Política de privacidade

Introduction

This Privacy Policy explains how Meirelle Malibulun ("we", "us", "our") collects, uses, shares and protects your personal data when you visit our website, place an order, or otherwise interact with us. We sell premium Mediterranean leather sandals and clogs to customers across Europe, and we are committed to handling your personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable national data protection laws.

This policy applies to all personal data we process about visitors, customers and other individuals who interact with our store. Please read it carefully. If you do not agree with this policy, please do not use our website or services.

Data Controller

The data controller responsible for your personal data is:

  • Company: SICLOPAY LTD
  • Registered address: Spyrou Kyprianou Avenue 14, Lemesos, 3070, Chipre
  • Company registration number / VAT: [Company registration number / VAT number]
  • Contact email for privacy matters: contact@meirellemaibulun.com

For any questions about this policy or about how we handle your personal data, you can contact us at contact@meirellemaibulun.com.

Personal Data We Collect

We collect personal data that you provide to us directly, data generated when you use our website, and data we receive from third-party service providers acting on our behalf. Specifically, we may collect:

  • Order and transaction data: products purchased, order number, order value, currency (EUR), order history, returns and refunds.
  • Identity and contact data: first and last name, billing and shipping address, email address, telephone number.
  • Payment data: payment method and the last digits / token of your card or payment instrument. We do not store full card numbers; payments are processed securely by our payment service providers.
  • Account data: if you create an account, your login credentials and saved preferences.
  • Communications data: the content of messages you send us by email, contact form, or customer support channels, and our responses.
  • Browsing, device and cookie data: IP address, browser type and settings, device identifiers, operating system, pages viewed, referring URLs, time spent on pages, and similar data collected through cookies and comparable technologies.
  • Marketing data: your preferences for receiving marketing communications and your interactions with our emails and advertisements.

How We Use Your Data and Legal Basis

We process your personal data only where we have a valid legal basis under the GDPR. The table below summarises our main purposes and the corresponding legal basis:

  • To process and fulfil your orders (payment, shipping, returns, invoicing) — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • To provide customer support and respond to your enquiries — legal basis: performance of a contract and our legitimate interest in assisting customers (Art. 6(1)(b) and 6(1)(f) GDPR).
  • To manage your account — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • To comply with legal obligations such as tax, accounting and consumer protection laws — legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
  • To prevent fraud and ensure the security of our website and transactions — legal basis: our legitimate interest in protecting our business and customers (Art. 6(1)(f) GDPR).
  • To analyse and improve our website, products and services through analytics — legal basis: your consent for non-essential cookies (Art. 6(1)(a) GDPR) and our legitimate interest in improving our offering (Art. 6(1)(f) GDPR).
  • To send you marketing communications about our products and offers — legal basis: your consent (Art. 6(1)(a) GDPR) or our legitimate interest where permitted for existing customers (Art. 6(1)(f) GDPR). You can withdraw your consent or object at any time.

Sharing Your Data with Third Parties

We do not sell your personal data. We share it only with trusted service providers (processors) who help us operate our store, and only to the extent necessary. These providers act on our instructions under data processing agreements and are required to protect your data. Categories of recipients include:

  • E-commerce platform and hosting providers that operate and store our website and order data.
  • Payment service providers that securely process your payments.
  • Shipping and logistics partners that deliver your orders and provide tracking.
  • Analytics and advertising providers that help us understand website usage and measure marketing performance, where you have consented.
  • Email and communication providers that help us send transactional and marketing messages.
  • Professional advisers and authorities such as accountants, auditors, or public authorities, where required by law.

International Data Transfers

Where our service providers are located outside the European Economic Area (EEA), we ensure your data is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or transfers to countries recognised as providing an adequate level of protection. You may request more information about these safeguards by contacting us at contact@meirellemaibulun.com.

Data Retention

We keep your personal data only for as long as necessary for the purposes described in this policy, after which it is deleted or anonymised. In particular:

  • Order and transaction data: retained for the period required by applicable tax and accounting laws (typically up to 10 years).
  • Account data: retained for as long as your account is active, and deleted upon request or after a prolonged period of inactivity.
  • Customer support communications: retained for as long as needed to resolve your enquiry and for a reasonable period thereafter.
  • Marketing data: retained until you withdraw consent or object to marketing.
  • Cookie and analytics data: retained for the periods specified in our cookie settings, generally not longer than necessary for the relevant purpose.

Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of access: to obtain confirmation of whether we process your data and to receive a copy of it.
  • Right to rectification: to have inaccurate or incomplete data corrected.
  • Right to erasure ("right to be forgotten"): to request deletion of your data where there is no overriding reason to keep it.
  • Right to restriction of processing: to request that we limit the processing of your data in certain circumstances.
  • Right to data portability: to receive your data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
  • Right to object: to object to processing based on our legitimate interests, and to object to direct marketing at any time.
  • Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at contact@meirellemaibulun.com. We will respond within one month, as required by the GDPR. You also have the right to lodge a complaint with your local supervisory authority (data protection authority) if you believe your rights have been infringed.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to function correctly, to remember your preferences, to analyse traffic, and to support marketing. We distinguish between:

  • Strictly necessary cookies: required for the website to operate (e.g. shopping cart, checkout, security). These do not require consent.
  • Functional cookies: remember your choices and preferences to improve your experience.
  • Analytics cookies: help us understand how visitors use our website so we can improve it.
  • Marketing cookies: used to deliver relevant advertising and measure campaign performance.

Non-essential cookies are only placed with your consent, which you give through our cookie banner. You can change or withdraw your cookie preferences at any time via the cookie settings on our website or through your browser settings.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, including encryption of payment transactions, access controls, and secure hosting. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Children's Privacy

Our website and products are not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at contact@meirellemaibulun.com so we can delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

  • Email: contact@meirellemaibulun.com
  • Data controller: SICLOPAY LTD - Spyrou Kyprianou Avenue 14, Lemesos, 3070, Chipre