Datenschutzerklärung

PRIVACY POLICY

Last updated: March 1, 2026

ARTICLE 1 — INTRODUCTION AND SCOPE

This Privacy Policy (hereinafter referred to as "the Policy") is established by CONDOR LAB LIMITED, a company incorporated under the laws of Hong Kong, registered under number 79854301, with its registered office at RM03, 24/F, Ho King Commercial Centre, 2-16 Fayuen Street, Mong Kok, Hong Kong (hereinafter referred to as "the Company", "we" or "CONDOR LAB").

This Policy defines in a transparent, comprehensive and enforceable manner the conditions under which CONDOR LAB LIMITED collects, processes, retains, protects and, where applicable, transfers the personal data of its users, customers, visitors and commercial partners (hereinafter collectively referred to as "Data Subjects"), in connection with the operation of the e-commerce platform accessible at https://www.georgemilton.store/ (hereinafter "the Website"), dedicated to the retail sale of premium and luxury rugs and high-end interior decoration items.

CONDOR LAB LIMITED is fully committed to processing the personal data entrusted to it with the highest degree of security, confidentiality and rigour, in strict compliance with applicable data protection legislation, and in particular:

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR"), directly applicable within the European Union;

The French Data Protection Act (Loi Informatique et Libertés) No. 78-17 of 6 January 1978, as amended, as applicable in France;

The Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong, applicable under the law of the Company's registered office;

Any other legislative or regulatory text applicable in the territories of residence of the Data Subjects.

ARTICLE 2 — IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

In accordance with Article 13 of the GDPR, the information relating to the data controller is as follows:

Company name: CONDOR LAB LIMITED

Registration number: 79854301

Registered office: RM03, 24/F, Ho King Commercial Centre, 2-16 Fayuen Street, Mong Kok, Hong Kong

Email address: contact@georgemilton.store

Website: https://www.georgemilton.store/

For any question, request or complaint relating to the processing of your personal data, you may contact the data controller at the following email address: contact@georgemilton.store.

ARTICLE 3 — DATA COLLECTED AND PURPOSES OF PROCESSING

3.1 — Categories of Personal Data Collected

In the course of its activities, CONDOR LAB LIMITED collects and processes the following categories of personal data:

Identification and contact data: first name, last name, full postal address, email address, telephone number. These data are collected for the purposes of processing and fulfilling orders, shipping products, issuing invoices and communicating with the Customer.

Transactional data: purchase history on the Website, transaction amounts, payment methods used (without retention of raw banking data), billing information. These data are processed for the purposes of securing transactions, combating fraud and managing accounting and tax obligations.

Browsing and usage data: IP address, cookie data and similar technologies, session duration and pages visited, interactions with the Website, operating system and browser used. These data are collected for the purposes of behavioural analysis, continuous improvement of the user experience and technical optimisation of the Website.

Marketing and communication data: communication preferences, email opening and interaction history, customer segments. These data are processed for the purposes of sending targeted commercial communications and optimising advertising campaigns, subject to the prior consent of the Data Subject.

3.2 — Collection Tools and Technologies

CONDOR LAB LIMITED uses the following third-party tools and technologies in connection with the collection and processing of data:

Shopify: website hosting and management platform, with registered office at 151 O'Connor Street, Ground Floor, Ottawa, Ontario, Canada K2P 2L8;

Google Analytics: audience analysis and website performance measurement tool, published by Google LLC;

Meta Pixel (Facebook/Instagram): advertising conversion tracking tool, published by Meta Platforms Inc.;

Apple Pay and Shop Pay: dematerialised payment solutions;

PayPal: online payment platform, published by PayPal Holdings Inc.

3.3 — Data Not Collected

CONDOR LAB LIMITED formally commits to never collecting or processing any "sensitive" data within the meaning of Article 9 of the GDPR, such as data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life or sexual orientation. No raw banking data (card number, expiry date, security code, etc.) is retained by the Company.

