Privacy policy

This page is also available in French: Politique de confidentialité.

Last updated: 8 November 2026

1. Controller

Executionists, trading under the business name “Mie Gallery”
12773 Caswell Avenue, #104, Los Angeles, CA 90066, USA
Email: info@miegallery.com · Phone: +1 310 435 7452

Representative in the European Union (Article 27 GDPR)
Executionists, trading as “Mie Gallery”, has designated the following representative in the European Union under Article 27 of the General Data Protection Regulation (GDPR):

Cloudkasten GmbH
Seestr. 20 G
50374 Erftstadt, Germany
Email: shopify-9576022094@rep4.eu
Verify the designation: https://rep4.eu/verify/bd3b3b4d-2e93-4e93-afad-a51f7607087f/

Data subjects residing in the European Union may contact our representative with any question about the processing of their personal data and the exercise of their rights under the GDPR.

2. Overview

This policy applies to our sites for customers in France, miegallery.com/fr-fr and miegallery.com/en-fr, and to our French-language social network profiles (section 11). We process personal data only to the extent necessary to operate the site, process your order, answer your enquiries and present our offer on social networks, or on the basis of your consent.

We are established in the United States and process your data there. When you give us your data directly, that alone is not a transfer to a third country within the meaning of Chapter V GDPR. When we pass your data on to other recipients outside the European Union, that can be such a transfer, even if the recipient is also established in the United States. The GDPR applies to our processing because this offer is directed at customers in France.

Recipients outside the European Union and basis of the transfer.

  • Shopify Inc., Canada (shop platform, section 3): for Canadian organisations within the scope of the Canadian data protection law PIPEDA, there is an adequacy decision of the European Commission. Shopify also processes data in other countries. Shopify's data processing addendum provides binding corporate rules for certain transfers within the Shopify group and the European Commission's standard contractual clauses for other transfers (shopify.com/legal/dpa).
  • United Parcel Service (UPS) and United States Postal Service (USPS), USA (delivery, section 6): passing on your name, address and contact details is necessary to deliver your order (Article 49(1)(b) GDPR).
  • Google LLC, USA (our mailbox info@miegallery.com and reCAPTCHA, section 8; audience measurement and advertising, section 10), Meta Platforms, Inc., USA (sections 10 and 11), Pinterest, Inc., USA (section 11), Buffer, Inc., USA (section 11) and Intuition Machines, Inc. (hCaptcha), USA (section 8): according to their own statements, these companies are certified under the EU-U.S. Data Privacy Framework, which is the subject of an adequacy decision of the European Commission. For the online withdrawal function (section 8), Fly.io, Inc. and Twilio Inc. (SendGrid), USA, service providers of Visionz GmbH, are likewise certified under that framework according to their own statements.

On request to info@miegallery.com you can obtain a copy of the safeguards or information on where they are available.

3. Hosting and shop platform

Our site runs on the Shopify platform. Our contracting party is Shopify Inc., 151 O'Connor Street, Ottawa, Ontario, Canada. Shopify processes the data on our behalf (Article 28 GDPR). If you use Shop Pay, Shopify processes your data to that extent as a separate controller. When you visit, technically necessary data is processed, such as the IP address, the date and time of access, the pages viewed, the browser and the operating system. The legal basis is our legitimate interest in a secure and functioning service (Article 6(1)(f) GDPR).

4. Cookies and consent

We use strictly necessary cookies without consent, for example for the cart and the language choice (Article 82 of French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties). We use all other cookies and similar technologies, in particular for audience measurement and advertising, only with your consent (Article 82 of the same law; Article 6(1)(a) GDPR). You give or refuse it through our cookie banner; refusing is as easy as accepting. You can withdraw your consent at any time, for the future, using the “Cookie preferences” link at the bottom of every page.

5. Orders and payment

When you place an order, we process the data entered at checkout: name, delivery and billing addresses, email address, phone number, prints ordered and payment information. The legal basis is the performance of your order (Article 6(1)(b) GDPR). This data is necessary for the order; without it we cannot carry it out.

Payment is processed by Shopify Payments. Your payment data (for example card data) is processed by Shopify and by the payment providers Shopify uses; we do not receive your full card details. Technical data such as the IP address may be checked to prevent fraud (Article 6(1)(f) GDPR). If you use Apple Pay, Google Pay, Shop Pay or PayPal, the privacy terms of those providers also apply.

