Privacy Policy
This Privacy Policy describes how Maison d'Herbes and our brands and subsidiaries collect, stock, use and share personal information collected when you interact with us online (e.g., through our website or other online products and services).
Consent
By using our website and services, you agree to use of your personal information as described in the Privacy Policy. Except in the cases provided in this Privacy Policy, your personal information will not be used for other purposes without your consent. We will not actively collect personal information for sale or marketing purposes in a way that specifically identifies an individual. In other words, we do not share, market or sell our lists of customers to third parties. You have the right to withdraw consent you have previously provided. However, this can result in an inability to use our Website and/or services.
Collection of information
We wish to collect, use and share only the information useful to manage your account, offer services, improve services, update our customer and visitor directory, answer questions or comments and for identification and authentication matters. Information provided when signing up for our services or contacting us for questions or comments, will not be disclosed and will only be used for the purpose it was collected for unless we have obtained your consent. (This is subject to exclusions and disclosures listed below.)
Two types of information can be collected through the use of our Website and services: personal information and non-personal information. The present Privacy Policy does not apply to the collection, use or disclosure of the following type of information, which is not limited by applicable laws in respect to the protection of personal information, such as: a) public information such as name, address, directory available through directory assistance; or b) non-personal information (as defined below).
Personal information
Personal information refers to identifiable information such as your name, address, email, credit card information, date of birth and gender. When collecting information, we will clearly identify what is collected and the purpose it will serve. You have the right not to share your personal information with us, but this can result in an incapacity to access or subscribe to our Website. In other cases, the choice not to share personal information can result in a restricted use of certain functionalities of our Website. We can collect personal information related to our Website by the sign-up process; communications with customers, downloading of information, purchases, customer support and from our different surveys.
Non-personal information
Non-personal information refers to data such as IP address and type and version of the browser and operating system used by visitors to the website. Aggregated data, such as demographic data, number of visitors, pages viewed or average time spent on our website are not considered as being personal information. Furthermore, contact information such as name, title, business address or phone number of a business, organization or a professional contact is not considered personal information.
Although the use of some of the non-personal information collected, used or disclosed by the website as described in this Privacy Policy is not restricted (in places where it might be restricted, the obligations under this Privacy Policy do not apply to this type of information), the information concerning the collection of this data is available in this Privacy Policy for the purpose of transparency regarding the website and its functioning. This non-personal information is collected or disclosed by us through the operation of this website. For example, our web servers can automatically collect non-personal information that you supply us through information stored in your browser or in cookies when you choose to visit our website.
Use of data
We may collect information for various purposes such as:
Log in and Purchase Information: To purchase products on the website, you must sign up for an account and provide us with some personal information such as your name, email and payment information. We collect information about your purchase history. We use this information to process orders and as otherwise described in this Privacy Policy.
Social Sharing Features: If you choose to use one of the social sharing features on the website, your use of such features enables the sharing of information with your friends or the public, depending on the privacy settings you have established with the entity that provides the social sharing feature. This information will be processed according to the privacy policy of that entity.
Non-Promotional Notifications: We may continue to provide you with notifications despite your set email preferences such as updates about our Terms and Conditions or Privacy Policy. We may continue to send you non-promotional emails, such as those about your account or our ongoing business relations.
Promotional Notifications: If you agree to receive promotional notifications from us, we will keep you updated about our products and services. You can opt out of receiving promotional notifications at any time by following instructions provided in those promotional notifications or by contacting us at [email protected]
Data: We also collect data related to purchases on this website. This information will remain confidential, however, aggregate data (never used in a way that would enable us to identify individual visitors) will be stored and this data could be made available to other members third parties.
