

05Social media content

When you choose to display Instagram content, Meta Platforms Ireland Limited collects data about you. For that collection only, Luxury Bay and Meta are joint controllers (Court of Justice of the EU, Fashion ID, C-40/17). Meta alone decides what it does with the data afterwards, as described in its privacy policy.

Instagram privacy policy

06Transfers outside the European Union

Some providers (Netlify, Google, Meta) may process data in the United States. These transfers rely on the European Commission adequacy decision for the EU-U.S. Data Privacy Framework and, where applicable, on the standard contractual clauses adopted by the European Commission. You can ask us for a copy of these safeguards at contact@luxury-bay.com.

07Your rights

Under the GDPR and the French Data Protection Act, you have the right to:

• access your data and receive a copy of it (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict its processing (Art. 18);
• receive the data you gave us in a portable format (Art. 20);
• object at any time to processing based on our legitimate interest (Art. 21);
• withdraw your consent at any time, without affecting the processing carried out before;
• give instructions on what happens to your data after your death (Art. 85 of the French Data Protection Act).

File a complaint with the CNILFind your national authority

08How to exercise your rights

Write to contact@luxury-bay.com. It is free. We answer within one month; this period can be extended by two months for complex requests, in which case we tell you why. We only ask for proof of identity if we have a reasonable doubt about who you are.

You can also lodge a complaint with the CNIL, the French supervisory authority, or with the authority of the EU country where you live or work.

09How we protect your data

The site is only served over HTTPS. Access to personal data is limited to the people who need it, our providers are bound by confidentiality and security obligations, and we keep the data we hold to a minimum. If a breach is likely to put your rights at risk, we notify the CNIL within 72 hours and inform you when the law requires it.

10Children

Luxury Bay is not intended for children under 15. We do not knowingly collect their data. If you believe a child has sent us personal data, contact us and we will delete it.

11Automated decisions

We do not make any decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.

12California residents

We do not sell personal information and we honor the Global Privacy Control signal. Your rights under the CCPA / CPRA are detailed in our cookie policy, and you can opt out at any time with the "Do Not Sell or Share My Personal Information" link at the bottom of every page.

Cookie policy and California rights

13Changes to this policy

We may update this policy to reflect changes to the site or to the law. The date at the top of the page shows the latest version. If a change significantly affects how we use your data, we will inform you on the site and, where required, ask for your consent again.