How long we keep order data is set out in section 12.

6. Delivery and customs clearance

For delivery, we pass your name, delivery address, email address and phone number to the carrier we use: United Parcel Service (UPS) or the United States Postal Service (USPS), which hands the parcel over to La Poste in France. The legal basis is the performance of your order (Article 6(1)(b) GDPR) and our legitimate interest in delivery (Article 6(1)(f) GDPR).

As your order is imported from the United States, the shipping documents contain the data needed for the customs declaration (name and address of the recipient, description and value of the goods). It is passed to the customs authorities via the carrier (Article 6(1)(b) and (c) GDPR).

7. Customer account

If you create a customer account, we store your details and your orders so that you can view them. The legal basis is Article 6(1)(b) GDPR. You can have your account deleted at any time by writing to info@miegallery.com.

8. Contact by email or form

When you write to us, we process your data to answer your enquiry (Article 6(1)(f) GDPR; for enquiries about an order, also Article 6(1)(b)). To combat spam, Shopify uses a captcha service on forms (Google reCAPTCHA or hCaptcha). Technical data such as the IP address is passed to the provider (Article 6(1)(f) GDPR).

Withdrawal through our online form. If you withdraw using the “Withdraw from contract” function, we process your name, your email address, your order number, the related order data (items ordered and address) and, if given, your reason for withdrawal and the date and time of receipt, in order to process the withdrawal and acknowledge its receipt (Article 6(1)(b) and (c) GDPR in conjunction with Article L221-21 of the French Consumer Code). For this function we use the “EU Widerrufsbutton” app of Visionz GmbH, Richthofenstr. 29, 31137 Hildesheim, Germany, which processes the data on our behalf (Article 28 GDPR). Visionz uses further service providers: Fly.io, Inc. for hosting, and Brevo SAS (France) and, as a fallback, Twilio SendGrid (USA) for sending email. Data may be transferred to the USA in the process.

9. Newsletter

If you sign up for our newsletter, we use your email address to send you news about our prints. The legal basis is your consent (Article 6(1)(a) GDPR). After signing up, you receive an email asking you to confirm; we send the newsletter only after this confirmation. You can unsubscribe at any time using the unsubscribe link in every email.

10. Audience measurement and advertising (only with your consent)

Shopify analytics. Shopify records for us how the site is used, for example the pages viewed and where visits come from.

Google Analytics and Google Ads. We use services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which measure the use of the site and the effectiveness of our advertising. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework.

Meta pixel. We use the pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, which measures the effectiveness of our advertising on Facebook and Instagram. We are joint controllers with Meta for the collection of data on our site (Article 26 GDPR). Data may be transferred to Meta Platforms, Inc. in the USA. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework.

These services are loaded only with your consent (Article 6(1)(a) GDPR; Article 82 of Law No. 78-17).

Wishlist. The “Add to wishlist” function lets you save prints for later. For this we use the “Wishlist by Square” app of Square Apps (Appsolve, Grigore Mora 11, 011885 Bucharest, Romania). Saved prints are stored in your browser and, if you are signed in, in your customer account; technical data such as the IP address is passed to the provider. Storage takes place only if you use the function yourself (Article 82 of Law No. 78-17). The legal basis is our legitimate interest in offering a convenient wishlist (Article 6(1)(f) GDPR).

11. Social networks

Links on our website. Our website contains links to Instagram, Facebook, Pinterest, TikTok, X (Twitter) and YouTube. These are plain links: no data is transferred until you click a link and open the network.

Our profiles. We also present prints from our shop on our French-language profiles:

  • Facebook: “Mie Gallery France”, facebook.com/miegalleryfr
  • Instagram: instagram.com/miegalleryfr
  • Pinterest: pinterest.com/miegalleryfr

The networks are operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Facebook and Instagram), and by Pinterest Europe Ltd., Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland, together with Pinterest, Inc., USA (Pinterest).

When you visit our profiles or interact with our posts, for example by liking, commenting, sharing, saving or following, the operator processes your data, even if you have no account there or are not logged in. The operator itself decides which data it processes and for what purposes. Details are in its privacy policy: facebook.com/privacy/policy, privacycenter.instagram.com/policy and policy.pinterest.com/en/privacy-policy.

