Privacy and cookies

Handling of personal data, in line with the GDPR. Last updated: 2 November 2026.

Who handles your data

What we collect, and why

• First name, surname, phone, e-mail : preparing the order, recognising you at the counter, telling you when it is ready, and reaching you if there is a problem with a cut. Legal basis: performance of the sales contract.
• Order contents, collection time, requests to the butcher : preparing the cut. Legal basis: performance of the contract.
• Payment reference : to match the payment with the order, and to refund the difference after weighing. We never receive your card number: it stays with the payment institution. Legal basis: performance of the contract and our accounting obligations.
• Notices of deliveries and closures : only if you ticked the box provided. Legal basis: your consent, which you may withdraw at any time.
• Your device identifier, if you install the app from a store and accept notifications: this identifier is supplied by Apple or by Google and serves only to send you the notice that your order is ready. It disappears as soon as you uninstall the app or turn off notifications. Legal basis: your consent.
• Loyalty card, if you ask for one: a code, the number of stamps and the date of each visit. Legal basis: performance of the contract, since the card is a benefit you request.
• Offers and discount codes assigned to you : the butcher may reserve a discount for certain customers and tell you by notification or by e-mail. Legal basis: your consent where you ticked the “notifications and offers” box, and, for customers who have already ordered, the butcher's legitimate interest in offering deals on similar products. Every message carries a link to stop receiving them, and a refusal is honoured immediately.
• Your request sent from the site, if you write to the butcher's shop or ask for a quote: your first name, your surname, your phone number, your e-mail if you give one, the date and the number of people for a quote, and the text of your message. They are used only to reply to you, and are erased once the request has been handled and the order fulfilled. Legal basis: pre-contractual steps taken at your request.
• Counting page views : we count the number of visits per page and per day, with no cookie, no IP address and no identifier of any kind. These figures cannot identify anyone. Legal basis: our legitimate interest in knowing what interests our customers.

What we do not do

• No automated decision within the meaning of Article 22 of the GDPR. No decision producing legal effects or significantly affecting you is taken by a machine. The butcher decides himself who receives an offer.
• So that offers make sense, the butcher looks at the product families you have already ordered, for instance poultry or barbecue cuts, and the number of orders you have placed. That is all. It avoids offering you a discount on a cut that does not interest you. You may object at any time, and turning off offers is enough to stop this analysis.
• No data sold, rented or passed on for commercial purposes.
• No data is stored outside the European Union. Two exceptions, both covered by standard contractual clauses: the routing of a notification by Apple or by Google when you have installed the app and accepted notifications, those two companies then acting as mere carriers of the message; and the technical access of our host Railway from the United States for the maintenance of its European servers.

No data is sold, rented or passed to third parties for commercial purposes.

Who has access to it

• The butcher, to prepare and hand over the orders.
• The payment provider, for collection and refunds: Viva.com, a brand of VIVABANK BANKING S.A., a credit institution licensed by the Bank of Greece. It alone sees your card details.
• The host, which stores the data technically: Railway Corp., a company established in the United States. The servers that carry the site and the database are located in the European Union, in the Western Europe region. Access from the United States by Railway's technical staff remains possible for maintenance: it is governed by the processing agreement and by the European Commission's standard contractual clauses.
• Kodex Production, for technical maintenance, with access limited to what troubleshooting requires.

How long

• Orders and accounting records: seven years, the legal retention period in Belgium.
• Customer account and contact details: three years after the last order, then deletion.
• Consent to notifications and offers: until it is withdrawn. The record of that consent, its date and any withdrawal, is kept for three years after the relationship ends, so that it can be proved it was given.
• Loyalty card: three years after the last visit.
• Device identifier: erased as soon as the app is uninstalled or consent is withdrawn.
• Counting page views: thirty days.

Your rights

You may ask for access to your data, its correction, its erasure, restriction of processing, its portability, and object to processing based on our legitimate interest. Write to contact@maisonhimi.com, we reply within one month.

In the app you can also ask for deletion yourself: the Profile tab, then “Delete my account”. A code is sent to you by e-mail to check that the request really comes from you.

Without the app, deletion can also be requested from the web, on the page Delete my account.

To stop receiving offers, three routes are open to you: the link at the bottom of every e-mail, the switch in the app's Profile tab, or simply a message to contact@maisonhimi.com. Turning off offers does not stop the messages tied to an order in progress, which are part of the service.

If the answer does not satisfy you, you may refer the matter to the Data Protection Authority, Rue de la Presse 35, 1000 Brussels, autoriteprotectiondonnees.be.

Cookies and storage on your device

The site and the app use no advertising cookie, no tracker, and no third-party audience measurement tool. No consent banner is therefore needed.

The app keeps in your browser's memory, and only there:

• the contents of your basket, so you do not lose it if you close the page;
• your contact details, so you do not retype them with every order;
• the list of your recent orders, so you can follow their progress.

This information stays on your device and is erased if you clear the site's data. It is strictly necessary for the service to work.

Notifications

If you accept notifications, your device receives a technical identifier that lets us tell you when your order is ready, or report a delivery or a closure if you agreed to it. You may turn them off at any time in your phone's settings or from your profile in the app.

Security

Exchanges are encrypted. Access to the shop area is protected by a code. Payments go through an approved provider, and card data never reaches us.