Privacy Policy – Mendava

Last updated: 12 November 2026

Mendava (“we”, “us”, “our”) operates https://mendava.shop and sells women’s clothing and accessories through it. This policy explains what personal information we collect, why we collect it, how long we keep it, and the choices you have. It applies whenever you visit the site, create an account, place an order or contact us.

1. Information we collect

Information you give us

Order and account details — name, email address, shipping and billing address, telephone number, and the items you order.
Payment information — handled by our payment providers. We receive a confirmation, the last four digits of the card and the result of the transaction; we never store full card numbers on this site.
Correspondence — messages you send through our contact form, by email, or in a product review.
Optional preferences — size and fit notes, gift messages, newsletter consent.

Information collected automatically

Device and usage data — IP address, browser type, operating system, referring page, pages viewed, time on page, and approximate location derived from IP.
Cart and session data — stored so that your basket survives a page reload or a return visit.
Cookies and similar technologies — described in our Cookie Policy.

2. Why we use it

To fulfil your order — taking payment, packing and shipping, sending order and dispatch confirmations, handling returns and exchanges.
To run your account — keeping your order history and addresses available to you.
To answer you — responding to enquiries, sizing questions and complaints.
To improve the store — understanding which products and pages are used, diagnosing errors, and testing changes.
To keep the store safe — detecting fraudulent orders, abuse and unauthorised access.
To send marketing — only where you have asked us to, and only until you unsubscribe.

3. Legal bases

Where the General Data Protection Regulation applies, we rely on: performance of a contract (orders and account), legitimate interests (running and securing the store, improving our range), consent (marketing email, non-essential cookies), and legal obligation (tax and accounting records).

4. Who we share it with

We do not sell personal information. We share it only with service providers who need it to do a job for us, and only to the extent they need it:

Payment processors — to authorise and capture payment.
Shipping carriers and fulfilment partners — name, address and telephone number, so your parcel can be delivered.
Email and hosting providers — to send transactional email and to run the site.
Analytics providers — aggregated usage data, only where you have accepted analytics cookies.
Professional advisers and authorities — where we are legally required to disclose, or to establish or defend a legal claim.

5. International transfers

Some of our providers process data outside your country. Where that happens we rely on standard contractual clauses or an equivalent safeguard, and we require the same level of protection we apply ourselves.

6. How long we keep it

Order records — kept for as long as tax and consumer law requires (typically six to ten years).
Account data — kept until you ask us to close the account, then deleted or anonymised.
Enquiries — kept for up to two years so we can pick up an ongoing conversation.
Marketing consent records — kept until you withdraw consent, plus a short period to demonstrate that you did.

7. Your rights

Depending on where you live, you may ask us to: confirm what we hold about you, give you a copy, correct it, delete it, restrict how we use it, transfer it to another provider, or stop using it for marketing. Write to wuqin8761@163.com — we answer within 30 days. You also have the right to complain to your local data protection authority.

8. Security

The site runs over HTTPS. Access to order data is limited to staff and contractors who need it, and payment pages are handled by PCI-DSS compliant processors. No system is perfectly secure, so please choose a strong, unique password and tell us at once if you suspect unauthorised use of your account.

9. Children

The store is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has given us data, contact us and we will delete it.