Privacy Policy

Last updated: October 2025

Personal data protection is one of the core values of the SMCP group (Maje brand). By using our website (the "Website"), you acknowledge that you have read this privacy policy ("Privacy Policy"), which governs the use and protection of your personal data collected when using our Website, i.e. any information that directly or indirectly identifies you ("Data" or "Personal Data"), such as your last name, first name, postal address and email address.

1. Who are the Data Controller and the Data Protection Officer?
2. What Personal Data do we collect?
3. Why do we use your Personal Data?
4. What rights do you have with regard to your Personal Data?
5. Who are the recipients of your Personal Data?
6. Transfers of your Personal Data outside the European Union
7. Security and confidentiality of your Personal Data
8. How long do we keep your Personal Data?
9. Miscellaneous

1. Who are the Data Controller and the Data Protection Officer?

The regulations define two key roles in the protection of your Data:

- the Data Controller, who determines the purposes for which your Data is collected. This is the company Maje, whose registered office is located at 2 Rue de Marengo, 75001, Paris, registered in the Paris Trade and Companies Register under number 382 544 310 ("Maje", "we", "us"), which can be contacted by email by completing the "Personal data" section of the contact form located on the contact page of the Website;

- the Data Protection Officer ("DPO"), who is responsible for ensuring that the processing carried out by the Data Controller complies with personal data regulations. Maje's DPO can be contacted for any question relating to your Personal Data by email at the following address: dpo@smcp.com or by post at: DPO, Maje, 49 Rue Etienne Marcel, 75001, Paris.

2. What Personal Data do we collect?

Your Personal Data is collected, for example, when you fill in the dedicated forms on the Website or when you create your customer account on the Website, when you buy or trade in a second-hand product via the Website, when you contact the customer service department and, more generally, when you browse our Website. Personal Data refers to the following:

• Information collected when creating your account on the Website such as your last name, first name, email address, password, your contact preferences regarding the newsletter subscription, and your telephone number.
• The information needed to manage and monitor your purchases and/or trade-ins, such as your card details for carrying out the transaction, your purchase/trade-in history (e.g. amount of purchase, references of products traded in and/or purchased), and your written or telephone exchanges with our customer service department;
• Information collected during your browsing on the Website such as your browsing history (e.g. date, time of connection and/or browsing, pages visited), type of terminal and browser, your location, browser language, access provider, IP address.

3. Why do we use your Personal Data?

We use your Personal Data for several reasons.

Our primary objective is, of course, to always satisfy you as a customer. In this respect, we collect the majority of your Data in the context of your purchases or trade-ins, in particular in order to trade in and/or deliver your second-hand products and to support you throughout our relationship.

We may also collect your Data when you give us your consent for purposes that will enhance your experience with our brand.

Finally, other Data is collected because it is required for a legitimate purpose (for example, to enable you to access and use our Website).

Below, you will find further examples of the purposes for which Data is collected:

Legal basis and purposes of processing:

- Your purchase:

• Ensuring delivery of your purchased products
• Managing customer relations and any complaints you may have
• Managing requests relating to the exercise of your rights with regard to Personal Data

- Your sales action (trade-in service):

• Producing the delivery note for your parcel
• Managing customer relations and any complaints you may have
• Managing requests relating to the exercise of your rights with regard to Personal Data

- Your consent: Receiving our newsletter and personalised offers

- Our legitimate interest:

• Access to and use of the Website
• Analysing and improving service quality and performance
• Tracking use of the Website and improving your experience
• Preserving our rights
• Managing transactions and combating fraud
• Drawing up statistics and segmentations, studies and analyses to improve our knowledge of our customers
• Sharing data within the SMCP group for customer knowledge purposes

4. What rights do you have with regard to your Data?

In accordance with the regulations applicable to Personal Data, you have the following rights and may exercise them:

• Right of access: you have the right to access the Personal Data we process;
• Right to rectification: you have the right to ask us to rectify your Data if it is inaccurate or incomplete;
• Right to erasure: you have the right to ask us to delete your Data (subject to the terms laid out in Article 8 below);
• Right to object: you have the right to ask not to receive any more communications from us by using our online forms, our links at the bottom of our emails, or by replying STOP by SMS;
• Right to data portability: you have the right to request the portability of your Data, if the conditions for exercising this right are met;
• Right to information: you have the right to obtain information about how we process your Data.

