✨ Get free shipping on orders €99 and up Shop Now ! ✨

SOCIETE RANGEMENT

Search
Close

Privacy Policy

‌Effective Date: September 21, 2026‌

This Privacy Policy is issued by SOCIETE LUXEMBOURGEOISE DU RANGEMENT S.à r.l. (“we”, “us”, “our”), a company registered at 184 Route d’Arlon, L-8008 Strassen, Luxembourg. This policy applies to all personal data processing activities conducted through our e-commerce website available at www.societerangement.com. We are committed to protecting the personal privacy of every user (“you”, “your”) who browses our platform, purchases our home storage products, and interacts with our services. By accessing, browsing, or completing transactions on our website, you acknowledge that you have read, understood, and agree to the terms outlined in this Privacy Policy. We design all our data processing practices to comply with the EU General Data Protection Regulation (GDPR), applicable Luxembourg data protection laws, and other relevant global data protection regulations that govern cross-border and local e-commerce activities.

1. Data Controller Information

For all personal data processing activities described in this policy, we act as the independent Data Controller as defined under GDPR. You may reach us for any privacy-related inquiry, request, or notification through the following contact details at any time:

  • Full Company Name: SOCIETE LUXEMBOURGEOISE DU RANGEMENT S.à r.l.
  • Registered Physical Address: 184 Route d’Arlon, L-8008 Strassen, Luxembourg
  • Contact Telephone: +352 2639 4279
  • Official Contact Email: zincv@societerangement.com
  • Official Website: www.societerangement.com

We will respond to all legitimate user data requests within 30 calendar days of receipt, in full compliance with applicable regulatory requirements.

2. Scope of Personal Information We Collect

We only collect personal data that is strictly necessary to deliver our full e-commerce services, following the legal, legitimate, necessary, and transparent principles set out in global data protection regulations. The personal information we collect falls into two core categories: information you actively provide to us, and information we automatically collect when you use our website services.

2.1 Information You Actively Provide

When you create an account, place an order, subscribe to marketing updates, submit customer service inquiries, or interact with our website features, you may voluntarily provide the following types of personal information:

  1. Account Management Information: Your username, display name, account password, email address, and other profile details you choose to fill in during registration or account updates.
  2. Transaction and Delivery Information: Your full name, contact phone number, detailed shipping address, and specific delivery preferences, which we use to process your order and ensure timely delivery of our bathroom shelves, kitchen organizer racks, and other home storage products you purchase.
  3. Payment Related Information: We do not directly store full credit card, debit card, or financial account details on our local servers. All payment processing is completed through licensed, PCI-DSS compliant third-party payment providers, who share only minimal transaction confirmation data (including order ID, payment timestamp, and transaction success status) with us for order reconciliation and financial audit purposes.
  4. Customer Service and Feedback Information: When you submit consultation requests, product reviews, return applications, or complaint notices to our support team, you may provide additional context including screenshots, usage scenarios of our products, and any other personal details you choose to share to help us resolve your issue efficiently.
  5. Marketing Subscription Information: If you sign up for our email newsletter to receive updates on new arrivals, promotional activities, and exclusive discount offers, we will store your submitted email address and your stated preference for receiving such marketing communications.

2.2 Information Automatically Collected During Your Visit

When you browse our website, our server automatically collects non-intrusive technical information to optimize your browsing experience and ensure platform security, including:

  1. Device and Environment Details: Your device model, operating system version, browser type and plugin configuration, screen resolution, and network connection type. This data helps us adjust our website display to adapt to different hardware and software environments, eliminating compatibility issues that may disrupt your shopping experience.
  2. Log and Access Records: Your public IP address, timestamp of each access, pages you viewed, time spent on each product page, click stream paths, search keywords you entered on our website, and other anonymous operation logs. We use this data to analyze user behavior trends, optimize our product categorization layout, and improve the navigation logic of our shop, new arrivals, and product collection pages.
  3. Anonymous Preference Signals: With your explicit consent, we may deploy anonymized tracking pixels in our marketing emails to understand whether you open the email, click through to our product pages, or interact with our promotional content. All data collected through these pixels is processed in a privacy-first manner, and we will never link this anonymous behavior data to your personal identifiable information without separate explicit authorization.

