PRIVACY · YOUR DATA

Your details, safe with us.

We collect only what we need - and never a paw more.

- the short version ✿ -

Only essentials

Your name, address, and order details, just enough to get the parcel to your door.

Never sold

We don't sell or rent your data. Ever.

Yours to control

See it, fix it, or have it forgotten, one message and it's done.

What we collect

Only the things a small shop truly needs - your name, delivery address, email, and what you ordered. Enough to make the parcel, send it, and write back if you have a question.

We don't go digging for more, and we don't keep what we don't use.

Why we hold it

We keep your details to fulfil your order, handle returns, and answer you when you write. Some of it we're simply required to keep - invoices and order records stay with us for around five years, because Polish tax law asks us to.

Once a reason to hold something is gone, so is the data.

We never sell it

Your data is never sold, rented, or handed off for someone else's marketing. The only people who ever touch it are the partners who have to, so an order can happen: Shopify (who run the store), our payment providers, and the couriers who carry your parcel - InPost, DPD, DHL.

If anything ever travels outside the EU, it goes only with EU-approved safeguards in place.

Cookies, in plain words

The essential ones just work - they keep your cart and the site running, and you can't really shop without them. Everything else (the analytics, the nice-to-haves) only switches on if you say yes.

Changed your mind? Open Cookie settings in the footer any time and tell us what you'd rather not have.

Your rights

Under GDPR, the data is yours. You can ask to see it, fix it, delete it, take it with you, or withdraw a consent you gave earlier - and we'll answer within 30 days.

If you ever feel we've got it wrong, you can also reach out to PUODO, Poland's data protection authority. We'd rather you came to us first, though - we listen.

Reaching us

The fastest way is a DM on Instagram @malpetit.co. Prefer email? Write us at contact@malpetit.com with what you'd like to see, change, or delete, and we'll take it from there.

WHO HOLDS YOUR DATA

Data controller: Malpetit - Warszawa, Poland. The full controller identity is in our Privacy Policy.

For the full legal text - lawful bases, recipients, retention, and transfers outside the EU - see our Privacy Policy.

Questions? The fastest way is a DM on Instagram @malpetit.co - or see every way to reach us on our Contact page. your data, in good hands ✿