Privacy Policy

1. Information We Collect

• Personal Information: Name, email, shipping/billing address, and payment details when you make a purchase.
• Account Information: Login details if you create an account.
• Order Details: Information about products purchased.
• Technical Information: IP address, browser type, device info, and browsing behavior collected through cookies or analytics tools.

2. Lawful Basis for Processing (GDPR)

• Contract: To process and fulfill your orders.
• Consent: For newsletters, marketing emails, and non-essential cookies (you may withdraw consent at any time).
• Legal Obligation: To comply with tax and accounting laws.
• Legitimate Interest: To improve our website, prevent fraud, and ensure security.

3. How We Use Your Information

• Process and ship orders
• Communicate about your order status or support requests
• Send marketing emails or newsletters (only if you opt-in)
• Improve our website, services, and product offerings
• Prevent fraud and protect our website

4. Sharing Your Information

We will never sell your personal data. We may share it only with:

• Service Providers: Payment processors, shipping carriers, hosting providers.
• Legal Authorities: If required by law, regulation, or legal process.
• Business Transfers: In case of a merger or acquisition.

5. Cookies and Tracking Technologies

Our website uses cookies to provide a better shopping experience and analyze traffic. Non-essential cookies (analytics, marketing) will only be set if you give consent via a cookie banner or settings. You can manage or disable cookies in your browser settings at any time.

6. International Data Transfers

If you are located outside the country where our servers are hosted, your data may be transferred internationally. We take steps to ensure your data is protected in accordance with GDPR, such as using providers with appropriate safeguards (e.g., Standard Contractual Clauses).

7. Data Retention

We keep your data only as long as necessary to: fulfill your orders, comply with legal obligations, or resolve disputes.

8. Your Rights (GDPR & Other Privacy Laws)

You have the right to:

• Access your personal data
• Correct or update inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time (for marketing or cookies)

To exercise your rights, contact us at: [Insert Contact Email]. We will respond within 30 days.

9. Children’s Privacy

We do not knowingly collect personal data from children under 13 (or 16 in the EU/UK without parental consent). If we discover such information, we will delete it immediately.

10. Third-Party Links

Our website may link to other sites. We are not responsible for their privacy practices and encourage you to read their policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective Date” at the top will indicate the latest version.

12. Contact Us

If you have questions or wish to exercise your rights under this policy, contact us:

Email: support@mimzymakes.com

If you are located in the EU/UK and are not satisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority.