Privacy Policy
Effective Date: 2025-09-010
At mixshe (mixshe.store), we respect your privacy and are committed to protecting your personal information. This policy explains how we collect, use, and safeguard your data when you use our website, make a purchase, or interact with our services, in compliance with the EU General Data Protection Regulation (GDPR) and other applicable laws.
1. Data Controller
- Contact: support@mixshe.store
2. Information We Collect
2.1 Personal Data You Provide
- Account Information: When creating an account, we collect your full name, email address, password (encrypted), phone number, and shipping/billing addresses.
- Purchase Data: When placing an order, we collect payment details (e.g., credit card number, expiry date, billing address), order history (e.g., “Women’s Chunky Knit Crew Neck Pullover”), and size preferences.
- Communications: When you contact us (via email, contact form, or social media), we collect your message content, contact details, and any information needed to resolve your inquiry (e.g., photos of a defective sweater).
- Marketing Consent: If you opt in to receive promotional emails, we store your consent status and preferences (e.g., interest in “winter dresses” or “knitwear”).
2.2 Automatically Collected Data
When you visit our website, we collect data via cookies, server logs, and tracking tools:
- Technical Data: IP address, browser type, operating system, device model (e.g., smartphone or laptop), screen resolution, and network provider.
- Usage Data: Pages visited (e.g., “Featured Products” or “Women’s Dresses”), time spent on each page, links clicked (e.g., “Add to Cart” for a turtleneck sweater), search queries (e.g., “winter dress with long sleeves”), and the date/time of your visit.
- Location Data: Approximate location based on your IP address (used to tailor shipping options and regional promotions, e.g., highlighting warm sweaters for colder climates).
3. How We Use Your Data
We process your personal data for the following purposes, based on legal grounds under the GDPR:
| Purpose | Legal Basis |
|---|---|
| Process and fulfill orders (e.g., shipping your sweater, processing payment) | Performance of a contract (Art. 6(1)(b) GDPR) |
| Manage your account (e.g., track order status, save size preferences) | Performance of a contract (Art. 6(1)(b) GDPR) |
| Send marketing communications (e.g., new winter collections, exclusive offers on dresses) | Your consent (Art. 6(1)(a) GDPR) – you can withdraw consent anytime |
| Improve website functionality (e.g., optimizing the “Featured Products” page based on popular items) | Legitimate interest (to enhance our services, Art. 6(1)(f) GDPR) |
| Detect and prevent fraud (e.g., unauthorized purchases of high-value items) | Legitimate interest (to protect our business and customers, Art. 6(1)(f) GDPR) |
| Comply with legal obligations (e.g., tax, accounting, or audit requirements) | Legal obligation (Art. 6(1)(c) GDPR) |
4. Sharing Your Data
We do not sell your personal data to third parties. We may share it with:
4.1 Service Providers
- Payment Processors: Companies like Stripe or PayPal to process payments securely. They receive only necessary payment details and are contractually bound to protect your data.
- Shipping Partners: Carriers (e.g., DHL, USPS) to deliver orders. They receive your name, shipping address, and order details (e.g., “1 x Women’s Floral V-Neck Dress”) to fulfill delivery.
-
IT & Analytics Providers: Third parties that host our website (e.g., cloud services) or provide analytics tools (e.g., Google Analytics) to improve our services. These providers process data only as instructed by us.
- Google Analytics: Collects data on website usage (e.g., which sweaters are viewed most). Learn more about Google’s privacy practices and opt out using the Google Analytics Opt-out Browser Add-on.
4.2 Legal Disclosures
We may share your data if required by law (e.g., court order, tax audit) or to protect our legal rights (e.g., investigating fraudulent returns of knitwear).
5. Cookies & Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience. You can manage cookie preferences via our cookie banner (on the homepage) or browser settings:
- Strictly Necessary Cookies: Essential for website functionality (e.g., logging in, adding items to cart). These cannot be disabled.
- Functional Cookies: Remember your preferences (e.g., saved shipping address, size filter for sweaters) to personalize your experience.
- Analytics Cookies: Collect data on website usage to improve performance (e.g., identifying popular products to feature on the homepage).
- Advertising Cookies: Track your activity to show relevant ads (e.g., retargeting ads for a dress you viewed). These require your consent and can be disabled via the cookie banner.
6. Data Retention
- Account Data: Retained while your account is active. If you delete your account, we erase data unless required by law (e.g., tax records).
- Order Data: Retained for 7 years to comply with tax and accounting laws.
- Marketing Data: Retained until you withdraw consent (e.g., unsubscribe from emails).
7. Your Rights Under Data Protection Laws
Under the GDPR, you have the following rights, which you can exercise by emailing support@mixshe.store:
- Access: Request a copy of the personal data we hold about you (e.g., your order history).
- Rectification: Correct inaccurate or incomplete data (e.g., update your shipping address).
- Erasure: Request deletion of your data (if no legal reason to retain it).
- Restriction of Processing: Ask us to stop processing your data (e.g., while we investigate a complaint).
- Data Portability: Receive your data in a structured, machine-readable format (e.g., to transfer to another retailer).
- Objection: Object to processing based on our legitimate interests (e.g., marketing communications).
8. Data Security
We use industry-standard measures to protect your data, including:
- Encryption of data in transit (SSL/TLS) and at rest (AES-256 encryption).
- Secure access controls (e.g., two-factor authentication for staff accessing customer data).
- Regular security audits and updates to our systems.
While no method is 100% secure, we take all reasonable steps to prevent unauthorized access, alteration, or disclosure of your data.
9. Changes to This Policy
We may update this policy periodically to reflect legal changes or new services. Updates will be posted on this page with a revised effective date. Your continued use of our website after the update constitutes acceptance of the new policy.
For privacy inquiries, contact support@mixshe.store.