3. Legitimate Basis and Purpose of Data Processing

We only process your personal data for clearly defined, legally compliant purposes, and we never use your personal information in any way that is incompatible with the original purpose you agreed to at the time of collection. The core processing purposes and corresponding legal bases are as follows:

  1. ‌Performance of Contract‌: Most of our data processing activities are carried out to fulfill our sales contract with you. We use your delivery information to ship your ordered bathroom storage racks and kitchen organizers, process your payment to confirm transaction validity, handle return and refund applications to meet your post-sales demands, and provide basic order tracking services to keep you updated on your shipment status.
  2. ‌Legitimate Interest‌: Under the framework of GDPR, we process a small portion of user data based on our legitimate business interest, which we have carefully balanced against your personal privacy rights to ensure no excessive harm is caused. This includes optimizing our website operation, preventing fraudulent transaction activities, sending service-related notification emails (such as order dispatch alerts and return status updates that are not marketing in nature), and conducting anonymous statistical analysis to improve our product selection and service quality.
  3. ‌Explicit Consent‌: For activities that involve potential higher privacy risks, we will only process your personal data after you provide separate, explicit, revocable consent. This includes sending you personalized marketing emails, storing non-encrypted customer service chat records for an extended period, and sharing necessary delivery information with our partnered logistics providers who are located outside the EU single market. You have the full right to withdraw your consent at any time, and we will immediately cease the corresponding data processing activity after receiving your withdrawal notice.
  4. ‌Legal Compliance‌: We may process and disclose your personal information when we are required to do so by mandatory legal obligations, such as responding to lawful requests from Luxembourg judicial authorities, completing legally required tax declaration and record keeping, and cooperating with official data protection regulator audits.

4. Data Storage and Localization Compliance

We strictly follow the 2026 updated EU data localization requirements that mandate all user transaction and personal data generated from users located in the EU and EEA region to be stored and processed on servers physically located within the territory of Luxembourg or other EU member states.

  • We have completed full localization verification of all data storage locations: all your order data, payment records, customer service chat logs, marketing preference information, and other personal identifiable data is hosted on our EU-based cloud servers, and none of our core user data is transferred to servers located outside the EU without meeting the appropriate adequacy assessment requirements and completing the required cross-border data transfer formalities as required by GDPR.
  • All third-party SaaS tools, CRM systems, and ERP service providers we cooperate with have been screened for full data compliance. We have obtained formal written compliance proof from all our third-party service vendors, confirming that their data processing activities fully meet EU data protection regulations. We take full responsibility for any data compliance risks introduced by our third-party service partners, and we will bear corresponding liabilities to users and regulatory authorities for any non-compliance incidents caused by these vendors.
  • For the storage duration of your personal data, we strictly follow the storage limitation principle. We will only retain your personal data for as long as it is necessary to achieve the original stated processing purpose. Transaction related data will be retained for 10 years as required by Luxembourg commercial and tax laws. After the expiration of the mandatory legal retention period, we will permanently delete or fully anonymize all your personal data in our systems, to ensure no residual identifiable information remains on our servers.
  • All our customer service chat records are stored with end-to-end encryption, and we have built a dedicated system that supports complete data erasure on a per-user basis. At any time, you may submit a request to delete all your personal data in our systems, and we will complete the full data deletion procedure within the statutory time limit to fulfill your “right to be forgotten” as defined in GDPR.

5. Third-Party Data Sharing and Transmission

We will never sell, rent, or trade your personal identifiable information to any unrelated third party for commercial marketing purposes without your separate explicit consent. We only share your necessary personal data with third parties under the following limited circumstances:

  1. Authorized Service Providers: We will share only the minimum necessary information with our trusted third-party partners who support our normal e-commerce operation, including licensed payment processors, professional logistics and delivery companies, website technical maintenance service providers, and email marketing platform vendors. All these third parties are bound by strict data processing agreements signed with us, which require them to protect your personal data to the same security standard we follow, and they are not allowed to process your personal data for any purposes other than the specific services they provide to us.
  2. Business Transfer Scenarios: In the event of a merger, acquisition, asset reorganization, or full or partial transfer of our business assets, the personal user data we hold may be transferred to the corresponding successor entity. We will require the new entity to continue to comply with all the terms of this Privacy Policy, and we will notify all registered users through a prominent notice on our website at least 30 days before the data transfer takes place.
  3. Legal Mandatory Disclosure: We may disclose your personal information when we are legally required to do so, to comply with court orders, governmental regulatory investigation requirements, or other mandatory legal procedures. When the situation allows, we will send you a prior notification before disclosing your data, to give you the opportunity to contest the disclosure request if applicable.

