Privacy Policy

Last updated: 16 October 2026

1. Who is responsible for your personal data?

Maludmayla operates maludmayla.com, a website presenting handmade crochet work and offering selected items for sale.

The seller’s identity and contact details are provided in the store’s contact information.

This policy explains how personal data is handled when you browse the website, place an order or contact the seller.

2. What personal data is collected?

Depending on how you use the website, the following information may be processed:

  • Name and billing or delivery address.
  • Email address and other contact details you provide.
  • Order details, purchased items, payment status and transaction references.
  • Information needed to arrange delivery and handle customer enquiries, returns or complaints.
  • Technical information and cookies required for the website and its shopping cart to function.

The website does not intentionally request personal information unrelated to its operation or your order.

3. Why is personal data processed?

Personal data is processed where necessary to:

  • Handle orders and fulfil sales contracts.
  • Arrange payments, shipping, delivery, returns and refunds.
  • Respond to enquiries and complaints.
  • Meet applicable accounting, tax and other legal obligations.
  • Maintain the security and proper operation of the website.

The legal basis depends on the purpose. It may include taking steps at your request before entering into a contract, performing a contract, complying with a legal obligation or pursuing a legitimate interest such as website security.

Where consent is required, data is processed on the basis of that consent.

4. Orders and WooCommerce

The website uses WooCommerce to provide shopping cart and checkout functionality.

When you place an order, information necessary to process the transaction is used to manage the order, payment, delivery, customer communication and any subsequent complaint or return.

Order records may be retained for as long as necessary to fulfil the contract and meet applicable legal record-keeping obligations.

5. Payments

Online payments are supported through WooPayments and its payment-processing infrastructure.

Payment providers process the information necessary to authorise and complete payments in accordance with their own privacy terms and legal obligations. The seller does not store your full payment card number or security code.

For details about the processing carried out by the payment provider, please consult the privacy information made available by the payment service during checkout.

6. Hosting and service providers

The website is hosted by a third-party hosting provider. Technical providers may process limited personal data when necessary to operate, secure and maintain the website.

Personal data may also be disclosed to delivery companies, payment providers, accounting or legal advisers, and public authorities where required by law or necessary to fulfil the purposes described in this policy.

Data is not sold to third parties.

7. Cookies

The website may use cookies and similar technologies required for basic WordPress and WooCommerce functions, such as remembering shopping cart contents, maintaining checkout functionality and supporting security.

Depending on the website configuration, third-party services may also set cookies when their functionality is used.

Non-essential cookies or similar technologies will be used only where required consent has been obtained. You can manage cookies through your browser settings and any consent tool presented on the website.

Blocking essential cookies may prevent some shopping cart or checkout functions from working properly.

8. Comments, accounts and marketing

Visitor comments and public user registration are disabled on the website.

The website does not currently offer a newsletter or use advertising or analytics services as part of its configured store features.

If these features are introduced in the future, this policy will be updated as appropriate before the relevant data processing begins.

9. How long is data retained?

Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected, including order fulfilment, handling disputes and meeting legal obligations.

Order, accounting and tax records may need to be retained for periods prescribed by law. Enquiry correspondence is retained for as long as necessary to respond and keep an appropriate record.

Technical logs and cookies may have different retention periods depending on their purpose and configuration.

10. Your rights

Subject to the conditions laid down by applicable data protection law, you may have the right to:

  • Request access to your personal data.
  • Request correction of inaccurate data.
  • Request erasure or restriction of processing.
  • Object to certain processing.
  • Request data portability where applicable.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with the competent data protection supervisory authority.

To exercise your rights, contact the seller using the contact details provided on this website.

In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO).

11. International transfers

Some service providers may process data outside the European Economic Area. Where personal data is transferred internationally, the relevant provider must rely on a lawful transfer mechanism and applicable safeguards where required by data protection law.

For further information about a particular provider’s processing, please consult that provider’s privacy documentation.

12. Changes to this policy

This policy may be updated if the website, its services or applicable legal requirements change. The latest version will be published on this page with its update date.

13. Contact

For questions or requests concerning personal data, please use the seller’s contact details provided on this website.