Privacy policy

MAVLLI SRL — Privacy Policy

Last updated: 23 December 2025

This Privacy Policy explains how MAVLLI SRL (“MAVLLI”, “we”, “us”) collects and processes personal data when you visit or make a purchase from www.mavlli.be (the “Site”), use our services, contact us, or otherwise interact with us (together, the “Services”).

This policy is provided in accordance with the General Data Protection Regulation (GDPR) and applicable Belgian data protection laws.

1. Data Controller and Contact Details

Data controller:
MAVLLI SRL
VAT / Company number: BE1013603181
Registered office: Rue Auguste Van Zande 101, 1080 Molenbeek-Saint-Jean, Belgium
Email: info@mavlli.be
Phone: +32 471 81 42 18
Business hours: Monday–Friday, 08:00–17:00

Data Protection Officer (DPO): MAVLLI SRL has not appointed a DPO, as this is not required for our current activities. For privacy questions, contact us using the details above.

2. Personal Data We Collect

Depending on how you use the Services, we may collect:

2.1 Data you provide to us

  • Identity and contact data: name, address, email, phone number

  • Order and transaction data: products purchased, billing/shipping details, invoices, payment confirmation (we do not store full card details)

  • Account data (if applicable): login credentials and account preferences

  • Customer support data: messages, complaints, photos of damaged goods, and correspondence

2.2 Data collected automatically

  • Device and usage data: IP address, browser type, device identifiers, pages viewed, interactions, referral URLs

  • Cookies and similar technologies: depending on your consent choices (see Section 8)

2.3 Data from third parties

We receive limited data from:

  • Shopify (e-commerce platform hosting and store operations)

  • Payment providers (payment status, fraud signals; not your full card number)

  • Shipping/carrier partners (delivery events and tracking updates)

  • Advertising/analytics partners (only if you consent to marketing cookies)

3. Purposes of Processing and Legal Bases

We process personal data for the following purposes:

3.1 To provide the Services and fulfil contracts (GDPR Art. 6(1)(b))

  • Process orders and payments

  • Deliver products and manage logistics

  • Provide order updates, invoices, and confirmations

  • Handle returns, refunds, and warranty/non-conformity claims

3.2 To comply with legal obligations (GDPR Art. 6(1)(c))

  • Accounting and tax obligations

  • Legal recordkeeping

  • Responding to lawful requests by authorities

3.3 Customer service and operational communications (GDPR Art. 6(1)(b) or 6(1)(f))

  • Respond to inquiries and complaints

  • Improve customer support processes

  • Prevent abuse of the Services

3.4 Security, fraud prevention and risk management (GDPR Art. 6(1)(f))

  • Prevent fraudulent orders and misuse

  • Secure our systems and detect suspicious behaviour

3.5 Marketing communications (GDPR Art. 6(1)(a) and/or 6(1)(f), as applicable)

  • If you opt in, we may send marketing emails/SMS about MAVLLI products and offers

  • If we contact existing customers, we do so only where permitted by applicable rules and always with a clear opt-out option

You can unsubscribe at any time using the link in our emails or by contacting us.

3.6 Analytics and advertising cookies (GDPR Art. 6(1)(a))

  • We use analytics/advertising technologies only where you have given consent via our cookie settings (see Section 8)

4. Sharing of Personal Data (Recipients)

We may share personal data with:

  • Service providers acting on our instructions (IT hosting, analytics, customer support tools)

  • Payment processors to process payments and detect fraud

  • Shipping and fulfilment partners to deliver your orders

  • Professional advisors (accountants, legal counsel) where necessary

  • Authorities where required by law

We do not sell personal data.

5. International Transfers

Some service providers (including Shopify and certain analytics tools) may process data outside the European Economic Area.

Where transfers occur, we use recognised safeguards such as:

  • European Commission Standard Contractual Clauses (SCCs), and/or

  • Adequacy decisions where applicable

You may request additional information about safeguards by contacting us.

6. Data Retention

We keep personal data only as long as necessary for the purposes above, including legal requirements.

Typical retention periods:

  • Order and invoice records: retained for the legally required period under Belgian accounting/tax rules (generally up to 7–10 years depending on record type)

  • Customer support communications: typically up to 24 months after resolution, unless needed for legal claims

  • Account data (if applicable): until account deletion, subject to legal retention requirements

  • Cookies: retained according to our cookie settings and the cookie type (see Section 8)

7. Your Rights (GDPR)

Subject to conditions and exceptions under GDPR, you may request:

  • Access to your personal data

  • Correction of inaccurate data

  • Deletion of data (“right to be forgotten”)

  • Restriction of processing

  • Data portability

  • Objection to processing (including certain marketing processing)

  • Withdrawal of consent (where processing is based on consent)

To exercise your rights, contact info@mavlli.be.

Complaints

You also have the right to lodge a complaint with the Belgian data protection authority:

Gegevensbeschermingsautoriteit / Autorité de protection des données (APD/GBA)

8. Cookies and Similar Technologies

We use cookies to:

  • Enable essential site functionality (necessary cookies)

  • Improve performance and analytics (analytics cookies)

  • Deliver personalised ads (marketing cookies)

Analytics and marketing cookies are used only if you consent through our cookie banner/settings. You can change your preferences at any time via the cookie settings link on our Site (if available) or through your browser settings.

For information about Shopify-related cookies, Shopify provides additional cookie information.

9. Children’s Data

Our Services are not intended for children, and we do not knowingly collect personal data from children.

10. Third-Party Links

Our Site may contain links to third-party sites. We are not responsible for their content or privacy practices. Please review their policies.

11. AI Chatbot (Flyweight GmbH)

We provide an AI chatbot operated by Flyweight GmbH, Jungbuschstraße 28, 68159 Mannheim, Germany.

What data is processed

The chatbot processes the information you choose to enter in chat or forms that may appear (e.g., order number and postal code for delivery status requests).

Purposes and legal basis

  • To respond to your inquiry and provide customer support (GDPR Art. 6(1)(b) and/or 6(1)(f))

  • Where you provide optional data for follow-up, processing may also be based on your request/consent depending on the context

Retention

Chat/form data is stored as long as necessary to resolve your inquiry and may be retained longer where required by Belgian legal recordkeeping obligations.

Transfers and safeguards

Where international transfers occur, appropriate safeguards such as SCCs are used.

You can exercise your GDPR rights by contacting us at info@mavlli.be.

12. Changes to This Policy

We may update this policy to reflect operational, legal, or regulatory changes. The updated version will be posted on this page with a new “Last updated” date.

13. Contact

For questions or to exercise your rights:
Email: info@mavlli.be
Phone: +32 471 81 42 18