Maison Consiglieri · Client information
Privacy policy
MAISON CONSIGLIERI · Last updated: 14 September 2026
Discretion is part of the Consiglieri experience. Here we explain what data we use, why we need it and how you remain in control of your choices.
1. Who is responsible for your data
The controller is Consiglieri Fashion Group SRL, the company operating Maison Consiglieri, with its registered office at Aleea Alexandru 7-7A, Sector 1, Bucharest, Romania, VAT identification number RO32511291, registered with the Trade Register under no. J40/14504/2013.
For privacy questions or to exercise your rights, email office@consiglieri.ro. You can also contact us on +40 786 228 811 or write to our registered office above.
This policy covers your interactions with us through consiglieri.ro, consiglierimen.com, forms, messages, appointments and showrooms. Specific notices provided when particular data is collected supplement this policy.
2. The data we use and its sources
Data comes primarily from you: when you send an enquiry, choose a showroom, contact us, subscribe to communications or order a product. It may include your name, email address, phone number, message, contact preferences, appointment or event details, products of interest and any budget you choose to share.
For orders, we process billing and delivery details, order and payment history, body measurements and choices of fabric, cut or personalisation, as applicable. The information needed for a Custom Made garment is used for consultations, production, fittings and handling related requests afterwards.
Using the website may involve the processing of technical and interaction data: IP address, browser and device, pages and actions, visit source, session identifiers, cookies and advertising identifiers, depending on the technology and your choices. We also process records of privacy choices and requests to exercise individual rights.
If you contact us through forms or messaging on Facebook, Instagram or other platforms, we receive the data you choose to send and information associated with the enquiry. The platform also processes data under its own policy. Please do not include your national identification number, full payment card details or medical information in a contact message.
3. Why we use your data
| Purpose | Relevant data | Legal basis |
|---|---|---|
| Your requested response, quotation or appointment | Contact details, message, showroom and preferences needed for the request. | Steps taken at your request before a contract, GDPR Article 6(1)(b). For general enquiries: our legitimate interest in responding and managing correspondence, Article 6(1)(f). |
| Orders and Custom Made services | Contact details, measurements, specifications, orders, delivery and payments. | Performance of a contract, GDPR Article 6(1)(b). |
| Invoicing and legal requirements | Identification, billing and transaction details, and supporting documents. | Legal obligation, GDPR Article 6(1)(c). |
| Complaints, protection of rights and security | Correspondence, contractual documents, technical data and relevant evidence. | Legal obligations or our legitimate interest in preventing misuse and establishing, exercising or defending legal claims, GDPR Article 6(1)(c) or (f), depending on the circumstances. |
| News, invitations and offers | Contact details and preferences for your chosen channel. | Marketing consent, GDPR Article 6(1)(a), and applicable commercial communications rules. |
| Audience analysis, campaign measurement and personalised advertising | Online identifiers, visits and interactions; pseudonymised contact data for the measurement and matching features described below. | Consent where required by the GDPR and Romanian Law no. 506/2004; choices for analytics, advertising and direct communications are distinct. |
| Records of preferences and GDPR requests | Expressed choices, request dates, identifiers and relevant correspondence. | Legal accountability obligations and compliance with individual rights, GDPR Article 6(1)(c). |
Fields necessary to handle a request are indicated in the form. Without that information, we may be unable to respond or arrange the service you have requested. Additional details and choices remain optional. When relying on legitimate interests, we consider your rights and expectations; you may object as explained below.
4. Your communication choices
Submitting a form, requesting an appointment or reading this policy does not subscribe you to marketing. We can respond to your message and communicate about your requested experience or order without making those services conditional on accepting future offers.
Marketing communications about collections, invitations and offers require valid prior consent through an active, optional choice. The consent must specify the channel: email, SMS, WhatsApp or telephone calls, according to the separately offered option. Consent for one channel is not consent for all others. Contact and appointment forms displaying only a privacy notice do not collect that consent.
You may withdraw consent at any time: through the unsubscribe link in an email, by asking within an SMS/WhatsApp conversation, during a call or by emailing office@consiglieri.ro. Withdrawal ends use for that purpose without affecting the lawfulness of earlier processing. Where necessary, we retain a minimal record of your choice to ensure it is respected.
5. Cookies, analytics and advertising
The website uses Shopify infrastructure and preference management tools, including Pandectes. Strictly necessary cookies and storage support the service you request, security and remembering your choices. For optional analytics and advertising technologies, consent choices are distinct from simply using the website or submitting a form.
