Privacy policy

Last updated: 17 October 2026

This Privacy Policy explains how Monvaza collects, uses, shares and protects personal data when you visit our website, place an order, contact us or otherwise use our services.

Data controller

The data controller responsible for processing personal data through this website is:

Monvaza
Pützdrieschstraße 9
52477 Alsdorf
Germany

Email: support@monvaza.com
Telephone: +447441392301

Monvaza determines the purposes and means of processing personal data unless this policy states otherwise.

Shopify

Our online shop is hosted by Shopify.

Shopify provides the technical infrastructure used to operate our product catalogue, website, basket, checkout and related services.

When you visit our website or place an order, Shopify processes personal data to operate the shop, enable payments, prevent fraud, process orders and maintain platform security.

Further information is available in Shopify's Consumer Privacy Policy.

Personal data we process

Depending on how you use our website and services, we may process the following categories of personal data.

Contact and identification data

First name and surname
Billing address
Delivery address
Email address
Telephone number
Country and town or city of residence

Order and transaction data

Products ordered
Size, colour and selected variant
Order number
Date and time of the order
Purchase amount and currency
Payment method
Payment status
Shipping and tracking information
Returns, complaints and refunds

Payment data

Payments are processed through Shopify Payments and the banks, card networks and payment service providers involved.

Depending on the payment methods offered at checkout, this may include:

Credit or debit card
Digital wallets such as Apple Pay, Google Pay or Shop Pay, where available
Other payment methods actually available for your order

Monvaza does not normally receive or store your full payment card number or security code.

These details are processed directly by Shopify Payments and the financial service providers involved.

We receive information such as the payment method, payment status, transaction reference and amount paid.

Technical and usage data

IP address
Browser type and version
Device type and operating system
Language and time zone settings
Cookie and consent data
Pages visited
Click, session and navigation data
Referring website or advertisement
Date and time of the visit
Information about interactions with our advertisements and website

Communication data

When you contact us, we process the information you provide, including:

The content of emails or other messages
Order number
Order enquiries
Complaints
Photographs of items, packaging or shipping labels
Return and refund requests

How we obtain personal data

We may obtain personal data:

Directly from you when you place an order or contact us
Automatically through our website, cookies, pixels and similar technologies
Through Shopify and Shopify Payments
Through banks and payment networks
Through carriers, suppliers and fulfilment partners
Through Google when you interact with our advertisements or website

Purposes and legal bases

We only process personal data where a valid legal basis exists.

As a business established in Germany offering goods to people in the United Kingdom, our processing is subject to the EU GDPR and, where applicable, the UK GDPR and Data Protection Act 2018.

UK rules on cookies and electronic marketing, including the Privacy and Electronic Communications Regulations, also apply where relevant.

References below to Article 6 refer to the corresponding provisions of the applicable GDPR regime.

Performance of the contract

Under Article 6(1)(b), we process personal data to:

Process your order
Handle payments
Arrange delivery
Provide shipping and tracking information
Process returns and refunds
Answer questions about your order
Handle complaints and claims relating to goods
Perform our contract with you

Without the necessary name, address, order and payment information, we cannot process or deliver your order.

Legal obligations

Under Article 6(1)(c), we process personal data where necessary to comply with legal obligations, including:

Tax and accounting obligations
Statutory retention requirements
Consumer protection obligations
Product safety obligations
Lawful requests from competent authorities
Applicable obligations relating to fraud, sanctions and payments

Legitimate interests

Under Article 6(1)(f), we may process personal data for legitimate interests, including:

Protecting our website and systems
Preventing and detecting fraud and misuse
Securing transactions and payments
Establishing, exercising or defending legal claims
Improving customer service
Technical and functional administration of the shop
Aggregated analysis where consent is not required

Where we rely on legitimate interests, we assess whether those interests are overridden by your rights and freedoms.

Consent

Under Article 6(1)(a), we rely on consent for processing that requires it, including:

Non-essential cookies
Advertising and analytics technologies
Google tags or pixels
Advertising and conversion measurement
Personalised advertising
Shopify Network Intelligence and Enhanced Services, where consent is required

You may withdraw consent at any time through our cookie settings.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

We do not send marketing emails or text messages without your separate, express consent.

