Privacy policy

At MalBows, we are committed to protecting your privacy and ensuring that your personal information is handled responsibly and in accordance with applicable international data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.

1. Information We Collect

We collect information that you provide directly to us, as well as information that is automatically collected when you browse or make a purchase on our website. The types of data we may collect include:

  • Order and Transaction Data: Your name, billing and shipping address, email address, payment details (processed securely by our payment providers), and order history.
  • Device and Usage Data: IP address, browser type, operating system, pages viewed, time spent on the site, and referring URLs. This data is collected via cookies and similar technologies.
  • Communication Data: If you contact us via email at support@malbows.com, we may retain the content of your message and your contact details to respond to your inquiry.

2. How We Use Your Information

We use the information we collect for the following legitimate business purposes:

  • To process and fulfill your orders, including sending order confirmations, shipping updates, and delivery notifications.
  • To provide customer support and respond to your requests or questions.
  • To improve our website, products, and services by analyzing usage patterns and customer preferences.
  • To detect, prevent, and address fraud, security issues, or technical problems.
  • To comply with legal obligations, such as tax, accounting, or regulatory requirements.
  • To send you promotional communications, but only if you have opted in to receive them. You may opt out at any time by contacting us or following the unsubscribe instructions in any email.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

  • Performance of a contract: Processing is necessary to fulfill your order or to take steps at your request prior to entering into a contract.
  • Legitimate interests: We may process your data for our legitimate interests, such as improving our services, preventing fraud, and ensuring network security, provided your rights do not override these interests.
  • Consent: Where we rely on your consent (e.g., for marketing communications), you have the right to withdraw it at any time.
  • Legal obligation: We may process data where required by applicable law.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. However, we may share your data with trusted service providers who assist us in operating our website and fulfilling orders, including:

  • Payment processors and fraud prevention services.
  • Shipping and logistics partners to deliver your purchases.
  • IT and cloud service providers who host our website and data.
  • Marketing platforms, only if you have consented to receive communications.

These third parties are contractually obligated to protect your data and may only use it for the specific purposes we specify. We may also disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of MalBows, our customers, or others.

5. International Data Transfers

Your personal information may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home country. When such transfers occur, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or other recognized transfer mechanisms, to protect your data.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

  • Order records are retained for a minimum of 7 years to comply with tax and accounting regulations.
  • Customer communication records are kept for up to 24 months after the last interaction.
  • Usage data and analytics are anonymized or deleted after 26 months.

When data is no longer needed, we securely delete or anonymize it.

7. Security of Your Information

We take the security of your personal data seriously. We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using SSL/TLS protocols.
  • Secure storage of payment information by PCI-DSS compliant payment processors.
  • Regular security audits and monitoring of our systems.
  • Restricted access to personal data to only those employees who need it to perform their job functions.

While no method of transmission over the internet is 100% secure, we strive to protect your data and encourage you to take precautions to protect your own information.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data, subject to legal obligations.
  • Restriction: Request that we limit the processing of your data in certain circumstances.
  • Data Portability: Request a machine-readable copy of your data to transfer to another service provider.
  • Objection: Object to processing based on legitimate interests or for direct marketing purposes.
  • Withdraw Consent: If processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at support@malbows.com. We will respond to your request within 30 days, as required by applicable law. We may need to verify your identity before processing your request.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors come from. Cookies are small text files stored on your device. We use the following types of cookies:

  • Essential Cookies: Required for the website to function properly, such as remembering items in your cart.
  • Analytics Cookies: Help us understand how visitors interact with our site, allowing us to improve our services.
  • Preference Cookies: Remember your choices, such as language or currency preferences.

You can control or disable cookies through your browser settings. However, please note that disabling certain cookies may affect the functionality of our website. For more detailed information, please refer to our Cookie Policy.

10. Children's Privacy

Our website is not intended for children under the age of 16, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal data, please contact us at support@malbows.com, and we will take steps to delete such information promptly.

11. Third-Party Links

Our website may contain links to external websites that are not operated by us. We are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policies of any website you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page, and we will update the effective date at the top of the policy. We encourage you to review this page periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our