To exercise your rights, you can fill out the "Personal Data" section of the contact form on the Website's contact page or send an email to the following address: dpo@smcp.com. We may ask you to provide proof of identity if we have reasonable doubts about your identity.

We undertake to reply as soon as possible after receiving your request.

If you no longer wish to receive our newsletters, you can click on the unsubscribe link at the bottom of our emails.

Please note that you have the option of registering on the Bloctel telephone anti-solicitation list. If you do so, we will not contact you using the contact details sent to Bloctel.

5. Who are the recipients of your Personal Data?

Your Data is primarily intended for use by our teams. It may sometimes be communicated to external recipients for the reasons described below. In any event, the recipients of your Data are selected by us on the basis of their competence in terms of Data security and confidentiality. We sign contracts with these recipients to ensure that their systems maintain a high level of security. These include our service provider in charge of the trade-in service; our service providers in charge of optimising and analysing the operation of our websites, ensuring your transactions and the security of payments; our service providers in charge of logistics (storage, preparation and delivery of your products), or our customer service; and our service providers in charge of marketing and sales research.

Your Data may also be transferred to third parties, (1) subject to your prior consent, for processing in accordance with the purpose or purposes for which your Data was collected or (2) where we are required to do so by law, in connection with legal proceedings, or in response to an imperative request from a public authority or (3) if we are involved in a merger, acquisition or transfer of assets.

6. Transfers of your Personal Data outside the European Union

In the event that Personal Data is transferred to a country outside the European Union, we undertake to take the necessary technical and organisational measures to guarantee an equivalent level of security for your Data as if it had remained within the European Union.

We require these Data recipients to implement the necessary measures to ensure the same level of protection as that required by European regulations on personal data, for example by using the European Commission's standard contractual clauses, the so-called Binding Corporate Rules (BCR).

7. Security and confidentiality of your Personal Data

We implement technical and organisational measures to ensure the security, integrity, authenticity and confidentiality of Personal Data. We ensure that our partners maintain a similar level of protection for your Personal Data as we do. We also ensure that your transactions are secure by implementing appropriate measures to combat fraud.

8. How long do we keep your Personal Data?

We keep your Personal Data for the time strictly necessary to achieve the purposes for which it was collected. We therefore keep:

• your Personal Data, with the exception of your bank details, which are collected and processed by our service providers responsible for managing payments, for 3 years from the date of the last interaction between us (i.e. your last purchase, the last contact (call, email, chat or social network interaction) with our customer service department, the opening of our newsletter, or, failing that, the date on which the customer profile was created);
• connection logs, which are collected, with your consent, using cookies and other trackers used as part of the service, for a period not exceeding thirteen (13) months. For more details, please refer to the "Cookie Policy"

Your bank details are kept by our payment partners. When you place your order, you will need to enter your bank details in the fields provided.

Once your Data has been deleted from our database, some of your Data may be kept in archive form with restricted and strictly limited access for the purposes of satisfying our legal, accounting and tax obligations, as well as to manage any claims and guarantee claims within the applicable limitation periods.

Once your Personal Data is no longer required for the purposes for which it was collected or for archiving purposes in order to comply with our legal obligations or for the purposes of the applicable limitation periods, your Data will be irreversibly anonymised.

At any time, you may ask us to delete all or part of your Data, object to its processing or request that it be limited, in accordance with Article 4 above. If you request that your Data be deleted, it will be removed from our database and kept in archive form as indicated above.

9. Miscellaneous

If we change the way we process your Data, we will update our Privacy Policy and inform you accordingly.

Finally, we would like to point out that if you have a complaint about the protection of your Personal Data, you can also contact the French national data protection authority, the Commission Nationale de l'Informatique et des Libertés, whose website can be accessed at the following address: https://www.cnil.fr/