Privacy policy

This Privacy Policy explains how Malane Lighting ("we", "us") collects and uses your personal data when you visit malanelighting.eu or buy from us, and the rights you have under the EU General Data Protection Regulation (GDPR) and similar laws in Norway and Switzerland.

1. Who Is Responsible for Your Data

The data controller is Malane Lighting, 400 West, Salt Lake City, Utah 84101, United States. Email: support@malanelighting.eu. Phone: +1 424-243-3145.

2. Data We Collect

Order data: name, email address, phone number, shipping and billing address, and the products you buy.
Payment data: payments are handled by our payment providers (Shopify Payments, PayPal and card networks). We do not see or store your full card number.
Account data: if you create an account, your login email and order history.
Communication data: messages you send us by email or through our contact form.
Device and usage data: IP address, browser type, device, pages visited and how you arrived at our site, collected through cookies and similar technologies (see section 6).

3. Why We Use Your Data and Our Legal Basis

To process and deliver your order, handle returns and provide customer support. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
To meet legal obligations such as tax, accounting and customs records. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
To prevent fraud and keep our website secure. Legal basis: our legitimate interests (Art. 6(1)(f) GDPR).
To send marketing emails, only if you have signed up. You can unsubscribe at any time using the link in every email. Legal basis: consent (Art. 6(1)(a) GDPR).
For analytics and advertising (measuring visits and showing you relevant ads on Google and Meta), only if you accept these cookies. Legal basis: consent (Art. 6(1)(a) GDPR).

4. Who We Share Your Data With

We share personal data only with service providers that help us run our store, and only as needed:

Shopify (store platform and checkout)
Payment providers (Shopify Payments, PayPal)
Shipping carriers and customs brokers, to deliver your order
Google (Analytics and Ads) and Meta (Facebook and Instagram ads), only with your cookie consent
Email service providers, for order emails and, if you signed up, marketing emails

We may also disclose data where the law requires it. We do not sell your personal data.

5. International Transfers

We are based in the United States, and some of our service providers process data outside the European Economic Area. When your data is transferred outside the EEA, we rely on the EU Commission's Standard Contractual Clauses or, where applicable, the EU-U.S. Data Privacy Framework to protect it.

6. Cookies

Strictly necessary cookies keep the cart and checkout working and are always on. Analytics and advertising cookies are set only if you accept them in our cookie banner. You can change your choice at any time through the cookie settings link at the bottom of our website, or by clearing cookies in your browser.

7. How Long We Keep Your Data

Order and invoice records: as long as tax and accounting law requires, usually up to 10 years.
Account data: until you delete your account.
Marketing data: until you unsubscribe or withdraw consent.
Customer service messages: up to 3 years after your last contact.

8. Your Rights

You have the right to:

access the personal data we hold about you
have inaccurate data corrected
have your data deleted
restrict or object to how we use your data, including for direct marketing
receive your data in a portable format
withdraw your consent at any time, without affecting processing done before you withdrew it
lodge a complaint with the data protection authority in your country

To use any of these rights, email support@malanelighting.eu. We will reply within one month.