Privacy Policy - mandalacalm

Last updated: 1 May 2025

MandalaCalm (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), EU GDPR, and other applicable laws.

1. Who We Are

MandalaCalm is an independent DIY art brand operated by a small business based in Hong Kong. We serve customers in the United Kingdom, the European Union, and other regions.

We act as the data controller for the personal data collected through this website.

Website: https://mandalacalm.com
Email: [email protected]
📬 Our full postal address is available upon legitimate request.

As we are based outside the UK and EU, we currently do not have an appointed GDPR representative under Article 27. However, we are committed to upholding your privacy rights and will respond to all data requests in a timely manner.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

Information you provide directly:

Name
Email address
Shipping and billing address
Phone number
Order and payment information (processed via Stripe or PayPal)
Messages or enquiries sent via our contact form or email

Information collected automatically:

IP address and browser/device data
Page visits, session time, click behaviour
Cookies and analytics identifiers
Referring websites or sources

3. Legal Bases for Processing

We process your personal data based on the following lawful grounds:

Contract: To process and deliver your orders
Consent: For optional email marketing and non-essential cookies
Legal obligation: For tax, accounting, and recordkeeping purposes
Legitimate interests: To improve user experience and ensure site security

4. How We Use Your Information

We use your data to:

Process and fulfil orders
Provide customer service and respond to enquiries
Send order confirmations, delivery updates, or issue-related notifications
Improve website functionality and customer experience
Send marketing emails (only if you have opted in)

We do not engage in automated decision-making or profiling using your data.

5. Sharing Your Information

We only share your data with trusted third parties necessary to operate our services:

Payment processors (Stripe, PayPal)
Shipping partners (Royal Mail, DHL, etc.)
Website infrastructure (Hetzner, Cloudflare)
Analytics services (Google Analytics)

We do not sell or rent your personal information to any third party.

6. International Transfers

As we are based in Hong Kong, your data may be processed or stored outside of your country, including in the UK and EU. We ensure that appropriate safeguards (such as contractual clauses) are in place to protect your information in accordance with applicable data protection laws.