Cookies: We use cookies to track website traffic and understand usage. A cookie is a small piece of data sent from a website and stored on the user’s computer by the user’s web browser while the user is browsing. Our website uses cookies to collect global data on the use of this website such as number of visitors, length of time spent on pages and most frequently visited pages. This information is used to improve our services. You may set your Web browser to notify you when a cookie is being sent. However, because some cookies are a part of the functionality of the website, disabling them may prevent you from using certain parts of the website. Some information kept by your browser is linked to your orders and your customer file: where your visit came from, described in the section “Visit measurement, order sources and videos”, and, only if you accept it, your browsing history on the site, described in the section “Consented browsing history”.
We also collect certain standard information that your browser sends to every website you visit, such as your IP address. This data is registered with your information in our database.
If we plan on using your personal information in the future for purposes other than those mentioned above, we will do so only after having informed our customers by updating this privacy policy. See below “Changes to this Privacy Policy” for more information.
Sharing of information
We have put in place contractual guarantees and other organizational measures with our agents (see information below) in order to ensure an appropriate level of security for your personal information (see SECURITY section). Furthermore, we will not disclose or transfer personal information to third parties without your permission, with the exception of what is specified in the present Privacy Policy (see other important exceptions below).
As of the present Privacy Policy, we share your personal information related to our Website only with our service providers, including our web host, our cloud data storage provider, and our payment and analysis providers. Our providers store data in Canada and the United States and therefore, your personal information may be made available to the Canadian and American governments or organizations under a legal ordinance, irrespective of the existing guarantees put in place to protect your personal information.
From time to time, we can use third parties to help us improve our Website and/or services. These third-parties can have a limited access to our customer database with the unique purpose of helping us improve our Website and/or services. They will be submitted to contractual restrictions forbidding them to use our members’ information for any other purpose.
Important exceptions
We can share your personal information if we have reasons to believe that the disclosure of that information is needed to identify, contact or intend a legal action against an individual who can interfere or cause injuries (intentionally or not) towards the rights or properties of other members of the Website, of other users of services or of any other person (including the rights and properties of other) who could be aggrieved by those activities. We can share personal information when we believe, in good faith, that it is required by law and in accordance with it.
We can also disclose your personal information in the event of a corporate reorganization, a merger or sale in total or in part of our assets or actions, including the exercise of due diligence.
Security
The safety of your personal information is extremely important to us. We use commercially reasonable measures for the conservation and retention of your information in a secure environment. We use technical, contractual, administrative and physical security measures designed to protect the personal information you provide us with. We have put in place procedures aiming to limit the disclosure of your personal data. Disclosure is strictly limited to the number of employees necessary to achieve the objectives stated in this policy.
You have a shared responsibility in the safety of your personal information. We recommend that you refrain from sharing your account information or password with third parties.
Data retention
Our retention periods for personal data are based on business needs and legal requirements. We retain personal data for as long as is necessary for the processing purpose(s) for which the data was collected and any other permissible, related purpose. We can retain data for a certain time after the end of your use of our services. We can retain data to prevent fraud or future misuse, or for legitimate business reasons, such as aggregated data analysis, recovery of funds or, if necessary, the law. All personal information retained remains under the present Privacy Policy. If you ask that your name be deleted from our database, it may be impossible to delete all your personal information because of legal and technological restrictions.
Changes in our privacy policy
We may change this Privacy Policy at anytime. If we make changes, we will notify you by adding a statement to our homepage. All minor modifications or clarifications of this policy will be in effect on the date where a statement is published and important modifications will be in effect 30 days after the publication of a statement on our website. Unless otherwise stated, this Privacy Policy applies to all information and data collected about you. The date of the latest version of our Privacy Policy is indicated at the bottom of this document. We encourage you to print a copy of our Privacy Policy and to visit our site and review our Privacy Policy whenever you interact with us, to be aware of any changes and/or updates. By using our Website you agree with the changes and updates. In some cases, we may provide you with additional notice (such as adding a statement to the homepages of our websites or sending you an email notification). We encourage you to review the Privacy Policy whenever you interact with us to stay informed about our information practices and the choices available to you.
