Privacy Policy
Last updated: 29 October 2026
Maison Cinnamonn respects your privacy. This policy explains what personal data we collect through this website, why we collect it, and what rights you have, in accordance with the General Data Protection Regulation (GDPR) and Luxembourg law.
1. Data controller
Maison Cinnamonn (sole proprietorship of Saïda Baroudi), 43, rue de Luxembourg, L-5314 Contern, Luxembourg.
Contact for any privacy request: contact@cinnamonn.com.
2. What we collect, why, and on what basis
- Contact form. Name, company or organisation, email address, phone number (optional), type of gathering and the message you write. We use it to answer your enquiry and, where relevant, prepare a proposal. Legal basis: your consent (Article 6(1)(a) GDPR) and steps taken at your request before entering into a contract (Article 6(1)(b)).
- Email correspondence. If you write to us directly, we keep your message and our replies to handle your request. Legal basis: Article 6(1)(b) and our legitimate interest in managing business enquiries (Article 6(1)(f)).
- Technical logs. When you visit the website, our hosting provider automatically records technical data such as IP address, date and time, pages requested and browser type. Legal basis: our legitimate interest in securing and operating the website (Article 6(1)(f)).
We do not use advertising or analytics trackers on this website, and we do not sell your data.
3. Who receives your data
- Hostinger International Ltd., our hosting provider.
- Google (email service used to receive messages sent through the contact form).
- Google Fonts. The website loads its typefaces from Google’s servers. When a page is displayed, your browser therefore sends your IP address to Google.
These providers act as processors or independent controllers under their own terms. We do not share your data with anyone else, except where the law requires it.
4. Transfers outside the European Economic Area
Some of the providers above may process data in the United States. Such transfers rely on the safeguards provided by the GDPR, such as the EU–US Data Privacy Framework or standard contractual clauses.
5. How long we keep your data
- Enquiries that do not lead to a project: up to 24 months after our last contact, then deleted.
- Client relationships: for the duration of the contract, then for the periods required by law (for example, accounting records).
- Technical logs: for the period set by our hosting provider.
6. Your rights
You have the right to access your data, have it corrected or erased, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time. To exercise these rights, write to contact@cinnamonn.com. We will reply within one month.
You also have the right to lodge a complaint with the Luxembourg supervisory authority: Commission nationale pour la protection des données (CNPD), 15 Boulevard du Jazz, L-4370 Belvaux, Luxembourg, cnpd.public.lu.
7. Security
We take reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access. Access to messages received through the website is limited to the people who need it to reply.
8. Changes to this policy
We may update this policy from time to time. The date of the latest version appears at the top of this page.