Privacy policy

Privacy Policy

Last updated: October 2025
Owner: Maja Lubonski (malumias)
Email: malumias.info@gmail.com
Address: Carrer del Camp, 1, Local 5, 08021 Barcelona, Spain
Platform: Shopify

1. Introduction

This Privacy Policy explains how malumias ("we", "our", or "us") collects, uses, and protects your personal data when you visit or make a purchase from our Shopify store. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection laws.

By using our website, you consent to the practices described in this Privacy Policy.

2. Data Controller

The data controller responsible for processing your information is:

Maja Lubonski
Carrer del Camp, 1, Local 5, 08021 Barcelona, Spain
Email: malumias.info@gmail.com

3. Data We Collect

We collect the following types of information:

  • Personal Identification Data: Name, billing and shipping address, phone number, email address.

  • Order Information: Purchased products, payment status, order value.

  • Payment Data: Payment information processed by trusted third-party providers (we do not store or have access to full payment card details).

  • Communication Data: Messages via contact forms or emails.

  • Newsletter Data: Email address and marketing preferences if you subscribe.

  • Technical Data: IP address, browser type, device information, and analytics data.

4. How We Use Your Data

We process your personal data for the following purposes:

  • To fulfill and ship your orders.

  • To communicate with you regarding purchases, inquiries, or support requests.

  • To send newsletters and marketing emails (only if you have consented).

  • To analyze website traffic and improve user experience (via Shopify Analytics and Google Analytics).

  • To comply with legal obligations, including tax and accounting requirements.

We never sell or rent your personal information to third parties.

5. Legal Bases for Processing

We process your personal data based on one or more of the following legal grounds:

  • Your consent (e.g., newsletter subscription).

  • The necessity to perform a contract (e.g., fulfilling your order).

  • Compliance with legal obligations (e.g., invoicing, tax reporting).

  • Our legitimate interest (e.g., site optimization, fraud prevention).

6. Third-Party Services and Data Sharing

Your data may be shared with the following categories of third parties only as necessary to provide our services:

a) Shopify (Platform Provider)

We use Shopify Inc. (151 O’Connor Street, Ottawa, ON, Canada) to host our online store. Shopify processes personal data on our behalf in accordance with GDPR and participates in international data transfer frameworks. More info: Shopify Privacy Policy

To learn more about how Shopify processes your personal information or to exercise your privacy rights directly with Shopify, visit the Shopify Privacy Portal.

b) Print-on-Demand Partner: Prodigi

Orders of certain art prints are fulfilled by Prodigi Group Ltd, UK. Customer name, delivery address, and order details are securely shared with Prodigi for production and shipping. Prodigi’s privacy notice: https://www.prodigi.com/privacy/

c) Payment Providers

Payments are processed by trusted third parties such as Shopify Payments, PayPal, Stripe, and Klarna. These providers handle payment data directly on secure servers. We only receive confirmation of payment success or failure.

d) Analytics and Cookies

We use Shopify Analytics and may implement Google Analytics (Google Ireland Ltd.) to understand website usage and improve services. Analytics cookies collect anonymous data such as page views and time spent. You can disable cookies through your browser or cookie banner preferences.

e) Shipping Partners

When you order physical products, your address and contact details are shared with postal or courier services for delivery.

7. Cookies

Cookies are small text files stored on your device. They help us ensure the functionality of the website and provide analytics insights. You can control or disable cookies at any time through your browser settings or our cookie consent banner.

Essential cookies (required for checkout and cart functions) cannot be deactivated as they are necessary for the website to operate.

8. Newsletter and Marketing

If you subscribe to our newsletter, we will use your email address to send you updates, promotions, and art news. You can unsubscribe at any time by clicking the link in any email or by contacting us directly.

We use Shopify Email or other GDPR-compliant tools for email marketing.

9. Data Retention

We retain your personal data only as long as necessary:

  • Order data: 6–10 years (for tax/accounting compliance)

  • Newsletter data: until you withdraw consent

  • Contact messages: up to 12 months

After these periods, data will be securely deleted or anonymized.

10. Your Rights (GDPR)

You have the right to:

  • Access your personal data

  • Request correction or deletion

  • Withdraw consent at any time

  • Object to processing

  • Request data portability

To exercise your rights, contact us at malumias.info@gmail.com. If you believe your data protection rights have been violated, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es

11. International Data Transfers

Shopify, Google, and other third-party partners may process data outside the EU (e.g., Canada, USA). Transfers are protected by appropriate safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses.

12. Security Measures

We use HTTPS encryption, secure Shopify servers, and restricted data access to protect your personal information.

13. Children’s Data

This website is not intended for children under 16 years of age. We do not knowingly collect personal data from minors. If you believe your child has provided us personal data, please contact us to request deletion.

14. Updates to This Policy

We may revise this Privacy Policy to reflect operational or legal changes. The most current version will always be available on this website.

Contact:
For questions about this Privacy Policy or data protection matters, please contact:
Maja Lubonski
malumias.info@gmail.com