ARTICLE 4 — LEGAL BASIS FOR PROCESSING

In accordance with Articles 6 and 7 of the GDPR, each processing activity carried out by CONDOR LAB LIMITED is based on one of the following legal grounds:

Performance of a contract: the processing of identification, transactional and shipping data is necessary for the performance of the sales contract concluded between CONDOR LAB LIMITED and the Customer upon placing an order on the Website;

Explicit consent of the Data Subject: the processing of data for commercial communications, newsletters and advertising targeting is based on the free, specific, informed and unambiguous consent of the Data Subject, obtained prior to any processing;

Legitimate interest of the Company: the processing of browsing data for statistical analysis, improvement of the user experience and website security is based on the legitimate interest of CONDOR LAB LIMITED, provided that such interest is not overridden by the interests or fundamental rights of the Data Subject;

Compliance with legal obligations: the retention of certain data for accounting, tax or regulatory purposes is based on the legal obligations to which the Company is subject.

The Data Subject has the right at any time to withdraw their consent for processing activities that rely upon it, without such withdrawal affecting the lawfulness of processing carried out prior to that withdrawal. Withdrawal of consent may be exercised by submitting a request to: contact@georgemilton.store.

ARTICLE 5 — RIGHTS OF DATA SUBJECTS

5.1 — Overview of Recognised Rights

In accordance with the GDPR and applicable national legislation, any Data Subject whose data is processed by CONDOR LAB LIMITED enjoys the following rights:

Right of access (Article 15 GDPR): the right to obtain confirmation as to whether data concerning you is being processed, as well as access to such data and information about the processing conditions;

Right to rectification (Article 16 GDPR): the right to obtain, without undue delay, the rectification of inaccurate data concerning you, as well as the right to have incomplete data completed;

Right to erasure (Article 17 GDPR): the right to obtain the erasure of your data in the cases provided for by regulation, in particular where the data is no longer necessary for the purposes for which it was collected;

Right to restriction of processing (Article 18 GDPR): the right to obtain restriction of processing of your data in certain circumstances defined by the GDPR;

Right to data portability (Article 20 GDPR): the right to receive data concerning you in a structured, commonly used and machine-readable format, and to transmit it to another data controller;

Right to object (Article 21 GDPR): the right to object at any time, on grounds relating to your particular situation, to processing of your data where it is based on the legitimate interest of the Company, as well as the unconditional right to object to processing for direct marketing purposes;

Right not to be subject to automated decision-making (Article 22 GDPR): the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.

5.2 — How to Exercise Your Rights

Any request relating to the exercise of one of the aforementioned rights must be submitted by electronic means to the following address: contact@georgemilton.store

The request must be clearly and precisely worded, identify the right(s) whose exercise is being sought, and be accompanied by a copy of a valid proof of identity allowing verification of the applicant's identity.

CONDOR LAB LIMITED commits to responding to any request within a maximum period of one (1) month from receipt of the complete request. This period may be extended by two (2) additional months in the case of complex or multiple requests, subject to informing the Data Subject within the one-month period.

Should the response be unsatisfactory or no response be received within the prescribed timeframe, Data Subjects residing in France have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), whose registered office is at 3 Place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07, or online at: https://www.cnil.fr.

ARTICLE 6 — DATA RETENTION PERIODS

CONDOR LAB LIMITED commits to retaining personal data only for the period strictly necessary to achieve the purposes for which it was collected, in accordance with applicable legal provisions:

Order and transaction data: retained for a maximum period of five (5) years from the last commercial or contractual interaction, in accordance with applicable civil and commercial limitation periods;

Accounting and tax data: archived for a period of ten (10) years from the close of the relevant accounting period, in accordance with legal accounting and tax obligations;

Marketing and commercial communication data: retained until voluntary unsubscription by the Data Subject or until an inactive period of eighteen (18) consecutive months is recorded;

Browsing data and cookies: retained for a maximum period of thirteen (13) months from collection, in accordance with the recommendations of the CNIL.

Upon expiry of these retention periods, data is permanently deleted or irreversibly anonymised.

ARTICLE 7 — DATA SECURITY AND INTEGRITY

CONDOR LAB LIMITED implements all appropriate technical and organisational measures, within the meaning of Article 32 of the GDPR, to ensure a level of security appropriate to the risk presented by the processing activities carried out, and in particular to ensure the confidentiality, integrity, availability and resilience of the data processed.

These measures include in particular:

Encryption of payment data via PCI-DSS certified providers (Visa, Mastercard, American Express, Apple Pay, PayPal, Shop Pay);

Restriction of access to personal data to only those persons duly authorised in the context of their duties and subject to a confidentiality obligation;

Implementation of regular backup protocols and secure hosting via the Shopify platform;

Periodic internal audits of processing activities and third-party service providers;

Use of the HTTPS protocol for all data exchanges on the Website.

