Privacy Policy

1. Introduction

MIRCHICART ("we", "our", or "us") is committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR).

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit or make a purchase from www.mirchicart.com.

2. Data Controller

The data controller responsible for your personal data is:

Mirchicart

Email: support@mirchicart.com

Operating from: Germany

3. Information We Collect

We collect the following categories of personal data:

a) Information you provide directly

• Full name
• Email address
• Phone number
• Billing and shipping address
• Account login details
• Order and purchase history
• Communications with customer support

b) Payment information

Payments are processed securely by third-party payment providers (e.g. Stripe, PayPal). We do not store your full card or banking details.

c) Automatically collected data

• IP address
• Browser and device information
• Cookies and usage data

4. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract performance (order processing and delivery)
• Legal obligations (tax, accounting)
• Legitimate interests (fraud prevention, service improvement)
• Consent (marketing emails, cookies)

5. How We Use Your Information

We use your data to:

• Process and deliver your orders
• Send order confirmations, invoices, and delivery updates
• Provide customer support
• Prevent fraud and ensure platform security
• Improve our website and services
• Send marketing communications only if you have given consent

You can withdraw marketing consent at any time.

6. Cookies & Tracking

We use cookies to:

• Ensure website functionality
• Analyze traffic and improve user experience
• Support marketing and analytics (where consent is provided)

You can manage or withdraw cookie consent via your browser or cookie banner.

7. Data Sharing

We may share your data only with trusted partners such as:

• Payment service providers
• Shipping and logistics partners
• IT and hosting providers
• Legal or regulatory authorities (if required by law)

We never sell your personal data.

8. International Data Transfers

If data is transferred outside the EU, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) are in place.

9. Data Retention

We retain personal data only as long as necessary for:

• Order fulfillment
• Legal and tax requirements
• Customer support and dispute resolution

After this period, data is securely deleted or anonymized.

10. Your Rights (GDPR)

You have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a data protection authority

11. Data Security

We apply appropriate technical and organizational measures to protect your data. However, no online system can be guaranteed 100% secure.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised date.

13. Contact Us

If you have questions or requests regarding this Privacy Policy, contact us at:

support@mirchicart.com