+352 2627 0263

[email protected]

18 Rue de la Boucherie, L-1247 Luxembourg, Luxembourg

Création d'Ambiances

SHOP NOW

‌Effective Date: September 30, 2026‌

Introduction

This Privacy Policy describes how Création d’Ambiances S.à r.l. (“we”, “us”, or “our”) collects, uses, shares, and protects personal information when you use our website www.ambiancesshop.com, application, or services (collectively, the “Services”). Our platform is dedicated to offering carefully curated home decor products, including our signature Simple Ceramic Vases that add calm charm to any shelf or table, lightweight well-made Home Decor Ornaments that easily match with all your existing decor, fresh New Arrivals for your home, and our Best Sellers of popular decor you will love.

This policy also outlines your rights regarding your personal data. By using our Services, you agree to the collection and use of information in accordance with this policy. The term “personal information” refers to any information that relates to an identified or identifiable individual, as further defined in this document. We operate in full compliance with applicable data protection regulations, including the EU General Data Protection Regulation (GDPR) and relevant Luxembourg data protection laws, to ensure your personal information is handled with the highest standards of care and security.

1. Data Controller Information

For the purposes of applicable data protection laws, including GDPR, the data controller for your personal information is:
‌Création d’Ambiances S.à r.l.‌
Address: 18 Rue de la Boucherie, L-1247 Luxembourg, Luxembourg
Contact Email: [email protected]
Contact Phone: +352 2627 0263

You may reach out to us at any time with questions, concerns, or requests related to your personal data processing activities using the contact details provided above.

2. Definitions

For the purposes of this Privacy Policy:

  • ‌Personal Information‌: Any information that relates to an identified or identifiable natural person, recorded in electronic or other formats, excluding anonymized processed information.
  • ‌Sensitive Personal Information‌: Information that, once leaked or illegally used, may easily lead to infringement of personal dignity or harm to personal and property safety, including biometric data, religious beliefs, specific identity information, medical health data, financial account information, location tracking data, and personal information of minors under the age of 14. We will specifically mark any Sensitive Personal Information we process.
  • ‌User‌: Any natural person who uses the Services provided through our website www.ambiancesshop.com.
  • ‌Processing‌: Any operation or set of operations which is performed on personal information or on sets of personal information, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3. GDPR Data Processing Principles

All processing activities we conduct on your personal information strictly adhere to the seven core principles of the EU General Data Protection Regulation:

  1. ‌Lawful, Fair and Transparent‌: All our data processing activities are based on valid legal grounds, conducted in a fair manner, and we fully disclose all relevant information about processing activities to you as the data主体.
  2. ‌Purpose Limitation‌: We only collect and process your personal information for specific, explicit, and lawful purposes clearly stated in this policy, and no subsequent processing will deviate from these original purposes.
  3. ‌Data Minimization‌: The personal information we collect is accurate, relevant, and limited to what is strictly necessary to achieve the stated processing purposes for operating our e-commerce services.
  4. ‌Accuracy‌: We take all reasonable measures to ensure your personal information is accurate, up-to-date, and we will promptly correct or erase any inaccurate data without delay.
  5. ‌Storage Limitation‌: We only retain your personal information for the period strictly necessary to fulfill the purposes for which it was collected, in accordance with applicable legal requirements.
  6. ‌Integrity and Confidentiality‌: We implement comprehensive technical and managerial security measures to protect your personal information from unauthorized processing, theft, damage, or leakage.
  7. ‌Accountability‌: We take full responsibility for all our personal data processing activities, and are able to demonstrate full compliance with all data protection principles outlined in applicable regulations.

4. Legal Bases for Processing Personal Information

In full compliance with GDPR requirements, all of our personal data processing activities are supported by one or more valid legal grounds as stipulated below:

  1. ‌Data Subject Consent‌: For processing activities that do not fall under other legal bases, we will obtain your freely given, specific, informed and unambiguous consent before processing your personal information. You retain the right to withdraw your consent at any time, with no adverse consequences to your ability to browse general content on our website.
  2. ‌Performance of a Contract‌: Much of our data processing is necessary for the performance of the sales and service contract we enter into with you when you place an order on our platform, including processing your order, arranging delivery, and providing after-sales support.
  3. ‌Compliance with a Legal Obligation‌: We process certain personal information to comply with legal obligations that we are subject to under Luxembourg and EU laws, such as tax reporting requirements and consumer protection regulations.
  4. ‌Protection of Vital Interests‌: In exceptional circumstances, we may process personal information to protect the vital interests of you or another natural person, such as in emergency situations related to product safety.
  5. ‌Public Interest‌: Where required, we may process personal information to carry out tasks in the public interest or in the exercise of official authority granted to us, in line with relevant legal requirements.
  6. ‌Legitimate Interests‌: We may process your personal information where it is necessary for our legitimate business interests or the legitimate interests of third parties, provided that such interests do not override your fundamental rights and freedoms related to personal data protection. Our legitimate interests include optimizing our product offering, preventing fraudulent transactions, and improving the security of our e-commerce platform.