Access and accuracy
You have a right to access the personal data we have about you and get an overall account of our use of that data. Upon receipt of your written request, we will provide a copy of your personal information. In certain particular situations, we might not be able to provide you with all pertinent information, for example, if this information involves another user. In such circumstances, we will provide, upon request, the reasons of the refusal. We will strive to process all access requests and modifications in a reasonable time frame.
We will do our best for all personal information to be accurate and up-to-date and we will provide you with the necessary tools to update, change, delete or add to your personal information, if needed. If needed, the modified personal information will be transferred to parties with whom we are allowed to share your information with. The personal information we collect allows us to offer the best customer service possible.
Contact us
You can help us by letting us know of any changes in your address or phone number. If you wish to access your information, if you have questions, comments or concerns, or if you notice a mistake in your personal information, please contact us.
Consented browsing history
If you accept it in the “Your cookie settings” window, we record your visits to maisondherbes.com: the address of the pages and product pages you view, the time of each page view and the time spent on each, the site you came from or the campaign that brought you (newsletter, advertising), and the date of your consent, of your orders (with their number), of your sign-ins to your account and of your newsletter subscription. Your choice is recorded with its date, the screen where you made it, the version of this text and its language. Two cookies from our own domain are used for this: “mdh_consent” remembers your choice, and “mdh_vid”, which the page’s scripts cannot read, holds a random identifier that links these pages together. We never record your searches, what you type into a form, or your IP address.
When you place an order, sign in or subscribe to our newsletter, this history is linked to your email address and your customer file, with the date and how it was linked. A browser is linked to a single person: what is viewed in it, even without signing in, is linked to the first person who identifies themselves in this browser. If another email address or account identifies itself afterwards, we note that the device is shared and stop recording the pages viewed in this browser until the first person identifies themselves again (by signing in, or with their email address when ordering or subscribing to the newsletter); only the date and time of the last visit are still recorded. On a shared device, we recommend that you do not accept this tracking, or that you withdraw your consent. We use this history to understand which products interest you and to advise you better, in customer service and in our communications, and to know which campaigns lead to orders. It can be seen by the Maison d’Herbes team, in its management tool, and by the technical providers that host the data (Google Cloud, in the United States). Nothing is sold or passed on to advertising networks.
This tracking is off by default, and your choice applies to the browser where you make it. Each day of browsing history is automatically deleted 13 months after the visit. You can withdraw your consent at any time with the “Privacy preferences” link at the bottom of every page: tracking stops immediately in this browser, the history kept from it is deleted, and the identifier kept by this browser is removed from it. This withdrawal does not affect the visit source described in the “Visit measurement, order sources and videos” section: it stays in this browser, on your orders and in your customer file. If you accepted tracking in several browsers or on several devices, withdraw your consent in each of them, or ask us to delete all the history linked to your email by writing to [email protected]. We only keep a dated record of your choice for 13 months, with nothing that can identify you. You can also ask to access or correct your history the same way; deleting your customer account also deletes your history. The person in charge of the protection of personal information at Maison d’Herbes is the holder of the Compliance Officer position: [email protected].
Version 2026-09-v9 — effective 2026-09-22.
Visit measurement, order sources and videos
Whatever your cookie choices, we count visits anonymously and in aggregate (pages viewed per day, average time spent, where visits come from), with no identifier and no IP address.
Your browser also keeps, for up to 13 months (“mdh_attribution_v1”), where your visit came from: the referring site or the campaign that brought you (a direct visit does not replace the last known source), the landing page and the type of device (mobile or computer). It is noted on your order if you place one and stays with that order. It also appears in your customer file, order by order, along with the first and latest known sources. We use it to measure how well our campaigns work and to know where you came from before each of your orders. It can be seen by the Maison d’Herbes team, in its management tool, and by the technical providers that host the data (Google Cloud, in the United States). It does not depend on any cookie choice. You can delete it from this browser by clearing our site’s data in its settings; the source noted on an order stays with the order and in your customer file.
YouTube videos in some articles only load if you click to play them; YouTube may then store data on your device, under its own rules.