Privacy policy

Last updated: 22 October 2026

Maison Mata operates this store and website, including the related information, content, features, tools, products and services, to provide you with a curated shopping experience (the “Services”). Maison Mata uses Shopify, which enables us to provide the Services to you. This privacy policy describes how we collect, use and disclose your personal data when you visit or use the Services, make a purchase or another transaction through them, or communicate with us. If there is a conflict with our terms of service, this policy takes precedence for the collection, processing and disclosure of your personal data.

Please read this policy carefully. By using or accessing the Services, you acknowledge that you have read this policy and understand the collection, use and disclosure of your information described in it.

Maison Mata is operated by PT MAISON MATA GROUP, an Indonesian company registered under Business Registration Number (NIB) 0220408832355. Our address is Jalan Pura Batu Mejan 32, Canggu, Kuta Utara, Badung, Bali, Indonesia. In this policy, “Maison Mata”, “we”, “us” and “our” refer to PT MAISON MATA GROUP.

Personal data we collect or process

By “personal data”, we mean information that identifies you or can reasonably be linked to you or another person. This does not include information collected anonymously or de-identified so that it cannot identify you or reasonably be linked to you. Depending on how you use the Services, where you live and what applicable law permits or requires, we may collect or process the following categories, including inferences drawn from this data:

  • Contact details: name, address, billing address, shipping address, telephone number and email address.
  • Financial information: credit or debit card and financial account numbers, payment card and financial account information, transaction details, payment method, payment confirmation and other payment information.
  • Account information: username, password, security questions, preferences and settings.
  • Transaction information: items viewed, added to your basket or wishlist, purchased, returned, exchanged or cancelled, as well as past transactions.
  • Communications with us: information you provide, for example in a support request.
  • Device information: device, browser, network connection, IP address and other unique identifiers.
  • Usage information: interactions with the Services, including how and when you use or browse them.

Sources of personal data

We may collect personal data from the following sources:

  • Directly from you, including when you create an account, visit or use the Services, communicate with us or otherwise provide your data.
  • Automatically through the Services, including from your device when you use our products or services, visit our websites, and through cookies and similar technologies.
  • From our service providers, including when we engage them to provide certain technologies and they collect or process your data on our behalf.
  • From our partners or other third parties.

How we use your personal data

Depending on your interactions with us and the Services you use, we may use personal data for the following purposes:

  • Providing, personalising and improving the Services. We use your data to provide the Services: fulfil our contract with you, process payments, prepare orders, remember your preferences and items of interest, send account notifications, process purchases, returns, exchanges and other transactions, create and manage your account, arrange delivery, facilitate returns and exchanges, enable you to post reviews and personalise your experience, including by recommending products related to your purchases. This may include using your data to better tailor and improve the Services.
  • Marketing and advertising. We use your data for marketing and promotional purposes: sending marketing, advertising or promotional communications by email, text message or post, and displaying online advertisements for products or services on the Services or other websites. These advertisements may be based on your previous purchases, items in your basket and other activity on the Services.
  • Security and fraud prevention. We use your data to authenticate your account, secure payments and purchases, detect, investigate or address potentially fraudulent, illegal, dangerous or malicious activity, protect public safety and keep our services secure. If you create an account, you are responsible for protecting your login details. We strongly recommend that you do not share your username, password or other access information.
  • Communicating with you. We use your data to assist you, respond to your requests, provide effective services and maintain our business relationship.
  • Legal reasons. We use your data to comply with applicable law or respond to valid legal process, including requests from public authorities or law enforcement, investigate or participate in evidence disclosure, potential or ongoing litigation and other adversarial proceedings, and enforce our terms or policies or investigate possible violations.

Disclosure of personal data

In certain circumstances, we may disclose your data to third parties for legitimate purposes, subject to this policy. This may include:

  • Shopify, vendors and other third parties that work on our behalf, for example in IT management, payments, data analysis, customer support, cloud storage, order fulfilment and shipping.
  • Business and marketing partners that provide marketing and advertising services. For example, we use Shopify to enable personalised advertising with third-party services based on your online activity across different merchants and websites. These partners use your information under their own privacy policies. Depending on where you live, you may have the right to ask us not to share your information for targeted advertising and marketing based on this activity. You can exercise your right to opt out of these uses here.
  • Third parties to whom you ask us to send certain information, or for whom you give your consent, for example to ship products or when using social media widgets or integrated logins.
  • Our affiliates or other entities in our group.
  • A business transaction such as a merger or bankruptcy, compliance with legal obligations, including subpoenas, search warrants and similar requests, enforcement of terms or policies, and the protection or defence of the Services, our rights and those of our users or other people.

Optical services and customer records

When you use our optical services, we may collect your prescription, eye exam information and the measurements needed to prepare your glasses. We keep individual customer records in Notion and Shopify to manage your optical orders and follow-up care.

We use this information for your optical services and share the details needed to prepare your lenses with the laboratory handling the order. Notion and Shopify also process information as providers of the systems used to keep these records.

We do not sell your prescriptions or eye exam information and do not use them for marketing or targeted advertising. The marketing and advertising uses described elsewhere in this policy do not apply to this optical information.

