Privacy Policy

Maudoo is committed to respecting the privacy of the users of its website and protecting their personal data. In the interest of transparency, Maudoo has adopted this Privacy Policy to explain how it collects and uses personal data from users of its website: www.maudoo.com (the "Site").

Users of the Site acknowledge that they have read and accepted this Privacy Policy at the same time as they read and accepted the Terms of Service. Users who disagree with any part of this Privacy Policy remain free not to use the Site and not to provide any personal data.

Definitions

"Consent" means any freely given, specific, informed, and unambiguous indication by which a user agrees, through a clear statement or affirmative action, to the processing of personal data relating to them.

"Personal Data" means any information relating to an identified or identifiable individual — for example, a name, an identification number, location data, an online identifier, or one or more factors specific to that person's physical, physiological, genetic, mental, economic, cultural, or social identity.

"Processing" means any operation performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation, retrieval, use, disclosure, dissemination, restriction, erasure, or destruction.

"Service Provider" / "Processor" means a company that processes personal data on Maudoo's behalf.

"Site" means the website www.maudoo.com, through which Maudoo offers its products and services to users.

"User" means any visitor to the Site and/or any person who benefits from the products and/or services offered on the Site, whose personal data may be processed by Maudoo under the conditions described below.

Who is responsible for processing your data?

The data controller is MAUDOO Corp with its principal place of business in Dallas,Texas.

For any questions regarding the processing of your data, you can contact us by email at: hello@maudoo.com

What data do we collect?

As a User, when you browse the Site and/or use the services offered on the Site, Maudoo may collect the following personal data about you:

Identification data: first and last name, government ID copies (where required, e.g., for high-value order verification), IP address, interests and/or preferences, device data.
Contact data: email address, postal address (shipping and billing), phone number.
Payment and billing data: payment method used, banking details, billing information.
Interaction data: content of any message you send Maudoo through the Site.
Order and relationship data: inquiries between you and Maudoo, history of exchanges with Maudoo's teams, order details and tracking, newsletter or SMS program sign-ups, cart completion or abandonment, etc.

Maudoo may collect this data:

- while you browse the Site;
- when you create a User account (optional);
- when you purchase a product on the Site;
- when you subscribe to Maudoo's newsletter and/or SMS program;
- when you submit a contact request through the form on the Site; or
- during any exchange with Maudoo via the Site or the email address hello@maudoo.com.

Whatever the method of collection, Maudoo commits to informing Users of:

- the purposes of the processing;
- whether providing the requested information is mandatory or optional, and the consequences of not providing it;
- the recipients of the data; and
- the existence and means of exercising your rights (including the rights of access, correction, and objection described below).

For what purposes, and on what legal basis, do we process this data?

Maudoo collects your personal data directly from you — through your browsing on the Site, your use of the Site's services, a contact request submitted through the Site's form, or any exchange with Maudoo via the Site or the email address hello@maudoo.com.

Maudoo collects and processes your personal data for the following purposes:

- to operate, maintain, and continuously improve the Site and the services offered;
- to manage and track your product orders on the Site;
- to manage and track your newsletter subscriptions;
- to provide marketing communications and targeted advertising;
- to respond to your requests and communicate with you when you contact us through the Site's form or by email;
- to respond to your requests to exercise your privacy rights (access, correction, deletion, restriction, portability, and the right to file a complaint with a regulator); and
- to comply with our legal and administrative obligations.

Maudoo commits to informing Users if their personal data is processed for a purpose other than those described above.

Depending on the specific processing activity, Maudoo relies on the following legal bases:

Processing activity
- Operating and improving the Site
- Managing and tracking orders
- Managing newsletter subscriptions
- Sending marketing communications and targeted advertising
- Handling requests submitted via the contact form or email
- Handling requests to exercise your privacy rights

Legal basis
- Legitimate business interest
- Performance of the contract between you and Maudoo
- Your consent
- Your consent (or, where permitted, legitimate interest, subject to your right to opt out)
- Legitimate business interest
- Legal obligation

Where required, Maudoo will obtain your consent before processing your data for a given purpose, and will always give you a way to opt out. If you no longer wish to receive Maudoo's newsletter or marketing emails, you may unsubscribe at any time using the link included in every such email, or by contacting hello@maudoo.com.

How long do we keep this data?

Personal data is retained only for as long as necessary for the purposes for which it was collected, consistent with applicable law.

Personal data may also be retained where necessary to establish, exercise, or defend legal claims, or to comply with a legal obligation.

Data necessary to create and manage your User account is deleted once you delete your account.

Data processed in connection with your orders and your relationship with Maudoo as a customer is retained only for as long as necessary to manage that relationship, plus any additional period required by applicable statutes of limitation.

Data processed for newsletter subscriptions, marketing, and targeted advertising is retained for three (3) years from the end of your customer relationship with Maudoo, or three (3) years from your last contact with Maudoo if you are not a customer.

Data processed in connection with requests submitted via the Site or by email is retained for three (3) years from the end of your customer relationship, or three (3) years from your last contact if you are not a customer.