5. Types of Information We Collect

To provide you with complete, secure, and personalized e-commerce services for our home decor products, we collect necessary information that you actively provide or generated during your use of our Services, in full compliance with data minimization principles:

5.1 Information You Provide Directly

You may actively provide us with the following information when you register an account, browse our catalog of Simple Ceramic Vases, Home Decor Ornaments, New Arrivals, and Best Sellers, place orders, participate in promotional activities, or interact with our customer support team:

  • ‌Account Registration and Identity Information‌: Your mobile phone number, email address, account password, and if you choose to complete identity verification, your full name and relevant identity document information where applicable.
  • ‌Shopping and Order Information‌: The product and service information you purchase, delivery address, contact phone number, consignee name, order amount, selected payment method, and order related notes.
  • ‌Payment Information‌: When you complete payment for your order, you will provide information related to your selected payment method, such as bank card details or third-party payment account information. This payment information is directly processed by your selected payment service provider, and we generally only receive payment result notifications to confirm that your transaction has been successfully completed.
  • ‌Voluntarily Provided Content‌: Any additional information you choose to share with us, such as product review content, feedback on our home decor products, or personalized requests for custom orders.

5.2 Information Collected Automatically

When you access and use our website www.ambiancesshop.com, we automatically collect certain technical information to improve your browsing experience and ensure platform security:

  • Device information including your device model, operating system version, unique device identifier, and network information
  • Website access log information including your IP address, browsing time, pages viewed, search keywords, and interaction records with our product pages for ceramic vases, home ornaments and other decor products
  • Location information, if you have granted us permission to access your geolocation data, to provide region-specific product recommendations and accurate delivery service estimates.

6. How We Use Your Personal Information

We use the collected personal information for the following explicit, legal purposes that are necessary to operate our e-commerce platform for home decor:

  1. To create and manage your user account, verify your identity, and provide you with core platform functionalities including browsing our full product catalog, adding items to your shopping cart, and completing checkout processes.
  2. To process your placed orders, complete payment verification, arrange product delivery, send you order status updates, and provide comprehensive after-sales services for your purchased home decor items.
  3. To personalize your user experience: we analyze your browsing and purchase preferences to recommend relevant Simple Ceramic Vases, Home Decor Ornaments, New Arrivals, and Best Sellers that match your home decor style interests.
  4. To send you necessary service notifications, including order confirmations, delivery alerts, product restock alerts for items you have favorited, and updates related to changes to our service terms or this Privacy Policy.
  5. To send you optional marketing communications, including information about new product launches, exclusive promotions, and limited-time discount events for our home decor collection, which you may opt out of at any time.
  6. To maintain the security and stability of our website, detect and prevent fraudulent transactions, abuse of platform services, and other illegal activities that may threaten the safety of our users.
  7. To comply with applicable legal obligations, resolve disputes with users, and enforce our user agreements and platform rules.

All processing activities strictly follow the purpose limitation principle of GDPR, and we will never repurpose your personal information for uses unrelated to the original purposes stated in this policy without obtaining your separate explicit consent.

7. Information Sharing and Disclosure

We will never sell, rent, or otherwise transfer your personal information to third parties for their marketing purposes without your explicit separate consent. We may share your personal information only in the following limited circumstances:

  • ‌Trusted Service Providers‌: We may share necessary information with our carefully selected business partners who provide services on our behalf, including payment processing providers, logistics and delivery companies, cloud service providers that host our website, and customer support outsourcing partners. All these third parties are required to sign strict data processing agreements with us, and they may only process your personal information in accordance with our explicit instructions and in full compliance with applicable data protection laws.
  • ‌Legal Requirements‌: We may disclose your personal information if required by law, court order, or competent government authority, to protect our legal rights, property, or the safety of our users, the general public, and our platform.
  • ‌Business Transaction Transfer‌: In the event of a merger, acquisition, asset sale, or similar business transaction involving our company, your personal information may be transferred as part of the relevant assets. We will provide prior notice before any such transfer of your personal information occurs.

