Information We Collect

When you make a purchase or interact with our website, we may collect the following personal information, which is necessary to process your order and improve your experience:

• Full name
• Shipping and billing address
• Email address
• Phone number
• Order-related information
• IP address and browsing data

We do not collect sensitive personal data such as health information, racial or ethnic origin, or religious beliefs.

Legal Basis for Processing

In accordance with the GDPR, we process your personal data based on the following legal grounds:

• Contract performance: processing is necessary to handle and fulfill your order, manage shipping, and communicate with you about your purchase.
• Legal obligation: we may be required to retain certain data by law, such as billing records for tax purposes.
• Legitimate interest: we use some data to prevent fraud, improve site security, and optimize our operations.
• Consent: for marketing communications or non-essential cookies, we will ask for your explicit consent in advance.

How We Use Your Information

The information we collect is used exclusively for the following purposes:

• Processing and shipping your orders
• Communicating with you about your purchase, including confirmations and shipping updates
• Managing returns, warranties, or any issues with your order
• Improving the user experience on our site
• Preventing fraud or unauthorized activity
• Complying with our legal and tax obligations

We do not sell, rent, or share your personal information with third parties for their own commercial purposes. Ever.

Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected:

• Order-related data is retained for a minimum of 5 years, in accordance with applicable tax and accounting obligations
• Browsing data and analytics cookies are retained for a maximum of 13 months
• If you have subscribed to marketing communications, we retain your data until you withdraw your consent

After these periods, data is securely deleted or anonymized.

Payment Processing

Payments made in our store are processed by secure payment platforms provided by Shopify and its associated payment providers. These platforms are PCI DSS certified and apply SSL/TLS encryption to all transactions.

Monak Mods does not directly store complete credit card information or sensitive financial data. All payment information is handled securely by our authorized payment providers.

Cookies

Our website uses cookies to improve your browsing experience and analyze how the site is used. Cookies fall into the following categories:

• Strictly necessary cookies: essential for the site to function, such as session and shopping cart cookies. These do not require consent.
• Analytics cookies: help us understand traffic and user behavior to improve the site. Only activated with your consent.
• Marketing cookies: used to show you relevant advertising on other sites. Only activated with your explicit consent.

You can manage or withdraw your cookie consent at any time through your browser settings or the cookie preference panel available on our site. Please note that disabling certain cookies may affect the functionality of some features.

Third-Party Services

To operate our store and analyze its performance, we use the following third-party services, which may have access to certain personal data in the course of their functions:

• Shopify (e-commerce platform)
• Payment providers (such as Stripe and PayPal)
• Web analytics tools (such as Google Analytics)
• Shipping and logistics services

All of these providers are bound by contractual confidentiality obligations and only have access to the data strictly necessary to perform their functions. You can review the privacy policies of each provider on their respective websites.

International Data Transfers

Some of our service providers, such as Shopify and Google, may process data outside the European Economic Area (EEA). In these cases, we ensure that such transfers are carried out with appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, or that recipients are covered by recognized adequacy mechanisms.

For customers in the United States: your data may be processed in the EU or in other countries where our service providers operate. In all cases, it is protected by the same high standards described in this policy.

Information Security

We apply reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, alteration, or disclosure. These include data encryption in transit, restricted access to personal data, and the use of platforms with recognized security standards.

However, no method of transmission over the internet or electronic storage is completely secure. In the event of a security breach affecting your data, we will notify the relevant authorities and, where required, the affected individuals, within the timeframes established by applicable law.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access: obtain confirmation of whether we process your data and, if so, access it
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your data when it is no longer necessary or you withdraw your consent
• Restriction: request that we restrict the processing of your data in certain circumstances
• Portability: receive your data in a structured, commonly used, machine-readable format and transmit it to another controller
• Objection: object to the processing of your data based on our legitimate interest or for direct marketing purposes
• Withdrawal of consent: where processing is based on your consent, you have the right to withdraw it at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at help@monakmods.com. We will respond to your request within 30 days.

Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority. In Portugal, that authority is the Comissão Nacional de Proteção de Dados (CNPD), accessible at www.cnpd.pt.

Customers in the United States may also contact the Federal Trade Commission (FTC) at www.ftc.gov for guidance on consumer privacy rights.

Changes to This Policy

Monak Mods reserves the right to update this privacy policy at any time to reflect changes in our practices or applicable regulations. Changes will be published on this page with the date of the last update. We recommend reviewing it periodically.

Last updated: March 2026.

Contact

If you have any questions about this privacy policy or how your personal data is used, we'd love to hear from you.

help@monakmods.com