Data related to a request to exercise your privacy rights is retained for the calendar year of the request plus five (5) years.

Is your data shared with third parties?

Only the following categories of authorized recipients may access your personal data:

- Maudoo's own authorized personnel (communications, administrative, logistics, IT, customer service, and compliance staff);
- Maudoo's service providers, acting on Maudoo's behalf, including the Site's hosting provider, customer service platform provider, email/SMS marketing platform provider, and payment/order/billing processor;
- Courts, mediators, attorneys, and similar parties where necessary; and
- Third-party social networks, where the Site includes social plugins (such as Facebook, Instagram, Pinterest, or YouTube buttons). If you are logged into your account with one of these third parties while browsing the Site, that third party may be able to link your browsing activity to your account with them. Maudoo encourages you to review each third party's own privacy policy.

Payment processing

Maudoo uses Stripe to process payments and billing for orders placed on the Site.

Identification, contact, and payment data are transmitted directly to Stripe from your browser at checkout, using SSL encryption. Stripe is PCI DSS certified.

Order tracking and billing

Maudoo uses Shopify Inc. (150 Elgin Street, Suite 800, Ottawa, ON K2P 1L4, Canada) to track orders and manage billing. When you place an order on the Site, Shopify may collect and process your identification and billing data. More information is available in Shopify's privacy policy: https://www.shopify.com/legal/privacy

Customer support

Maudoo uses Gorgias (768 Harrison St, San Francisco, CA 94107, USA) as its customer support ticketing platform, to track and improve customer service quality. When you submit a request through any of Maudoo's contact channels (contact form, live chat, or email), Gorgias may collect and process your identification data, contact data, and the content of your request. More information is available at: https://www.gorgias.io/privacy/gdpr

Newsletter, marketing, and advertising

Maudoo uses Klaviyo (225 Franklin St, 10th Floor, Boston, MA 02110, USA) as its email marketing platform, for newsletters, promotional emails, and advertising. When you sign up for Maudoo's newsletter or agree to receive marketing communications, Maudoo may share your identification data, contact data, and device data (timezone, screen resolution, browser and OS information, general location, and language) with Klaviyo.

These transfers rely on your consent. You may withdraw your consent at any time by clicking the unsubscribe link in any newsletter, promotional, or advertising email, or by contacting hello@maudoo.com.

Maudoo also uses an SMS marketing platform to send promotional text messages to Users who have opted in. You may withdraw your consent at any time by replying STOP to any text message, or by contacting hello@maudoo.com. See also the Mobile Messaging Terms in Maudoo's Terms of Service.

Google Tag Manager

Maudoo uses Google Tag Manager to manage the Site's tags (code snippets). This tool helps Maudoo manage and improve the products and services offered on the Site and reduces page load times.

Google Tag Manager itself does not create cookies and does not collect personal data — it only deploys code on the Site. Any tag it deploys that does collect data is separately disclosed in this Privacy Policy or the Cookie Policy. More information is available on Google's own pages.

What are your rights?

Depending on your state of residence, you may have some or all of the following rights regarding your personal data:

- the right to know what personal data we have collected about you and how it is used;
- the right to access a copy of your personal data;
- the right to correct inaccurate personal data;
- the right to request deletion of your personal data;
- the right to data portability;
- the right to opt out of the sale or sharing of your personal data, and of targeted advertising;
- the right to non-discrimination for exercising any of these rights; and
- the right to appeal a decision Maudoo makes regarding your rights request.

To exercise any of these rights, you may contact Maudoo by email at hello@maudoo.com. To process your request, we may ask you to confirm your identity (name, address, and a signed copy of an ID document) and, where legally required, the reason for your request. Where you provide a copy of an ID document to verify your identity, Maudoo retains it for the calendar year of the request plus five (5) years.

Maudoo's products and services are intended for adults and for minors aged 13 and older. Maudoo does not knowingly collect personal data from children under 13 without prior parental or guardian consent, consistent with the US Children's Online Privacy Protection Act (COPPA). If you are under 13, please do not send Maudoo any personal data about yourself without your parent's or guardian's consent.

Does the Site use cookies?

Cookies are small text files placed on your device by your browser when you visit a website.

Your browsing on the Site may result in cookies being placed on your device if you continue browsing without changing your browser settings.

Maudoo uses several types of cookies. Details about these cookies are available in Maudoo's Cookie Policy.

What security measures are in place?

Maudoo takes reasonable technical and organizational precautions, updated as technology evolves, to protect the security of Users' personal data and to prevent unauthorized access, alteration, or damage.

Maudoo uses firewalls and encryption for personal data. Access to personal data is limited to Maudoo staff who need it to perform their roles.

All personal data submitted by Users, including payment information, is transmitted using SSL (Secure Socket Layer) encryption.

What about links to third-party websites?

The Site may include links to third-party websites, such as Facebook, Instagram, Pinterest, or YouTube.

Maudoo has no control over the content of these third-party websites or their data protection practices, and disclaims all responsibility for their processing of Users' personal data.

What law applies?

This Privacy Policy is governed by the laws of the State of Texas.