Privacy policy

Contact and Data Controller
The controller responsible for processing your Personal Data through this
website is Núria Malé Espinalt trading as MON MALÉ.
Registered address:
Sant Fruitós, 16 / 08242 Manresa / BARCELONA

VAT/NIF number: 39348645S
Email: info@monmale.com

If you have questions about this Privacy Policy, wish to exercise your data
protection rights or would like to make a complaint, you may contact us using
the details above.
You also have the right to lodge a complaint with the Spanish Data Protection
Agency (Agencia Española de Protección de Datos) through its website
Personal Data We Collect
When you visit the Site, place an order, subscribe to our newsletter or contact
us, we may collect Personal Data about you. The categories of Personal Data
we collect, the purposes for which we use it and the parties with whom it may
be shared are described below.

Device and Usage Data

Purpose: to display and operate the Site correctly, maintain its security,
remember your preferences, prevent fraud and, where you have
provided the required consent, analyse how visitors use the Site and
measure the performance of our content and campaigns.
Source: collected automatically when you use the Site through cookies,
server logs and similar technologies, as described in the Cookies section
of this Privacy Policy.
Personal Data collected: IP address, browser and device type,
operating system, time zone, general location, cookie and online
identifiers, pages and products viewed, searches performed, referring
website and interactions with the Site.
Legal basis: the provision of the website functionality requested by you; our legitimate interests in maintaining the security and proper operation of the Site; and your consent for non-essential analytics or advertising technologies where required.
Recipients: Shopify, which provides our ecommerce platform, and any analytics or advertising providers configured on the Site, where applicable and subject to your consent.

Order and Transaction Data

Purpose: to process and deliver your order, manage payments, issue
invoices and order confirmations, communicate with you about your
purchase, process returns and refunds, provide customer service and
prevent fraudulent transactions.
Source: collected directly from you when you place an order.
Personal Data collected: name, billing address, delivery address, email
address, telephone number, order details, products purchased,
transaction information and payment status.
Legal basis: performance of the purchase contract; compliance with our
accounting, tax and consumer-law obligations; and our legitimate
interests in preventing fraud and protecting our business.
Recipients: Shopify; the payment provider selected at checkout;
Correos and any other delivery provider required to fulfil the order; and
our accounting, technical or professional service providers where
necessary.

When card payments or other electronic payment methods are used, the full
payment details are processed directly by Shopify or the relevant payment
provider. MON MALÉ does not have access to your complete card number. We
may receive limited transaction information, such as the payment method,
payment status, transaction reference and limited card details.
We do not use the information required to process an order to send marketing
communications unless you have consented to receive them or another lawful
basis applies.

Customer Service Data

Purpose: to respond to questions, manage complaints, returns and
refunds, resolve order-related issues and provide customer support.
Source: collected directly from you when you contact us by email,
through the contact form or through another communication channel.
Personal Data collected: name, email address, telephone number if provided, order number, correspondence, photographs or attachments relating to a product, and any other information you choose to provide.
Legal basis: performance of the purchase contract or steps taken at your request before entering into a contract; compliance with our legal obligations; and our legitimate interest in responding to enquiries and resolving incidents.
Recipients: Shopify, our email service provider and, where necessary to resolve your request, the relevant payment, delivery or professional service provider.

Marketing and Newsletter Data

Purpose: to send you newsletters, information about new collections,
events, promotions and other MON MALÉ news, and to measure the
performance of our communications where permitted.
Source: collected directly from you when you subscribe to our newsletter
or otherwise request marketing communications.
Personal Data collected: email address, name if provided, marketing
preferences and interactions with our communications.
Legal basis: your consent. You may withdraw your consent at any time
by clicking the unsubscribe link included in each email or by contacting
us at info@monmale.com.
Recipients: Shopify and any email-marketing service provider
configured by MON MALÉ.

Minors
The Site is not directed at children under the age of 14. We do not knowingly
collect Personal Data from children under the age of 14 on the basis of their
consent without the authorization of their parent or legal guardian.
If you are a parent or legal guardian and believe that a child under the age of 14
has provided us with Personal Data, please contact us at info@monmale.com
so that we can take the appropriate steps to delete it.

Sharing Personal Data
We may share your Personal Data with service providers where necessary to
operate our online store, process orders, receive payments, deliver purchases
and provide customer service. These providers may include:

Shopify, which provides our e-commerce platform. You can find more
information about Shopify’s privacy practices at Shopify Privacy Policy.
Payment service providers, depending on the payment method
selected when placing an order.
Correos and other delivery or logistics providers, where necessary to
deliver your order.
Email and marketing service providers, where you have subscribed to
receive our commercial communications.
Analytics or advertising providers, but only where these services are
used and, when required, after obtaining your consent.
Professional advisers, courts, public authorities or law-enforcement
bodies, where disclosure is required by applicable law or is necessary to
establish, exercise or defend legal claims.
We only share the Personal Data necessary for each provider to perform the
relevant service.