8. Data Storage and Security

All personal information we collect is stored on secure servers located in the European Economic Area, in full compliance with GDPR data residency requirements. We will only retain your personal information for the strictly necessary period to achieve the purposes for which it was collected: we keep order related information for 10 years in compliance with Luxembourg commercial and tax laws, and we retain basic account information for the entire duration that your account remains active, plus a reasonable grace period after you choose to delete your account, to comply with legal claim retention requirements.

We implement comprehensive technical and organizational security measures to protect your personal information:

  • We use industry standard end-to-end encryption for all data transmission on our website, including payment information submission processes
  • Our servers are protected by multi-layer firewalls, regular security patches, and 24/7 intrusion monitoring systems
  • All of our staff who have access to user personal information are required to complete regular data protection compliance training and sign strict non-disclosure agreements
  • We conduct periodic security audits and penetration testing to identify and resolve potential vulnerabilities in our data processing systems.

For international data transfer scenarios where personal information may be transmitted outside the European Economic Area, we rely on appropriate safeguards that meet GDPR Article 46 requirements, including using certified mechanisms such as the Europrivacy framework that has been approved for international data transmission by the European Data Protection Board, to ensure that your personal information receives equivalent levels of protection after transfer. Our platform also participates in relevant local certification mechanisms such as Luxembourg’s GDPR-CARPA framework, to demonstrate our full compliance with all local data protection regulatory requirements.

9. Your Rights as a Data Subject

Under applicable data protection laws including GDPR, you hold a comprehensive set of rights over your personal data, and we have established clear processes to respond to all your relevant requests in a timely manner, generally within 30 days:

  1. ‌Right to Information‌: You have the right to be fully informed about why your personal data is collected, how it is processed, who it may be shared with, and all other relevant details of our processing activities, all of which are clearly explained in this Privacy Policy.
  2. ‌Right of Access‌: You have the right to confirm whether we are processing your personal information, and if processing is ongoing, you may request a free copy of all the personal data we hold about you, along with full supplementary details about the processing activities.
  3. ‌Right to Rectification‌: If you find that the personal information we hold about you is inaccurate or incomplete, you have the right to request that we immediately correct the relevant data, and complete any incomplete personal data considering the purposes of processing.
  4. ‌Right to Erasure (Right to be Forgotten)‌: You have the right to request that we delete all your personal information we hold, under circumstances where the personal information is no longer necessary for the original collected purposes, you have withdrawn your consent to processing, or our processing activities no longer have valid legal grounds. This right does not apply where we are legally required to retain the relevant data to fulfill legal obligations.
  5. ‌Right to Restriction of Processing‌: You have the right to request that we suspend processing of your personal information, for example during the period when we are verifying the accuracy of your data if you raise an objection to its correctness, or when we are reviewing the legitimacy of our processing activities.
  6. ‌Right to Data Portability‌: You have the right to receive all the personal data you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another data controller without hindrance from our side, for processing activities based on your consent or contract performance.
  7. ‌Right to Object‌: You have the right to object to our processing of your personal data at any time, for processing activities based on our legitimate interests. If you object to our use of your personal information for direct marketing purposes, we will immediately stop all related processing activities for that purpose.
  8. ‌Right to Object to Automated Decision-Making‌: You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you. We do not conduct any such automated decision-making activities that produce significant legal impacts on our users.

To exercise any of the above rights, you may contact us at any time using the contact information provided in Section 1 of this policy. We may need to verify your identity first to ensure that the request is submitted by the legitimate account holder, before processing your application.

10. Children’s Privacy

Our e-commerce platform and home decor products are intended for use by adult consumers. We do not knowingly collect personal information from children under the age of 16. If we discover that we have collected personal information from a child under 16 without verified parental consent, we will immediately take steps to delete the relevant information from all our systems. If you believe we may hold personal information of a minor, please contact us immediately so we can address this situation promptly.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time, to reflect changes to our business operations, new service features, updates to applicable legal regulatory requirements, or following regulatory guidance. When we make material changes to this policy, we will notify you through obvious channels on our website www.ambiancesshop.com, such as placing a prominent notice on our homepage, and send a notification to your registered email address. The updated policy will take effect on the date stated in the revised version, and your continued use of our Services after the effective date of the revised policy will constitute your acknowledgement and acceptance of the updated terms.

12. Contact Information

If you have any questions, comments, or concerns about this Privacy Policy, or any matters related to how we process your personal information, you may contact us at any time:
‌Création d’Ambiances S.à r.l.‌
Postal Address: 18 Rue de la Boucherie, L-1247 Luxembourg, Luxembourg
Email Address: [email protected]
Telephone: +352 2627 0263

If you are not satisfied with our response to your data protection related inquiry, you also have the right to submit a complaint to the competent local data protection authority in Luxembourg, the Commission nationale pour la protection des données (CNPD).