Cookies and similar technologies

We use cookies and similar technologies to operate the website, remember preferences, enable payments and checkout, maintain security and, with consent where required, measure website use and advertising performance.

We may use the following categories.

Necessary cookies

These support essential functions such as:

Basket
Checkout
Payment processing
Security
Fraud prevention
Cookie preferences
Session management

Consent is not normally required for strictly necessary cookies.

Preference cookies

These remember choices such as language, region and other preferences.

Where consent is required, they are only used after you have given consent.

Analytics cookies

These help us understand how visitors use the website.

Where legally required, they are only used after you have given consent.

Marketing cookies and pixels

These measure advertising performance and help make advertisements more relevant.

They are activated only with your consent where consent is legally required.

You can change your choices through the cookie preferences link in our website footer.

Rejecting non-essential cookies does not prevent you from placing an order, although some personalisation and measurement features may be limited.

Google tag and Google pixel

With your consent, we use a Google tag or Google pixel to measure visits, advertising interactions and purchases.

Information shared with Google may include:

IP address
Browser and device information
Cookie identifiers
Pages visited
Advertisement click information
Basket and conversion events
Purchase value, currency and transaction identifier

Depending on your consent, this information may be used for conversion measurement, analytics and personalised advertising.

The recipient may be:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google may process information through companies and systems outside the UK and the European Economic Area.

Further information is available in Google's Privacy Policy.

Consent signals for advertising and analytics reflect your selected cookie preferences.

Consent settings do not replace the requirement to obtain valid consent before activating technologies that require it.

Shopify Network Intelligence

We have enabled Shopify Network Intelligence and certain Enhanced Services.

This allows Shopify to combine information about your interactions with our shop with information about your interactions with Shopify and other Shopify shops.

Shopify may use this information to:

Prevent fraud and misuse
Improve services and shopping experiences
Measure performance and conversions
Offer more relevant services or advertisements
Understand interactions with shops and advertisements

Where legally required, non-essential analytics and personalised advertising processing take place only with your consent.

For these Enhanced Services, Shopify may act as an independent controller for certain processing.

The Shopify Privacy Portal provides further information and allows you to exercise applicable privacy rights, object or withdraw consent.

Payment processing

Shopify Payments and the banks and payment networks involved process personal data to:

Complete payments
Verify identity and payment methods
Prevent fraud and misuse
Process refunds
Comply with financial and legal obligations

Payment providers may act as independent controllers for their own legal obligations.

Their privacy policies may therefore also apply.

Suppliers, fulfilment partners and carriers

We share the personal data necessary to process and deliver orders with selected suppliers, fulfilment partners and carriers.

This may include:

Name
Delivery address
Country
Telephone number, where necessary for delivery
Order number
Products and variants ordered
Shipping and tracking information

We do not share full payment card details with suppliers or carriers.

A supplier or fulfilment partner involved in fulfilling orders may be based in China. Necessary delivery information may therefore be processed outside the UK and the European Economic Area.

Monvaza remains responsible to you for your order, customer service, returns and refunds.

You do not enter into a separate purchase contract with our supplier or fulfilment partner.

Other recipients

We may share personal data with:

Shopify and its affiliated companies
Shopify Payments
Banks and card networks
Suppliers and fulfilment partners
Postal and parcel carriers
Google, where you have given consent
Technical providers required for hosting and security
Tax advisers, accountants and legal advisers
Public authorities, courts or regulators where legally required
A buyer or successor if our business is transferred, where legally permitted

We provide further information about specific recipients on request where required by law.

International transfers

We are based in Germany.

Shopify, Google, suppliers and other providers may process personal data in the UK, the European Economic Area and other countries, including the United States and China.

Data protection laws may differ between countries.

Where UK restricted-transfer rules apply, a transfer must be covered by UK adequacy regulations, appropriate safeguards or a permitted statutory exception.

Appropriate safeguards may include the ICO's International Data Transfer Agreement or the UK Addendum to European Commission standard contractual clauses, together with any required transfer assessment and supplementary measures.

For transfers subject to EU GDPR, a relevant European Commission adequacy decision, EU standard contractual clauses with any necessary supplementary measures, or another valid EU transfer mechanism is required.

EU standard contractual clauses alone do not automatically satisfy UK restricted-transfer requirements.

