Privacy Policy
Introduction
At Treasures of Maimi, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website at treasuresofmaimi.com and our services.
Information We Collect
We collect the following types of information:
- Personal information (name, email address, shipping address, phone number)
- Payment information (processed securely through Stripe — we never store your card details)
- Account information provided through third-party sign-in services (see below)
- Shopping preferences, order history, and wishlist items
- Device and browser information collected automatically when you visit our site
Third-Party Authentication (Google Sign-In)
We offer Google Sign-In as a convenient way to create an account and log in. When you choose to sign in with Google, we receive the following information from your Google account:
- Your email address
- Your name (first and last name)
- Your profile picture (if available)
We use this information solely to create and manage your Treasures of Maimi account. We do not access your Google contacts, calendar, files, or any other Google account data. Your Google password is never shared with us — authentication is handled securely by Google.
You can revoke Treasures of Maimi's access to your Google account at any time by visiting your Google Account Permissions. Google's use of your information is governed by Google's Privacy Policy.
How We Use Your Information
- Create and manage your account
- Process your orders and provide customer service
- Send order updates, shipping notifications, and certificates of authenticity
- Improve our products and services
- Personalise your shopping experience
- Comply with legal obligations
Data Sharing
We do not sell your personal information. We share your data only with the following third-party services necessary to operate our business:
- Stripe — payment processing (PCI DSS compliant)
- Klarna — installment payment processing (via Stripe)
- Google — authentication (when you use Google Sign-In)
- Resend — transactional email delivery (order confirmations, shipping updates)
- Cloudinary — image hosting and delivery
- Sentry — error monitoring (anonymised technical data only)
Data Security
We implement appropriate security measures to protect your personal information, including encrypted connections (HTTPS), secure authentication, and Row Level Security on our database. Your payment information is processed through Stripe, a PCI DSS-compliant payment gateway — we never store your card details on our servers.
Cookies
We use essential cookies to maintain your session and remember your preferences. We also use analytics cookies (Microsoft Clarity) to understand how visitors use our site. You can manage your cookie preferences through our cookie consent banner.
Your Rights
Under GDPR and other applicable privacy laws, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to data processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, please contact us at the email address below.
Contact Us
If you have any questions about our Privacy Policy or how we handle your data, please contact us at treasuresofmaimi@gmail.com
Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.