You can contact us at hello@maisonmata.com or on WhatsApp at +62 812 3866 0613 to request access to, correction of or deletion of your records. These requests remain subject to applicable rights and any legal retention obligations.

Our relationship with Shopify

The Services are hosted by Shopify, which collects and processes data about your access to and use of the Services to provide and improve them. Information you submit to the Services will be sent to Shopify and shared with Shopify and third parties that may be located in countries other than your country of residence, to provide and improve the Services. To protect, develop and improve our business, we also use certain enhanced Shopify features that incorporate data from your interactions with our store, other merchants and Shopify. To provide these features, Shopify may use personal data collected from these interactions. In this context, Shopify is responsible for processing your data, including responding to your requests to exercise your rights for these purposes. To learn more about how Shopify uses your data and any rights you may have, see Shopify’s Consumer Privacy Policy. Depending on where you live, you may exercise certain data rights through the Shopify Privacy Portal.

Third-party websites and links

The Services may contain links to websites or platforms operated by third parties. If you follow a link to a website that is neither affiliated with us nor under our control, review its privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy or security of these websites, including the accuracy, completeness or reliability of the information they contain. Information posted in public or semi-public spaces, including on third-party social media platforms, may be visible to other users of the Services or those platforms, without limits on its use by us or a third party. Including a link does not, by itself, amount to an endorsement of the content of these platforms or their owners or operators, unless stated in the Services.

Children’s data

Our online store is intended for adults. Our optical services may require records about children, including their prescription and information needed to prepare their glasses. These records fall within the “Optical services and customer records” section above. A parent or legal representative can contact us using the details below about a child’s records or to request access, correction or deletion, subject to applicable law.

Security and retention of your information

No security measure is perfect or impenetrable, and we cannot guarantee “perfect security”. Information you send to us may also not be secure during transmission. We recommend that you do not use unsecured channels to send sensitive or confidential information.

How long we retain your data depends on several factors, including the need to maintain your account, provide the Services, comply with legal obligations, resolve disputes or enforce other agreements and policies.

Your rights and choices

Depending on where you live, you may have some or all of the following rights regarding your personal data. These rights are not absolute, may apply only in certain circumstances and, in some cases, we may refuse a request where the law allows.

  • Right of access and information. You may have the right to request access to the personal data we hold about you.
  • Right to deletion. You may have the right to request deletion of the personal data we retain about you.
  • Right to correction. You may have the right to request correction of inaccurate personal data we retain about you.
  • Right to portability. In certain circumstances and subject to certain exceptions, you may have the right to obtain a copy of your data and request its transfer to a third party.
  • Right to opt out of sale or sharing for targeted advertising. Depending on where you live, you may have the right to opt out of the “sale” or “sharing” of your data, or its processing for purposes considered “targeted advertising” under applicable laws. You can exercise this right here. If you visit our website with the Global Privacy Control signal enabled, we will automatically treat it, depending on your location, as an opt-out request for the device and browser you are using. If we can associate the sending device with a Shopify account, the request will also apply to that account. To learn more: https://globalprivacycontrol.org/. Apart from Global Privacy Control, we do not recognise other “Do Not Track” signals sent by your browser or device.
  • Communication preferences. We may send promotional emails, which you can unsubscribe from at any time using the link in our messages. After you unsubscribe, we may continue sending non-promotional emails, for example about your account or orders.

If you live in the United Kingdom or the European Economic Area, subject to exceptions and limitations under local law, you may also exercise the following rights:

  • Objection and restriction of processing: you may have the right to ask us to stop or restrict processing your data for certain purposes.
  • Withdrawal of consent: where processing relies on your consent, you have the right to withdraw it. Withdrawal does not affect the lawfulness of processing based on consent before it was withdrawn.

You can exercise these rights in the places indicated in the Services or contact us using the details below. To learn more about Shopify’s use of your data and your rights, including for data processed by Shopify, visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising these rights. We may need to verify your identity before processing your requests, where the law permits or requires it. In accordance with applicable laws, you may appoint an authorised representative to exercise your rights on your behalf. Before accepting their request, we will require proof of their authorisation and may ask you to confirm your identity directly. We will respond within the time limits required by applicable law.

Complaints

To make a complaint about the processing of your data, contact us using the details below. Depending on where you live, you may have the right to challenge our decision by contacting us, or to complain to your local data protection authority. For the EEA, the list of competent authorities is available here.

International transfers

We may transfer, store and process your personal data outside your country of residence.

If we transfer your data outside the European Economic Area or the United Kingdom, we will use recognised mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent agreements issued by the relevant UK authority, as appropriate, unless the transfer is to a country recognised as providing an adequate level of protection.

Changes to this policy

We may update this policy, including to reflect changes in our practices or for operational, legal or regulatory reasons. We will publish the new version on this website, update the last-updated date and provide the information required by applicable law.

Contact

PT MAISON MATA GROUP is responsible for the personal data we process as Maison Mata. For questions about this policy or to exercise your rights, contact us:

Email: hello@maisonmata.com
WhatsApp: +62 812 3866 0613
Business address: Jalan Pura Batu Mejan 32, Canggu, Kuta Utara, Badung, Bali, Indonesia.

Shopify is responsible for certain processing described in the “Our relationship with Shopify” section. You can also contact Shopify through its Privacy Portal.