PRIVACY POLICY

Mahéquline ® ApS

This website is managed by Mahéquline® ApS, a registered company in Denmark and United States. We value your privacy and are committed to protecting your personal data. This policy outlines how we collect, process, and protect your data when you visit our website or make a purchase.

Who is Responsible for Your Data?

Mahéquline® ApS is the data controller responsible for the personal data you provide and ensures compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

What Data Do We Collect?

We collect personal data when you:

Place an order
Subscribe to our newsletter
Contact customer service
Browse our website (via cookies)

This may include:

Name, email, phone number, and address
Payment and transaction details (handled securely by third-party providers)
Technical information such as IP address, device type, and browsing behavior

Where Do We Store Your Data?

Your data is stored within the European Economic Area (EEA). However, some third-party service providers may process data outside the EEA. In such cases, we ensure compliance with EU data transfer regulations, using mechanisms such as Standard Contractual Clauses (SCCs) or other approved safeguards.

Who Has Access to Your Data?

We do not sell or share your personal data for marketing purposes. Data is only shared with trusted third-party service providers for order processing, payment handling, and shipping.

These include:

Payment Processors (e.g., Shopify Payments, PayPal, Klarna)
Shipping Providers (e.g., GLS, FedEx, UPS)
Marketing & Analytics Platforms (e.g., Google Analytics, Meta)

Legal Basis for Processing Data

We only process your data where legally permitted, including:

Contractual necessity (e.g., order fulfillment)
Legal obligations (e.g., tax compliance)
Legitimate business interests (e.g., website improvement)
Your consent (e.g., email marketing, cookies)

You can withdraw consent at any time.

Your Rights Under GDPR

As an EU resident, you have the following rights:

Right to Access – Request a copy of your personal data.
Right to Portability – Transfer your data to another provider.
Right to Rectification – Correct inaccurate or incomplete data.
Right to Erasure – Request deletion of your data, except where we have a legal reason to retain it (e.g., tax records, open orders).
Right to Object – Object to data processing based on legitimate interest.
Right to Restriction – Limit processing while disputes are resolved.
Right to Withdraw Consent – Opt-out of marketing emails at any time.

To exercise these rights, contact customer@mahequline.com.

Data Retention

We keep personal data only as long as necessary for legal and business purposes, including:

Order data: Retained for 5 years as per Danish bookkeeping laws.
Marketing data: Retained until you withdraw consent.
Customer service inquiries: Retained for up to 12 months after resolution.

Cookies & Tracking Technologies

Cookies help us improve your experience by:

Saving preferences (e.g., currency selection)
Tracking website traffic and interactions
Enhancing security

Most browsers allow you to manage or disable cookies. However, some site functions may not work properly without them.

Third-Party Services & International Data Transfers

We use third-party services that may process your data outside the EU/EEA. These providers comply with GDPR-approved safeguards for international transfers, such as:

Standard Contractual Clauses (SCCs)
Data Processing Agreements (DPAs)
Privacy Shield Framework (where applicable)

Currency Conversion

By using our website, you consent to third-party processing of your IP address to determine your local currency. This is stored via session cookies, which are automatically deleted when you close your browser.

Security Measures

We implement strict security measures to protect your data against unauthorized access, loss, misuse, or alteration. Payment details are encrypted and processed by PCI-DSS compliant providers.