Privacy Policy
How Mazah collects, uses and protects your personal data, and the rights you have under the GDPR.
Last updated:
This Privacy Policy explains how [INVULLEN: juridische bedrijfsnaam] ("Mazah", "we", "us") processes your personal data when you visit our website, place an order, or contact us. We are the data controller responsible for your personal data.
1. Who we are
Company: [INVULLEN: bedrijfsnaam]
Address: [INVULLEN: adres]
Chamber of Commerce (KvK): [INVULLEN: KvK-nummer]
VAT (BTW): [INVULLEN: BTW-nummer]
Email: info@mazah.nl
2. What data we collect
- Order & contact data: name, email address, shipping and billing address, phone number.
- Payment data: processed securely by our payment provider; we do not store full card details.
- Technical data: IP address, device, browser and request metadata processed by hosting and content delivery providers. Optional marketing interaction data is processed only with consent (see our Cookie Policy).
- Communications: the content of messages you send us via the contact form or email.
3. How and why we use your data
- To process and deliver your order (legal basis: performance of a contract).
- To respond to your questions and provide support (legitimate interest).
- To send you drop announcements and updates, only if you opted in (consent).
- To comply with legal and tax obligations (legal obligation).
- To improve and secure our website (legitimate interest).
4. Sharing your data
We only share data with processors that help us operate, such as our payment provider, shipping carrier, email, hosting and content delivery providers. These parties act on our instructions under a data processing agreement where required. We never sell your personal data.
5. International transfers
Where data is processed outside the European Economic Area, we rely on appropriate safeguards such as the EU Standard Contractual Clauses. Before using a provider outside the EEA, we verify and document the applicable transfer mechanism and safeguards.
6. How long we keep your data
We keep your data only as long as necessary for the purposes above. Order and invoice records are retained for the period required by applicable tax and accounting law. Contact messages are kept for as long as needed to handle your request.
7. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, and the right to data portability. You can also withdraw consent at any time.
To exercise these rights, contact us at info@mazah.nl. You also have the right to lodge a complaint with your data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).
8. Security
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.
9. Changes to this policy
We may update this Privacy Policy from time to time. The latest version is always available on this page.
10. Contact
Questions about this policy? Email us at info@mazah.nl or use our contact form.