We limit transfers to information necessary for the relevant purpose.

Contact support@monvaza.com for information about the safeguards relevant to your data and to request a copy where required by law. Confidential information may be redacted.

Retention periods

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required by law.

Our general criteria are:

Accounting, invoice and tax records are retained for applicable German statutory periods. The period depends on the record category and is generally eight years for accounting vouchers; other categories may have shorter or longer periods.
Information required for contractual or legal claims is retained for the applicable limitation period. The general German period is often three years from the end of the relevant calendar year, but UK or other applicable periods, pending claims and legal requirements may require longer retention.
Returns, complaints and customer service information is retained for as long as necessary to resolve the matter and address related claims.
Cookie and consent records are retained for as long as necessary to record your preferences and demonstrate valid consent.
Information processed solely on consent is deleted or no longer used for that purpose after withdrawal, unless another legal basis applies.
Security and fraud prevention records are retained for as long as reasonably necessary to investigate misuse and protect our rights.

At the end of the relevant period, information is deleted or anonymised unless further retention is legally permitted or required.

Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction.

Where appropriate, these include:

Encrypted HTTPS connections
Access restrictions
Secure Shopify infrastructure
Secure payment processing
Account and access management
Fraud prevention and monitoring

No electronic storage or transmission method can guarantee complete security.

We review our security measures and update them where necessary.

Your privacy rights

Depending on applicable law, you may have:

The right to information about processing
The right to access your personal data
The right to correct inaccurate information
The right to erasure
The right to restrict processing
The right to data portability
The right to object to processing based on legitimate interests
The right to object to direct marketing
The right to withdraw consent
Rights relating to solely automated decisions with legal or similarly significant effects, subject to applicable rules and safeguards
The right to complain to a supervisory authority

These rights are not absolute.

We may need to retain or process certain information to comply with legal obligations or establish, exercise or defend legal claims.

Your right to object

You may object to processing based on legitimate interests on grounds relating to your particular situation.

You may object to direct marketing, including related profiling, at any time. We will stop that marketing processing.

To exercise this right, email support@monvaza.com.

Exercising your rights

Contact:

Email: support@monvaza.com

Please explain which right you wish to exercise and which information your request concerns.

We may request information where necessary to verify your identity. We use it only to handle the request securely.

We normally respond without undue delay and within one month of receiving your request.

Identity checks, permitted clarification, extensions or pauses are applied only as allowed by law. We will explain any applicable extension and its reason.

Requests are normally free. We may charge a reasonable fee or refuse a request only where the law permits.

Automated decision-making

Monvaza does not independently make decisions based solely on automated processing that have legal or similarly significant effects on you.

Shopify Payments, banks and other payment providers may perform automated fraud and risk checks. These may result in payment being reviewed or declined.

Please consult the relevant provider's Privacy Policy for further information.

Children

Our services are not specifically directed at children under 16.

We do not knowingly collect children's personal data for marketing or profiling.

If you believe a child has provided information without valid consent, contact us so that we can take appropriate action.

External links

Our website may link to third-party websites or services.

We are not responsible for the privacy practices of websites we do not operate.

Please read the relevant third party's Privacy Policy before providing personal data.

Complaints

If you have a complaint about our handling of personal data, contact:

Email: support@monvaza.com

You also have the right to complain to a data protection authority.

UK customers may contact:

Information Commissioner's Office — ICO
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113
Website: ICO complaints

You do not have to contact us first to exercise your right to complain.

Where applicable law provides that right, you may also complain to a competent supervisory authority in the country where you normally live or work or where an alleged infringement occurred.

The competent German supervisory authority for Monvaza is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Germany

Changes to this Privacy Policy

We may update this policy when our services, providers, technologies or legal obligations change.

The latest version is published on this page, with the update date shown at the top.

We will provide additional notice of significant changes where required by law.

Business name: Monvaza

Business address: Pützdrieschstraße 9, 52477 Alsdorf, Germany

Contact details

Email: support@monvaza.com
Telephone: +447441392301

Customer service hours

Monday to Friday: 09:00–16:00 (GMT/BST)
Saturday and Sunday: 10:00–15:00 (GMT/BST)

We aim to respond to enquiries within 24 hours.