Privacy Policy

1. Scope of This Privacy Policy

This Privacy Policy explains how MANDUREL, LLC collects, uses, protects, shares, and retains personal information when customers visit mandurel.com, place an order, make a payment, request customer support, submit a return, or otherwise interact with our website and services.

This policy applies to information collected through our website and related order, payment, shipping, return, and customer service activities.

2. Information We Collect

Depending on how a customer uses mandurel.com, we may collect information such as name, billing address, shipping address, email address, telephone number, order details, purchased textile products, transaction references, shipping information, return information, and communications with our customer service team.

We may also collect limited technical information automatically, including IP address, browser type, device type, operating system, referring pages, pages visited, approximate location derived from network information, and timestamps associated with website activity.

3. Order and Shipping Information

When an order is placed, we use the information provided during checkout to process the purchase, prepare the order, arrange delivery, provide tracking information, communicate about delivery issues, and assist with damaged, defective, incorrect, or returned products.

Relevant shipping information may be shared with carriers, fulfillment providers, or other service providers only to the extent reasonably necessary to complete delivery or resolve a shipping-related issue. Additional delivery information is available in our Shipping Policy.

4. Information Provided Through Customer Support

When customers contact us at [email protected], we may receive the information included in the message, such as an order number, product details, photographs, return information, shipping concerns, or payment-related questions.

We use this information to review the request, respond to the customer, maintain appropriate service records, and help resolve the matter accurately.

5. Payment Information

Payments made through mandurel.com may be processed by Stripe or PayPal, depending on the payment method selected during checkout. These payment providers may receive payment credentials and transaction information directly in order to authorize, process, authenticate, refund, or review a transaction.

We may receive limited transaction information from Stripe or PayPal, such as payment status, transaction identifier, payment method type, amount, currency, refund status, and fraud or authorization results. We do not use this information for unrelated purposes.

6. Payment Security

Payment security is supported through established payment providers and technical safeguards designed to reduce unauthorized access to sensitive payment information.

Where supported by the applicable payment method, Stripe and PayPal may use measures such as PCI-DSS compliant payment environments, tokenization, fraud detection, payment authentication, and 3D Secure. Tokenization helps replace sensitive card information with a non-sensitive payment token so that full card details do not need to be handled directly by our website.

We do not store complete payment card numbers or card security codes such as CVV on mandurel.com. For additional information about transaction processing and refunds, please review our Payment Policy.

7. HTTPS, SSL, and TLS Protection

mandurel.com uses HTTPS with SSL/TLS encryption to help protect information transmitted between a customer's browser and our website.

These technologies help reduce the risk that information transmitted through website forms, checkout pages, account functions, and other encrypted connections can be read or altered while in transit.

8. Internal Data Security Measures

We use administrative and technical safeguards appropriate to the type of information we process. These measures may include access controls, account authentication, limited administrative permissions, secure hosting, software updates, system monitoring, and restrictions on access to customer information.

Access to personal information is limited to individuals or service providers who reasonably require that information for order processing, customer service, accounting, payment review, fraud prevention, legal compliance, or other legitimate operational purposes.

9. Fraud Prevention and Transaction Review

Certain order, device, transaction, and payment information may be used to identify suspicious activity, unauthorized transactions, account misuse, or other potential fraud.

Stripe, PayPal, banks, card networks, and fraud-prevention providers may also perform independent security or risk checks in connection with a transaction. Where a transaction is reviewed or disputed, we may use relevant order, shipping, payment, communication, return, and refund records to help respond accurately.

10. How We Use Personal Information

We use personal information only where reasonably connected to providing and operating our services. This may include processing orders, confirming payments, arranging shipping, providing tracking information, responding to inquiries, managing returns and refunds, preventing fraud, maintaining transaction records, improving website functionality, and complying with applicable legal obligations.

11. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential website functions, remember preferences, maintain sessions, understand website usage, improve performance, and support security.

Some cookies are necessary for functions such as shopping cart activity, checkout, authentication, or fraud prevention. Other non-essential cookies may be subject to consent requirements depending on the customer's location and applicable law.

Customers may manage available cookie preferences through their browser or any cookie controls provided on the website.

12. Log and Technical Data

Our systems may record technical information when a customer accesses mandurel.com. This can include IP address, browser information, device information, request timestamps, error logs, security events, and pages accessed.

Such data may be used for troubleshooting, detecting misuse, maintaining website security, analyzing technical performance, and protecting the availability of our services.

13. Sharing of Personal Information

We do not sell personal information to third parties.

Personal information may be shared with service providers that support our business, including payment processors, shipping carriers, hosting providers, website service providers, fraud-prevention services, professional advisers, and other vendors that assist with order fulfillment or customer support.

We limit such sharing to information reasonably necessary for the relevant service and expect service providers to handle information in accordance with applicable data-protection and confidentiality requirements.

14. Legal Basis for Processing

Where the General Data Protection Regulation or similar privacy laws apply, personal information may be processed on one or more recognized legal bases. These may include processing necessary to perform a contract with the customer, compliance with a legal obligation, our legitimate interests in operating and protecting the website, and consent where consent is specifically required.

Legitimate interests may include fraud prevention, transaction security, customer support, record accuracy, website maintenance, and the protection of our legal rights, provided those interests are not overridden by applicable individual rights.

15. International Data Transfers

Because mandurel.com may serve customers in the United States, Europe, and other supported regions, personal information may be processed by service providers located in a country different from the customer's country of residence.

Where privacy law requires additional safeguards for an international transfer, we seek to rely on recognized mechanisms or protections provided by the relevant service provider, such as contractual safeguards, approved transfer mechanisms, or other lawful transfer arrangements.

16. Data Retention

Personal information collected through mandurel.com is generally retained for no longer than 1 year after it is no longer actively required for the purpose for which it was collected.

This retention approach applies to relevant customer service, order, shipping, return, communication, and related operational records. Information may be deleted, anonymized, or securely removed when the applicable retention period ends.

If applicable law requires certain records to be retained for a different period, we will follow that legal requirement only to the extent necessary.

17. GDPR and Data Protection Rights

Where the General Data Protection Regulation (GDPR) applies, individuals may have rights concerning their personal information, including the right to request access, correction, deletion, restriction of processing, and data portability.

Individuals may also have the right to object to certain processing or withdraw consent where processing is based on consent. Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.

A privacy request may be submitted through [email protected]. We may request information reasonably necessary to verify the identity of the person making the request before providing access to or changing personal information.

18. Children's Privacy

mandurel.com is intended for general shopping purposes and is not designed to knowingly collect personal information directly from children who are below the minimum age required to provide valid consent under applicable privacy law.

If we become aware that personal information from a child has been collected in circumstances where parental or guardian authorization was legally required, we will review the information and take appropriate steps consistent with applicable law.

19. Security Incidents and Data Protection Response

Although no online system can guarantee absolute security, we maintain procedures intended to identify, assess, and respond to suspected unauthorized access, loss, disclosure, or misuse of personal information.

If a security incident affecting personal information occurs, we may take steps such as limiting unauthorized access, investigating the event, securing affected systems, reviewing relevant logs, working with hosting or payment providers, and making notifications where required by applicable law.

Our security practices are reviewed as website services, payment technologies, operational needs, and identified risks change.

20. Policy Updates and Contact

This Privacy Policy may be updated to reflect changes in our website, payment providers, shipping arrangements, security practices, legal requirements, or the ways in which personal information is processed. The current version published on mandurel.com will apply from its stated effective date.

Questions about this Privacy Policy, personal information, data-protection rights, or a privacy-related request may be directed to [email protected].