PRIVACY POLICY – MB Wax Creation

1. Data Controller The Data Controller is: MB Wax Creation Contact Email: mbwaxcreation@outlook.com

2. Types of Data Collected While browsing and purchasing on the site, we collect the following types of data:

• Identity and Contact Data: Name, surname, shipping address, billing address, email, phone number.

• Browsing Data: IP addresses, browser type, access times (collected automatically by the Wix.com platform for security and statistical reasons).

• Payment Data: Payments are managed entirely by external providers (e.g., PayPal, Stripe, Wix Payments). MB Wax Creation does not view or store full credit card details but only receives the transaction status.

3. Purposes of Processing Data is processed for the following purposes:

• a) Order Execution: Management of the shopping cart, payment, shipping, and delivery of products.

• b) Customs Management: For Non-EU shipments (e.g., USA, UK, Switzerland), data (name, address, package content, value) must be shared with customs authorities to allow for export.

• c) Customer Support: To respond to requests via email or chat.

• d) Administrative Compliance: Invoicing and bookkeeping (tax obligations).

• e) Marketing (Newsletter): Only with the user's explicit consent (specific checkbox), to send promotions or news.

4. Lawful Basis for Processing We process data based on:

• Contract Execution (Art. 6.1.b GDPR): Necessary to ship the purchased candles.

• Legal Obligation (Art. 6.1.c GDPR): For invoicing and customs regulations.

• Consent (Art. 6.1.a GDPR): For subscription to the newsletter or marketing.

• Legitimate Interest (Art. 6.1.f GDPR): For site security and fraud prevention.

5. Data Sharing with Third Parties

To operate the store, we share strictly necessary data with third-party service providers (Data Processors):

• Web Platform: Wix.com Ltd. (Hosting and site management).

• Shipping Management: Packlink Shipping S.L. (Platform for generating shipping labels).

• Couriers and Logistics: UPS, DHL, Poste Italiane, BRT, FedEx, and other carriers used for physical delivery.

• Payments: PayPal, Stripe, or other processors active at checkout.

• Consultants: Accountants or tax advisors for accounting management.

6. Extra-EU Data Transfer

Since we use global services (such as Wix) and ship worldwide:

• Some data may be transferred to the United States or other countries outside the European Economic Area (EEA).

• This transfer takes place based on Adequacy Decisions by the European Commission (e.g., for the UK, Switzerland, Canada, the Data Privacy Framework for the USA) or through the use of Standard Contractual Clauses (SCC) approved by the European Commission, which guarantee data security.

• For shipments to Non-EU countries, the transmission of data to local customs is mandatory by law to complete delivery.

7. Data Retention

• Order and Invoice Data: 10 years (Italian tax law obligation).

• User Account: Until a deletion request is made by the user.

• Marketing/Newsletter Data: Until consent is withdrawn (unsubscribe).

• General Communications: 24 months from the last contact.

8. User Rights

In accordance with the GDPR, the user has the right to ask MB Wax Creation for:

• Access to their personal data.

• Rectification or erasure of the same.

• Limitation of processing.

• Opposition to processing (e.g., cancellation from the newsletter).

• Data portability.

To exercise these rights, please send an email to: mbwaxcreation@outlook.com.

9. Minors:

The site and products are not intended for minors under 16 years of age. We do not knowingly collect data from minors.

10. Cookies:

The site uses technical cookies essential for operation (e.g., maintaining the shopping cart). For profiling or third-party cookies (managed via Wix), please refer to the specific Cookie Policy viewable via the banner on the site.

11. Amendments

This policy may change over time. The most recent version will always be published on this page with the update date.