Effective Date: 18 June 2025
Last Updated: 18 June 2025

1. Introduction

Mavacrest Ltd respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website www.mavacrest.com or purchase our digital products.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.

2. Who We Are

Data Controller:
Mavacrest Ltd
71–75 Shelton Street, Covent Garden
London, WC2H 9JQ, United Kingdom
📧 Email: legal@mavacrest.com

3. What Data We Collect

We may collect and process the following categories of personal data:

a. Identity Data

  • Full name

  • Date of birth (for age verification, if required)

b. Contact Data

  • Email address

  • Phone number

  • Billing address

c. Transaction Data

  • Payment confirmations

  • Purchase history

d. Technical Data

  • IP address

  • Device type, browser, operating system

  • Cookie identifiers

  • Log-in timestamps

e. Usage Data

  • Page visits

  • Time spent on pages

  • Interactions with features or content

f. Marketing & Communication Data

  • Preferences for receiving marketing

  • Email open and click rates

4. How We Collect Your Data

We collect data through:

  • Information you provide directly (e.g., during purchase or email contact)

  • Cookies and tracking technologies (e.g., Google Analytics, Meta Pixel)

  • Third-party payment providers (e.g., Stripe)

  • Customer support forms or live chat

5. Why We Use Your Data (Legal Basis under UK GDPR)

PurposeLawful BasisProcess product purchasesContractSend order confirmationsContractRespond to customer inquiriesLegitimate interestMarketing communicationsConsentPrevent fraud and secure systemsLegitimate interestFulfil legal and regulatory dutiesLegal obligation

You may withdraw consent at any time by emailing legal@mavacrest.com.

6. Marketing Preferences

  • We only send marketing communications to users who have explicitly opted in.

  • You may unsubscribe at any time using the link in our emails or by contacting us directly.

7. Cookies & Tracking

We use cookies for functionality, performance, analytics, and marketing. For more details, please refer to our Cookie Policy.
You may manage cookie preferences on your first visit or via your browser settings.

8. How We Share Your Data

We do not sell your personal data. We may share your data with:

  • Payment processors (e.g., Stripe)

  • Marketing tools (e.g., Omnisend, Meta Platforms)

  • Legal or regulatory authorities, if required

  • Hosting and infrastructure service providers

All third-party partners are contractually required to uphold strict data protection standards.

9. International Transfers

While most data is stored in the UK or EU, we may use providers (e.g., in the US) that require data transfers outside the UK.
When this occurs, we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place.

10. Data Retention

We retain your data only as long as necessary to fulfill the purposes stated above, or as required by law (e.g., 6 years for tax and accounting records).
You may request deletion of your account and associated data at any time.

11. Your Rights Under UK GDPR

You have the right to:
✅ Access your personal data
✅ Request correction of inaccurate data
✅ Request erasure ("right to be forgotten")
✅ Object to processing
✅ Withdraw consent at any time
✅ Request data portability
✅ Lodge a complaint with the ICO

📩 To exercise your rights, email: legal@mavacrest.com
📎 Or visit the Information Commissioner’s Office: https://ico.org.uk/make-a-complaint

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The most recent version will always be available at:
🔗 www.mavacrest.com/legal/privacy-policy

📧 For all privacy-related inquiries, please email: legal@mavacrest.com