Statistics. The operators give us statistics on the use of our profiles, such as reach and interactions, and the location (country or city), age group and gender of visitors in aggregated form. From these we cannot tell who individual visitors are. We can see what you make visible yourself, such as your comments, that you liked a post or that you follow our profile; Pinterest also shows us the public boards a Pin was saved to, from which the saving account may be identifiable.

We are joint controllers with Meta for the processing of personal data used to produce Facebook Page statistics (Article 26 GDPR). Meta has published an agreement under which Meta Platforms Ireland Limited assumes responsibility for compliance with the GDPR obligations applicable to this processing: facebook.com/legal/terms/page_controller_addendum. We also assume joint controllership for the processing used to produce Instagram and Pinterest statistics; we have no corresponding agreement for that processing.

Buffer. We schedule and publish our posts with the Buffer service of Buffer, Inc., San Francisco, USA. Through its connections to our profiles, Buffer also retrieves for us the comments on our posts (with the commenter's name and profile) and the statistics of our profiles, and processes this data on our behalf (Article 28 GDPR). For the transfer to the USA, see section 2.

Messages and comments. If you write to us through one of these networks, we process your details to reply (Article 6(1)(f) GDPR; for questions about an order, also Article 6(1)(b) GDPR). For questions about an order, it is best to email us at info@miegallery.com.

Legal basis. We run these profiles to present our prints where interested people look for them and to stay in contact with them. The legal basis is this legitimate interest (Article 6(1)(f) GDPR). Where an operator asks for your consent, for example for cookies, the legal basis is that consent (Article 6(1)(a) GDPR); you can withdraw it with the operator.

Links in our posts. Links in our posts carry a campaign parameter (e.g. “utm_source=facebook”) that tells us which network a visit to our website came from. It contains no information about you. It is evaluated only with your consent, by the audience measurement services in section 10.

Transfers to the USA. The operators may transfer your data to Meta Platforms, Inc. or Pinterest, Inc. in the USA. Both state that they are certified under the EU-U.S. Data Privacy Framework (section 2).

Storage period. Posts, comments and messages stay on the network until they are deleted. The operator may keep data beyond that for its own purposes; its privacy policy governs that retention, including of the statistics. We make no copies of our own outside the networks; however, Buffer keeps the comments and statistics it retrieves on our behalf for as long as our Buffer account exists (see “Buffer” above). If we continue handling your enquiry by email, section 12 applies.

Your rights. You can exercise your rights (section 13) with us and with the operator. You may object to processing based on our legitimate interest (section 13). Because only the operator has access to the full data, a request to the operator is usually the most effective. We forward requests about Facebook statistics that reach us to Meta. Meta: help.meta.com/support/privacy (privacy rights requests). Pinterest: help.pinterest.com/data-protection-officer-contact-form.

12. Retention periods

We keep order, customer and account data only in our shop on the Shopify platform; we do not keep copies outside it. We delete or anonymise this data seven years after your last order or, for a customer account without an order, seven years after it was created. This period is based on the tax record-keeping periods in the United States. For any order of 120 euros or more, however, we keep the written record of the contract for ten years from delivery (Article L213-1 of the French Consumer Code). At your request, we delete your data earlier, unless a legal retention obligation applies.

We delete emails to info@miegallery.com, including a withdrawal notified by email, seven years after the enquiry concerned has been closed.

Your email address for the newsletter is kept until you unsubscribe.

Technical connection data (section 3) and audience measurement and advertising data (section 10) are kept by Shopify, Google and Meta for their own periods; we do not keep copies of them.

The Visionz GmbH app for withdrawal via our online form deletes the withdrawal data once the withdrawal has been fully processed and statutory retention periods have expired.

13. Your rights

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection (Article 21), and the right to withdraw consent at any time, for the future (Article 7(3)). You can also set directives on the retention, erasure and communication of your data after your death (Article 85 of Law No. 78-17). To exercise these rights, write to us at info@miegallery.com or to our representative in the European Union.

Right to object. Where we process your data on the basis of our legitimate interest (Article 6(1)(f) GDPR), you may object to that processing at any time on grounds relating to your particular situation (Article 21(1) GDPR). We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where we process your data for direct marketing, you may object at any time without giving reasons (Article 21(2) GDPR). To do so, write to us at info@miegallery.com or to our representative in the European Union.

You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR), in France the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.