Privacy Policy

Effective date: August 31, 2026

This Privacy Policy explains how mandaa collects, uses, discloses, and protects personal information when you visit mandaa.shop, mandaa an account, place an order, contact us, or otherwise use our services.

mandaa is operated by AMANDA MURPHY as a sole proprietorship. Legal company name: Sole proprietorship. SIRET number: 912 345 678 00019. Our business address is 1506 Plymouth Lane, Brenham, TX 77833, United States.

Data Collection

We collect information that you provide directly to us, including your name, billing and shipping addresses, email address, telephone number, account credentials, order details, product preferences, communications, and any information you submit when requesting customer support, a return, or a refund.

When you make a purchase, payment information is collected and processed securely by our payment service providers, including Stripe. Depending on the payment method, this information may include your payment card number, expiration date, security code, billing address, and transaction authentication data. mandaa does not receive or store complete payment card numbers or card security codes. We may receive limited payment information, such as the payment status, card type, card issuer, expiration date, and the last four digits of the card number.

We also automatically collect certain technical information when you use our website, including your IP address, browser type, device type, operating system, language preferences, referring pages, pages viewed, access dates and times, approximate location, cookie identifiers, and information about how you interact with the website.

We may receive information from service providers that assist us with payments, fraud prevention, order fulfillment, shipping, website hosting, analytics, advertising, and customer support. We collect only the information reasonably necessary to operate and improve our shop.

Data Usage

We use personal information to process and deliver orders, authorize and confirm payments, provide invoices and order updates, manage returns and refunds, respond to inquiries, administer customer accounts, and provide customer support.

We also use personal information to maintain and improve our website, personalize the shopping experience, monitor website performance, prevent fraud and unauthorized transactions, protect our customers and business, enforce our terms, maintain business records, and comply with tax, accounting, consumer protection, and other legal obligations.

Where permitted by law, we may use your email address to send news, product information, promotions, or special offers. You may unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting us. Transactional messages relating to orders, payments, security, or customer service may still be sent when necessary.

Depending on your location, our legal bases for processing may include performing a contract with you, complying with legal obligations, protecting our legitimate business interests, preventing fraud, and obtaining your consent where consent is required.

Payment Processing and Stripe

Payments may be processed by Stripe and its affiliated entities. When you submit payment information, it is transmitted directly to Stripe through secure payment interfaces and is handled in accordance with Stripe’s privacy policy and applicable payment security standards. Stripe may process information to complete transactions, authenticate payment methods, prevent fraud, comply with financial regulations, and provide its payment services.

We may share transaction information with Stripe and other financial institutions only as reasonably necessary to process or refund payments, investigate disputes or chargebacks, prevent fraud, and comply with legal requirements. We do not use full payment card details for marketing purposes.

Data Sharing

We may disclose personal information to trusted service providers that perform services on our behalf, including Stripe, website hosting providers, ecommerce platforms, shipping carriers, fulfillment partners, email providers, analytics services, professional advisers, and fraud-prevention vendors. These parties may use the information only as permitted by their agreements with us and applicable law.

We may also disclose information when required by law, court order, or lawful government request; to protect the rights, safety, and property of mandaa, our customers, or others; to investigate fraud or security incidents; or in connection with a business reorganization, transfer, merger, or sale.

mandaa does not sell personal information for monetary consideration. We will not share personal information for targeted advertising or other purposes treated as a “sale” or “sharing” under applicable law without providing any required notice and choice.

Data Protection

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction. These safeguards include access controls, secure connections, limited employee and contractor access, reputable service providers, and payment processing through established payment processors.

No method of internet transmission or electronic storage is completely secure. Although we work to protect personal information, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and should contact us promptly if you suspect unauthorized use of your account or payment method.

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, complete transactions, maintain required tax and accounting records, resolve disputes, prevent fraud, and comply with legal obligations. Retention periods vary according to the type of information and applicable legal requirements. When information is no longer required, we delete, anonymize, or securely dispose of it.

Our service providers may process information in the United States or other countries. Where required, appropriate safeguards are used for international transfers of personal information.

Cookies

mandaa uses cookies and similar technologies to operate the website, remember preferences, keep shopping carts active, enable secure checkout, prevent fraud, understand website usage, measure performance, and, where permitted, support advertising and marketing.

Essential cookies are necessary for functions such as navigation, account access, shopping carts, security, and payment processing. Analytics, preference, and advertising cookies are used only as permitted by applicable law and, where required, after consent has been obtained.

You can control cookies through your browser settings and any cookie preference tool made available on our website. Blocking essential cookies may prevent parts of the website or checkout process from working correctly. You may withdraw cookie consent at any time through the available preference tool or by deleting cookies from your browser.

User Rights

Depending on where you live, you may have the right to request access to personal information we hold about you, obtain a copy of it, correct inaccurate information, request deletion, restrict or object to certain processing, withdraw consent, and request portability of information you provided to us.

You may also have the right to opt out of targeted advertising, the sale or sharing of personal information, or certain profiling. mandaa does not discriminate against customers for exercising applicable privacy rights. If we deny a privacy request, residents of jurisdictions that provide an appeal right may contact us to appeal the decision.

To protect your information, we may need to verify your identity before completing a request. You may use an authorized agent where permitted by law, but we may require proof of authorization and identity verification. Some requests may be limited where retaining or processing information is required to complete a transaction, detect fraud, comply with law, establish legal claims, or protect the rights of others.

You may opt out of marketing emails at any time by selecting the unsubscribe link in the message or contacting us. Withdrawal of consent does not affect processing that occurred lawfully before the withdrawal.

Children’s Privacy

Our website and products are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so that we can investigate and delete it where appropriate.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, services, or legal obligations. The revised version will be posted on our website with an updated effective date. Where required by law, we will provide additional notice or request consent before material changes take effect.

Contact

For questions about this Privacy Policy, to exercise a privacy right, or to report a privacy or security concern, contact AMANDA MURPHY, operator of mandaa, by email at [email protected] or by telephone at +1 (979) 476-8369.

Postal address: mandaa, Attn: Privacy Requests, 1506 Plymouth Lane, Brenham, TX 77833, United States.