The cookie banner presents acceptance and refusal options. To notify us of your withdrawal of consent or make a request concerning data already collected, email office@consiglieri.ro. Browser settings let you delete or block storage on your device; this action does not automatically delete data already sent to a provider. Cookie consent does not subscribe you to a newsletter, and newsletter consent does not automatically enable personalised advertising.
Google tools, such as Google Analytics, Google Ads and Google Tag Manager, may be used to analyse interactions, attribute enquiries and measure campaigns. Meta tools may associate interactions with Facebook and Instagram campaigns. Depending on the applicable choices, these services may receive identifiers, device information and browsing or enquiry events.
When contact measurement or matching features are used, an email address or phone number may be converted into a pseudonymous identifier before transmission. It can be matched to a platform account and remains personal data. Such use for advertising requires the appropriate information and consent; it does not follow simply from submitting a form.
Personalisation may use interactions and inferred interests to select the advertisements you see and assess campaigns. You may refuse this purpose or withdraw consent without losing access to appointment requests. Further information: how Google uses data, Google advertising preferences and Meta's privacy policy.
6. Who may receive your data
Access is limited to the people and services needed for the relevant purpose: authorised Consiglieri team members; hosting, platform, IT support, communications and customer relationship service providers; partners involved in producing or delivering an order; accounting and advisory professionals; authorities or other persons where there is a legal obligation or justification.
Shopify supports the website and its commercial features. MiniCRM is used to manage customer relationships, enquiries and relevant commercial information. Pandectes supports preference management and records. Google and Meta may receive data for the features explained above and according to applicable choices. Providers may act as processors or, for certain processing of their own, as controllers; the role depends on the service and its terms. Further information: Shopify, MiniCRM and Pandectes.
A brand partnership does not automatically authorise the exchange of customer databases. Visiting a page about Cronos Med or Dental Experts does not constitute consent to share your contact details with a clinic. If you request an experience involving a partner, the necessary information and sharing arrangements must be explained in the context of that request. Partners' policies apply to your direct interactions with them.
7. Processing outside the European Economic Area
Using international providers may involve processing outside the European Economic Area. Transfers must rely on mechanisms provided by the GDPR: an adequacy decision applicable to the recipient or appropriate safeguards, such as standard contractual clauses or binding corporate rules, as applicable, together with any necessary supplementary measures.
Shopify describes its mechanisms in its data processing agreement. You may ask us for information about the recipients and safeguards applicable to your data, including how to obtain a copy of the relevant safeguards, using the contact details above.
8. How long we retain data
Retention depends on the purpose and document category. For enquiries and appointments, we consider the time needed to respond, the continuation of the relationship and related follow-up requests. Order data, including details needed to produce a Custom Made garment, is retained as necessary to fulfil and document the order, provide remedies and protect legal rights. Documents subject to tax, accounting or other statutory obligations are retained for the period required for that category.
Marketing data is retained while valid consent exists and the purpose remains relevant, subject to a review of necessity. Withdrawing consent stops marketing; evidence of consent, withdrawal and information needed to respect your choice may have a different retention period justified by legal obligations or the defence of legal claims. Such an obligation does not automatically extend the retention of all data.
For technical data and cookie records, retention depends on the storage purpose, identifier lifespan and service settings. Further retention must have a separate applicable basis, such as a statutory archiving obligation or the defence of a right; the existence of a backup does not justify indefinite retention.
9. Your rights
Subject to the GDPR, you may request access and a copy of your data, rectification, erasure, restriction of processing and portability of data processed automatically on the basis of consent or a contract. You may withdraw consent and object to processing based on legitimate interests for reasons relating to your particular situation.
You may object at any time to direct marketing, including related profiling. You also have the rights provided by GDPR Article 22 concerning solely automated decisions that produce legal effects or similarly significantly affect you, including applicable safeguards in circumstances permitted by law.
Send your request to office@consiglieri.ro. We respond without undue delay, normally within one month of receipt. If the complexity or number of requests justifies an extension of up to two further months under the GDPR, we will inform you within the first month and explain why. We may request proportionate information to confirm your identity where we have reasonable doubts. Exercising your rights is generally free of charge.
You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing — ANSPDCP, B-dul G-ral Gheorghe Magheru no. 28-30, Sector 1, Bucharest, Romania, or the competent supervisory authority in your country. You also have the right to seek a judicial remedy.
10. Protection and updates
Protecting data requires technical and organisational measures proportionate to the risks, restricted access and confidentiality obligations for authorised persons. To report a possible security or privacy issue, contact office@consiglieri.ro.
We update this policy when services, processing or applicable requirements change. Updating the wording does not, by itself, extend previously given consent. Where new consent is needed, it must be requested separately before the relevant processing.