It is expressly stated that no raw banking data (card number, expiry date, visual security code) is collected or retained directly by CONDOR LAB LIMITED, all transactions being secured by the aforementioned certified payment providers.

In the event of a personal data breach likely to result in a high risk to the rights and freedoms of Data Subjects, CONDOR LAB LIMITED commits to notifying the affected persons without undue delay, in accordance with Articles 33 and 34 of the GDPR.

ARTICLE 8 — SHARING AND DISCLOSURE OF DATA TO THIRD PARTIES

The personal data of Data Subjects is under no circumstances sold, rented or exchanged for consideration to third parties. It may however be communicated to subcontractors and partners strictly necessary for the performance of the services offered by CONDOR LAB LIMITED, including:

Carriers and logistics providers: for the purposes of dispatching and delivering orders;

Payment service providers: Visa, Mastercard, American Express, Apple Pay, PayPal, Shop Pay, for the purposes of securing and executing financial transactions;

Hosting platform: Shopify Inc., for the purposes of hosting and technical operation of the Website;

Analytics and advertising tools: Google Analytics, Meta Pixel, for the purposes of analysing Website performance and optimising advertising campaigns.

Each subcontractor or partner is contractually bound to maintain the confidentiality of the data entrusted to them and to comply with the requirements of the GDPR and any other applicable data protection regulation. CONDOR LAB LIMITED ensures that any subcontractor provides sufficient guarantees regarding the implementation of appropriate technical and organisational measures.

ARTICLE 9 — INTERNATIONAL DATA TRANSFERS

Given the international nature of the tools and service providers used by CONDOR LAB LIMITED (including Shopify, Google, Meta and PayPal), certain personal data may be transferred to third countries located outside the European Union or the European Economic Area.

In such cases, CONDOR LAB LIMITED ensures that these transfers are governed by appropriate safeguards in accordance with Articles 44 to 49 of the GDPR, and in particular by:

Standard contractual clauses approved by the European Commission;

Adequacy decisions issued by the European Commission regarding the destination country;

Any other mechanism recognised and validated by the competent data protection authorities.

ARTICLE 10 — COOKIES AND SIMILAR TECHNOLOGIES

When you browse the Website, CONDOR LAB LIMITED and its partners may place cookies or use similar technologies on your device (computer, tablet, smartphone), in order to:

Ensure the proper technical functioning of the Website and remember your browsing preferences (strictly necessary cookies);

Measure audience, analyse Website performance and improve the user experience (analytical cookies);

Personalise advertising content and track conversions from our marketing campaigns (advertising cookies).

Only strictly necessary cookies may be placed without your prior consent. The placement of all other cookies is subject to your free, specific, informed and revocable consent, collected via our cookie preference management module accessible on the Website.

You have the right at any time to accept, refuse or withdraw your consent for all or part of the cookies, either via the preference management module available on the Website or via your browser's privacy settings. Refusing certain cookies may affect the proper functioning of certain Website features.

ARTICLE 11 — AMENDMENTS TO THE PRIVACY POLICY

This Privacy Policy may be modified, supplemented or updated at any time, in particular to reflect legislative, regulatory or case law developments, or to reflect changes in CONDOR LAB LIMITED's data processing practices.

Any material amendment to this Policy shall be brought to the attention of Data Subjects by electronic means or via a visible notification on the Website, within a reasonable period prior to its entry into force.

The version in force is that published on the Website at the time of consultation. The updated version is permanently accessible at: https://www.georgemilton.store/

ARTICLE 12 — GOVERNING LAW AND JURISDICTION

This Privacy Policy is governed by the provisions of the GDPR for all Data Subjects residing within the European Union, as well as by the mandatory provisions of the national law of the Data Subject's country of residence where those provisions afford greater protection.

In the event of a dispute relating to the interpretation or application of this Policy, the Data Subject is invited to first contact CONDOR LAB LIMITED at contact@georgemilton.store in order to seek an amicable resolution. In the event of failure, the Data Subject has the right to lodge a complaint with the competent supervisory authority in their country of residence (in France: the CNIL).

LEGAL INFORMATION

Company: CONDOR LAB LIMITED