This Privacy Policy outlines how muskhavenbag (“we”, “us”, or “our”) collects, uses, processes, and safeguards personal information when you visit or make a purchase from www.muskhavenbag.com (the “Site”). We serve customers exclusively within Europe and the United States and are committed to maintaining lawful, transparent, and responsible data management standards in compliance with international privacy regulations (including GDPR and applicable US state privacy laws).

1. Data Controller

muskhavenbag acts as the primary Data Controller responsible for your personal information. If you have any inquiries regarding the processing of your personal data or wish to exercise your privacy rights, please contact our administrative team using the details below:

  • Brand Name: muskhavenbag
  • Official Website: www.muskhavenbag.com
  • Registered Address: 220 Calle Cobre, Zona de Oro del Bajío, Celaya, Mexico
  • Email Address: wardrobe@muskhavenbag.com
  • Telephone: +4616171712

2. Information We Collect

To fulfill your orders and operate our online store efficiently, we collect personal information directly provided by you during your interactions with our Site:

  • Contact Information: Full name, billing address, shipping address, email address, and telephone number.
  • Order Information: Details regarding the floral vases purchased, transaction history, and associated customer service communications.
  • Technical Information & Cookies: IP address, browser type, device information, and standard internet log data collected automatically via browser cookies and standard web technologies to optimize your shopping experience.

3. Payment Processing & Payment Security

We do not store, process, or transmit full credit or debit card numbers on our internal servers.

All financial transactions are processed securely through our designated third-party payment gateway, Stripe. When you complete a purchase on our Site, your payment credential data is transmitted directly to Stripe, which manages your payment details in full compliance with strict global standards, including the Payment Card Industry Data Security Standard (PCI-DSS). We encourage you to review Stripe’s official privacy documentation for detailed information on their data protection measures.

4. How We Use Your Information

We process personal data under applicable legal bases, including contractual necessity (to fulfill your purchase), legal compliance, and legitimate commercial interests. Specific purposes include:

  • Processing, packaging, inspecting, and shipping order purchases placed on our Site.
  • Communicating order confirmations, tracking updates, and responding to customer service inquiries.
  • Complying with statutory tax, accounting, customs, and anti-fraud recordkeeping obligations.
  • Maintaining online store stability and security against fraudulent transactions.

We do not sell, rent, or trade your personal information to third parties for third-party marketing purposes.

5. Data Retention Period

We retain your personal information only for as long as necessary to fulfill the operational purposes for which it was collected, or to satisfy applicable legal, regulatory, tax, and accounting standards:

  • Order and Transaction Records: Retained for up to seven (7) years following transaction completion to comply with standard tax, financial reporting, and commercial regulations across Europe and the United States.
  • Customer Support Correspondence: Retained for up to two (2) years from the date of last contact to ensure service quality, after which it is securely deleted or archived.
  • Technical Logs & Cookies: Retained for the limited duration necessary for security monitoring and server administration.

Upon the expiration of statutory retention periods, personal data is permanently deleted, anonymized, or securely destroyed.

6. International Data Transfers

As our corporate administration is based in Mexico and we deliver products exclusively to clients across Europe and the United States, your information may be transferred and processed across international borders. We enforce appropriate technical and contractual safeguards to ensure that all cross-border data transfers adhere strictly to applicable data protection laws.

7. Your Privacy Rights

Depending on your country or state of residence (including rights granted under the EU/UK GDPR and US state privacy regulations such as CCPA/CPRA), you possess specific rights regarding your personal data:

  • Right of Access: Request a copy of the personal information we hold about you.
  • Right to Rectification: Request corrections to inaccurate or incomplete personal records.
  • Right to Erasure (Right to be Forgotten): Request the deletion of your personal data, subject to legitimate tax and accounting retention requirements.
  • Right to Restriction or Objection: Restrict or object to certain aspects of our data processing.
  • Right to Lodge a Complaint: If you reside in the European Economic Area (EEA) or UK and believe your data has been processed unlawfully, you have the statutory right to lodge a complaint with your local Supervisory Data Protection Authority.

To exercise any of these rights, please submit a clear written request to wardrobe@muskhavenbag.com.

8. Data Security

We implement commercially reasonable physical, technical, and organizational measures designed to protect personal information against unauthorized access, loss, disclosure, or alteration. However, please note that no electronic transmission over the internet or cloud storage infrastructure can be guaranteed as 100% secure.

9. Updates to This Policy

We reserve the right to revise this Privacy Policy periodically to reflect shifts in legal requirements or business operations. Any updated version will be published directly on this page with a revised effective date.