How We Use Personal Data
We use your Personal Data to:

Display and sell our products through the Site.
Process payments and manage your orders.
Arrange shipping and delivery.
Manage returns, exchanges and refunds.
Communicate with you about your order or respond to customer service
enquiries.
Detect and prevent fraudulent transactions and protect the security of the
Site.
Comply with our legal, accounting and tax obligations.
Send you newsletters, information about new products and promotional
communications where you have given your consent or where otherwise
permitted by applicable law.
Analyse and improve the Site, where applicable and subject to your
cookie preferences.

Lawful Basis
We process your Personal Data under the following lawful bases:

Performance of a contract: to process your order, receive payment,
deliver your purchase and manage returns, refunds or customer service
requests relating to your order.
Compliance with legal obligations: to comply with applicable tax,
accounting, consumer protection and other legal requirements.
Your consent: to send newsletters and promotional communications
and to use non-essential analytics or advertising cookies, where
applicable. You may withdraw your consent at any time.
Our legitimate interests: to prevent fraud, protect the security of the
Site, manage and improve our business and establish, exercise or
defend legal claims, provided that these interests do not override your
fundamental rights and freedoms.

Retention
We retain your Personal Data only for as long as necessary for the purposes for
which it was collected and to comply with our legal obligations.

Order, invoice, accounting and transaction records will generally be
retained for up to six years, in accordance with applicable commercial
and tax obligations.
Customer service communications will be retained for the time necessary
to resolve the enquiry and, where applicable, for the relevant legal
limitation periods.
Personal Data used for newsletters and promotional communications will
be retained until you withdraw your consent or unsubscribe. We may
retain a minimal record of your request to ensure that no further
communications are sent.
Data collected through cookies or analytics technologies will be retained
for the periods described in our Cookie Policy.

Once the applicable retention period has expired, the Personal Data will be
deleted, anonymised or securely blocked where required by law.

Your Rights
Under applicable data protection law, you may have the right to:

Request access to the Personal Data we hold about you.
Request the correction of inaccurate or incomplete Personal Data.
Request the deletion of your Personal Data, where legally applicable.
Request the restriction of processing.
Object to certain processing, including direct marketing.
Request the portability of your Personal Data, where applicable.
Withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

To exercise any of these rights, please contact us at info@monmale.com. We
may request additional information where reasonably necessary to verify your
identity.
You also have the right to lodge a complaint with the Spanish Data Protection
Agency (Agencia Española de Protección de Datos)

International Data Transfers
Some of our service providers, including Shopify, may process Personal Data
outside the European Economic Area.
Where Personal Data is transferred to a country that has not been recognised
as providing an adequate level of data protection, appropriate safeguards will
be used, such as the European Commission’s Standard Contractual Clauses,
Binding Corporate Rules or another legally recognised transfer mechanism.
More information about Shopify’s international data transfers and safeguards is
available in the Shopify Data Processing Addendum.

Cookies
We and our service providers, including Shopify, use cookies and similar
technologies to operate the Site, remember your preferences, manage the
shopping cart and checkout process, protect the security of the Site and
understand how visitors interact with it.
Strictly necessary cookies are required for the Site to function correctly and do
not require your consent. Where required by applicable law, analytics,
marketing and other non-essential cookies will only be used after you have
provided your consent.
You can accept, reject or modify your cookie preferences at any time through
the “Cookie Preferences” link available on the Site. Withdrawing your consent
will not affect the lawfulness of processing carried out before its withdrawal.
You can find more information about the cookies used by Shopify, including their
purposes and duration, in the Shopify Cookie Policy.

If we use additional cookies, pixels or similar technologies provided by third
parties, these will be identified in our cookie preferences panel or Cookie Policy.

Changes
We may update this Privacy Policy from time to time to reflect changes to our
practices or for operational, legal or regulatory reasons. The updated version
will be published on this page together with its most recent revision date.
Complaints
If you have a question or complaint regarding how we process your Personal
Data, please contact us at info@monmale.com or by using the postal address
provided in the “Contact” section above.
If you are not satisfied with our response, you have the right to lodge a
complaint with the Spanish Data Protection Agency (Agencia Española de
Protección de Datos)
Last updated: 20 August 2026