Privacy Policy

This Privacy Policy describes how users’ personal data is collected, used, stored, and protected when accessing and using our online store, in compliance with the General Data Protection Regulation (GDPR – European Union).

By using this website, the user agrees to the practices described in this policy.

Collection of Personal Data

We collect personal information voluntarily provided by users when they:

  • Place an order

  • Create an account

  • Contact customer support

  • Subscribe to receive email communications

The collected data may include, but is not limited to:

  • Full name

  • Shipping and billing address

  • Email address

  • Phone number

  • Payment information (processed by secure third-party providers)

  • IP address

  • Website browsing data

Purpose of Data Use

The collected personal data is used to:

  • Process and deliver orders

  • Manage payments and refunds

  • Provide customer support

  • Send order-related communications

  • Send marketing communications, when authorized

  • Improve the user experience on the website

  • Comply with legal and regulatory obligations

Legal Basis for Data Processing

Personal data is processed based on the following legal grounds:

  • Performance of a contract (order processing)

  • User consent (marketing communications and cookies)

  • Compliance with legal obligations

  • Legitimate interests, where applicable

Data Sharing with Third Parties

Personal data may be shared with third parties strictly necessary for the operation of the store, including:

  • E-commerce platform providers (such as Shopify)

  • Payment processors

  • Logistics and shipping providers

  • Analytics and marketing tools (such as Google Analytics, Google Ads, Meta/Facebook and Instagram Ads)

These third parties process data in accordance with their own privacy policies and in compliance with the GDPR.

5. Cookies and Similar Technologies

We use cookies and similar technologies to:

  • Ensure the proper functioning of the website

  • Analyze browsing behavior

  • Personalize content and advertisements

  • Measure marketing campaign performance

Users may manage or disable cookies through their browser settings. Please note that disabling cookies may affect website functionality.

Marketing Communications

By providing their email address, users may opt in to receive promotional and informational communications.

Users may unsubscribe at any time via the unsubscribe link included in our emails or by contacting our support team.

Data Storage and Security

We adopt appropriate technical and organizational measures to protect personal data against unauthorized access, misuse, alteration, or disclosure.

Personal data is stored only for as long as necessary to fulfill the purposes described in this policy or as required by law.

Data Subject Rights (GDPR)

In accordance with the GDPR, users have the right to:

  • Access their personal data

  • Request correction of inaccurate or incomplete data

  • Request deletion of personal data

  • Request restriction of or object to data processing

  • Request data portability

  • Withdraw consent at any time

To exercise these rights, users may contact us using the email address provided below.

Data Retention

Personal data will be retained for as long as necessary to:

  • Fulfill contractual obligations

  • Comply with legal requirements

  • Resolve disputes

  • Enforce our policies

Changes to This Policy

We reserve the right to update this Privacy Policy at any time.

Any changes will take effect upon publication on the website. We encourage users to review this page periodically.

Contact

For questions, requests, or to exercise rights related to privacy and data protection, please contact us at:

📧 support@muffela.com

Final Notice

By using this website, the user confirms that they have read, understood, and agreed to this Privacy Policy.