Privacy policy

Privacy Policy

Last updated: March 16, 2026

Introduction

Mona & Milo ("we," "us," or "our") operates monamilo.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and make purchases from our store. By using our site, you consent to the practices described in this policy.

Information We Collect

Personal Information You Provide:

When you create an account, place an order, sign up for our newsletter, or contact us, we collect:

Name, email address, phone number Shipping and billing addresses Payment information (processed securely by our payment providers - we do not store full credit card details) Order history and purchase preferences Communication preferences

Information Collected Automatically:

When you visit our site, we automatically collect:

IP address, browser type, and device information Pages visited, time spent on pages, and referring URLs Cookies and similar tracking technologies Location data (with your consent)

How We Use Your Information

We use your information to:

Process, fulfill, and ship your orders Send order confirmations and shipping updates Provide customer support Send marketing communications (only with your consent - you can opt out anytime) Personalize your shopping experience Prevent fraud and enhance security Analyze site performance and improve our services Comply with legal obligations

Legal Basis for Processing (GDPR)

We process your personal data based on:

Contract performance (to fulfill your orders) Legitimate interests (to improve our services and prevent fraud) Consent (for marketing communications and cookies) Legal obligations (to comply with tax and accounting requirements)

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information with:

Service Providers: Payment processors (Shopify Payments, PayPal, etc.), shipping carriers, email service providers, and marketing platforms who assist us in operating our business Legal Requirements: Law enforcement, government authorities, or other third parties when required by law or to protect our rights Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred (you will be notified)

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to:

Remember your preferences and shopping cart Analyze site traffic and user behavior Deliver personalized content and advertisements Enable social media features

You can control cookies through your browser settings. Note that disabling cookies may affect site functionality.

Your Privacy Rights

For EU/EEA Residents (GDPR):

Right to access your personal data Right to rectification (correct inaccurate data) Right to erasure ("right to be forgotten") Right to restrict processing Right to data portability Right to object to processing Right to withdraw consent at any time Right to lodge a complaint with your local data protection authority

For California Residents (CCPA/CPRA):

Right to know what personal information is collected Right to know if personal information is sold or shared Right to opt out of the sale of personal information (we do not sell your data) Right to deletion Right to non-discrimination for exercising your rights

For Other Jurisdictions:

You may have similar rights under local privacy laws. Contact us to exercise your rights.

To Exercise Your Rights:

Data Security

We implement industry-standard security measures including encryption, secure servers, and access controls to protect your personal information. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as:

Your account is active Necessary to provide our services Required by law (e.g., tax records for 7 years) Necessary for legitimate business purposes

After this period, we will securely delete or anonymize your data.

Children's Privacy

Our website is not intended for children under 16 years of age (or 13 in some jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries outside your own, including the United States. We ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission Adequacy decisions Other legally approved transfer mechanisms

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

Marketing Communications

With your consent, we may send you promotional emails about new products, special offers, and updates. You can opt out at any time by:

Clicking "unsubscribe" in any marketing email Updating your account preferences Contacting us through our contact form or chat

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

Posting the updated policy on this page with a new "Last updated" date Sending you an email notification (for significant changes) Displaying a notice on our website

Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have privacy concerns, please contact us through our contact form or chat with us.

For GDPR-related inquiries, you may also contact our Data Protection Officer through our contact form.

We will respond to all requests within 30 days (or as required by applicable law).