For any cross-border data transfer activities that send your personal data outside of the EU and EEA region, we will ensure that the destination country has an adequacy decision issued by the European Commission, or we will sign the standard contractual clauses approved by the European Commission with the overseas data recipient, to fully guarantee that your personal data can enjoy the same level of data protection as required under EU GDPR regulations.

6. Your Data Subject Rights

As a user located in the EU or EEA region, you enjoy the full set of rights granted to data subjects under GDPR, and we have established a convenient, low-threshold channel for you to exercise these rights at any time:

  1. Right of Access: You may submit a request to obtain a free copy of all your personal data we hold, including detailed descriptions of the processing purposes, data categories, and third-party recipients of your information.
  2. Right to Rectification: If you find that any of your personal information stored in our system is inaccurate or incomplete, you may submit a correction request, and we will update the corresponding information promptly after simple identity verification.
  3. Right to Erasure (Right to be Forgotten): Under circumstances including when your personal data is no longer necessary for the original processing purpose, you withdraw your consent to the processing, or our data processing activities violate relevant laws and regulations, you may request us to completely delete all your personal data in our systems, and we will complete the deletion procedure without unnecessary delay.
  4. Right to Restriction of Processing: You have the right to request us to suspend certain data processing activities, for example when you contest the accuracy of your personal data, or when you object to our processing activities based on our legitimate interest, pending the verification of your request.
  5. Right to Data Portability: You may request us to export all your personal data that you have provided to us, in a structured, commonly used, machine-readable format, so that you can transfer the data to another data controller without any obstruction from our side.
  6. Right to Object: You have the right to object at any time to our processing activities that are based on our legitimate interest, including using your personal data for direct marketing purposes. After you submit an objection to direct marketing, we will immediately stop sending all marketing related emails to your address, without any extra charge or procedural barrier.
  7. Right to Lodge a Complaint: If you believe our processing of your personal data has violated applicable data protection regulations, you have the right to submit a complaint directly to the competent national data protection authority of your country of residence, in addition to the right to seek remedy through local judicial channels.

You may submit all data subject right requests by sending an email to our dedicated privacy inbox at zincv@societerangement.com. We will verify your identity through a simple, non-intrusive process, to prevent unauthorized third parties from accessing your personal data by submitting fake requests, and we will respond to your request within 30 calendar days as required by law.

7. Data Security Protection Measures

We have implemented comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, tampering, or leakage:

  • All data transmission between your browser and our website is protected using industry standard TLS 1.3 encryption protocol, which ensures that your personal data cannot be intercepted or stolen during transmission through the public internet.
  • All sensitive personal data stored on our servers, including your password hash and payment related transaction records, is encrypted at rest using AES-256 military grade encryption technology, so that even if there is an unauthorized intruder who gains access to the storage disk, they cannot read the content of your personal data.
  • We have established strict internal data access permission management system: only a very limited number of authorized employees who need to access your data to complete their job duties (such as customer service staff responsible for handling your order inquiries) are granted the minimum necessary access permission to your personal data, and all access records are fully logged for audit purposes. All our employees who may come into contact with user personal data have completed professional data protection compliance training, and are bound by strict non-disclosure obligations.
  • We conduct regular third-party security penetration testing and data compliance audit at least once every 6 months, to identify potential security vulnerabilities and non-compliance risks in our data processing system, and fix all found issues in a timely manner. In the extremely unlikely event that a personal data breach occurs which may pose a high risk to your personal rights and freedoms, we will notify you and the competent regulatory authority without undue delay, in full compliance with GDPR breach notification requirements.

8. Updates to This Privacy Policy

We may revise and update the terms of this Privacy Policy from time to time, to adapt to changes in new regulatory requirements, our business operation adjustments, or new service features we launch on our website. When we make significant material changes to this policy, we will post a prominent pop-up notification on the homepage of www.societerangement.com, and we will also send a notification email to all registered users who have subscribed to our account service. The updated version of the policy will take effect on the date marked in the “Effective Date” section at the top of the document. Your continued use of our website services after the effective date of the updated policy will be deemed as your acknowledgement and agreement to the revised terms of this Privacy Policy.

If you have any questions, concerns, or suggestions about any content described in this Privacy Policy, please do not hesitate to contact us at any time through the contact channels we provided earlier in this document. We will be more than happy to address your inquiries and help you better understand how we protect your personal privacy when you shop on our e-commerce platform.