Privacy policy

Last updated: August 1, 2025
Maya & Mina is a brand operated by TTM Advies, registered in the Netherlands (Chamber of Commerce: 90263677, VAT number: NL004802129B38).

Registered Address: Eerste Helmersstraat 219C, 1054 DW Amsterdam, The Netherlands.
We value your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit or shop with us.
👉 In short: We only collect the information necessary to process your orders, provide customer service, improve our store, and comply with legal obligations. We do not charge VAT or GST. Shipping is always free to Australia.
By using our website and services, you agree to this Privacy Policy.


Personal Information We Collect

We may collect the following categories of personal information:
Contact & Identity Details
Name, address, phone number, email address
Billing and shipping addresses
Order & Transaction Details
Products purchased, returns, exchanges, cancellations
Order history and preferences
Payment confirmation details
Payment Information
Payment details are securely processed via our payment providers
We do not store full credit card numbers on our systems
Account Details (if you create an account)
Username, password, account preferences
Wishlist and saved items
Device & Usage Data
IP address, browser type, device information
Website interaction data, pages visited
Cookies and similar tracking technologies
Communications
Information you provide when contacting customer support
Marketing preferences and communication history


How We Collect Information

Directly from you:
During checkout and account creation
When you contact customer support
When you subscribe to marketing emails
Automatically:
Via cookies when you visit our website
Through your device and browser settings
From your interactions with our website
From service providers:
Payment processing partners
Shipping and logistics providers
Marketing and analytics platforms


Legal Basis for Processing (GDPR)

We process your personal information based on:
Contract performance: To fulfill your orders and provide services
Legitimate interests: To improve our services, prevent fraud, and conduct marketing
Legal compliance: To meet tax, accounting, and regulatory requirements
Consent: For marketing communications and non-essential cookies (you can withdraw anytime)


How We Use Your Information

Order Processing & Customer Service
Process orders, payments, returns, and exchanges
Arrange shipping and delivery
Provide customer support and respond to inquiries
Manage your account and preferences
Business Operations
Improve our website and services
Analyze customer behavior and preferences
Prevent fraud and ensure security
Comply with legal and tax obligations
Marketing & Communications
Send promotional emails (only if you opt-in)
Show relevant advertisements
Notify you about new products and offers
You can unsubscribe at any time


Disclosure of Personal Information

We may share your information with:
Essential Service Providers:
Shopify (our e-commerce platform)
Payment processors (Stripe, PayPal, etc.)
Shipping partners (Australia Post, courier services)
Customer support tools
Marketing Partners (only with your consent):
Email marketing platforms
Social media advertising (Facebook, Google)
Analytics providers (Google Analytics)
Legal Requirements:
Government authorities when required by law
Law enforcement for fraud prevention
Legal advisors for business protection
We never sell your personal information to third parties.


Cookies & Tracking Technologies

We use cookies to enhance your experience:
Essential Cookies (always active):
Shopping cart functionality
Account login and security
Website performance and stability
Analytics Cookies (you can opt-out):
Google Analytics to understand website usage
Performance monitoring and improvements
Marketing Cookies (requires consent):
Facebook Pixel and Google Ads tracking
Personalized advertising and retargeting
Social media integration
Manage Cookies: You can control cookie settings in your browser or contact us for assistance.


Data Security & Protection

We protect your information using:
SSL encryption for all data transmission
PCI DSS compliant payment processing
Secure hosting with Shopify's infrastructure
Regular security audits and updates
Limited access controls for our team
Data backup and recovery procedures
However, no system is 100% secure. Please use secure channels when sharing sensitive information with us.


Data Retention

We keep your personal information only as long as necessary:
Order information: 7 years (Dutch tax and accounting requirements)
Account data: Until you delete your account or request deletion
Marketing data: Until you unsubscribe or withdraw consent
Website analytics: 26 months (Google Analytics default). After this period, data is automatically deleted or anonymized.
Customer support: 3 years for service improvement


International Data Transfers

Your information may be processed outside Australia, including in:
The Netherlands (our business location)
Canada (Shopify servers)
United States (some service providers)
We use approved legal mechanisms such as:
EU Standard Contractual Clauses
Adequacy decisions by the European Commission
Other appropriate safeguards as required by law


Your Rights – EU/Netherlands (GDPR)

If you are in the EU/EEA or Netherlands, you have the right to:
Access the personal information we hold about you
Correct or update inaccurate information
Delete your personal data (right to be forgotten)
Restrict or object to processing of your data
Data portability - receive a copy of your data
Withdraw consent for marketing or cookies
Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)


Your Rights – Australia (Privacy Act)

If you are in Australia, under the Australian Privacy Principles (APPs):
Access your personal information we hold
Correct inaccurate, incomplete, or outdated information
Complain about our handling of your information
Request information about our privacy practices
Australian Privacy Complaints:
1.Contact us first at info@maya-mina.com
2.If unsatisfied, contact the Office of the Australian Information Commissioner (OAIC)
Phone: 1300 363 992


Marketing Communications

Email Marketing:
We only send promotional emails if you opt-in
Every email includes an unsubscribe link
You can update preferences anytime
We may still send order-related emails (receipts, shipping updates)
Advertising:
We may show you ads on social media and other websites
Based on your browsing behavior and purchases
You can opt-out through ad platform settings or contact us


Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent/guardian and believe your child has provided us with personal information, please contact us immediately.


Changes to This Privacy Policy

We may update this Privacy Policy to reflect:
Changes in our business practices
New legal requirements
Improvements to our services
Updates will be posted on this page with a revised "Last updated" date. For significant changes, we will notify you by email or website notice.


Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms:
EU/Netherlands: We will notify the Dutch Data Protection Authority within 72 hours
Australia: We will notify the OAIC and affected individuals as required by law
You will be informed if the breach is likely to result in high risk to you


Contact Us & Exercise Your Rights

Maya & Mina (operated by TTM Advies)
Eerste Helmersstraat 219C
1054 DW Amsterdam
The Netherlands
📧 Email: info@maya-mina.com
📞 Phone: +31 6 52212194
🕐 Business Hours: Monday-Friday, 9:00-17:00 CET (Amsterdam time)
For Australian customers: We aim to respond to Australian privacy requests within the timelines required by the Privacy Act 1988 (Cth). We repond within 24-hours.

To exercise your privacy rights:
1.Email us at info@maya-mina.com with your request
2.Include your full name and order number (if applicable)
3.Specify which right you want to exercise
4.We will verify your identity and respond within 30 days


Supervisory Authorities

Netherlands (GDPR):
Autoriteit Persoonsgegevens
Phone: +31 70 888 8500
Australia (Privacy Act):

Office of the Australian Information Commissioner (OAIC)
Phone: 1300 363 992
This Privacy Policy is governed by Dutch law and Australian privacy law as applicable to our business operations and customer locations.