Privacy Policy
Last updated: 12 November 2026
This privacy policy describes how Monte Cypria collects, uses and shares your personal data when you visit or use our services, make a purchase on montecypria.com or otherwise communicate with us. The details of the data controller can be found at the bottom of this page.
Personal data we collect
- Data you provide to us directly: name, address, telephone number and email address; delivery and billing address and payment confirmation; account details when you create an account; and any information you send us through customer service.
- Payment data: processed by our payment service providers. We do not have access to your full card details.
- Data we collect automatically: device type, browser, IP address, network data and your behaviour on the Website, through cookies and similar technologies.
- Data from third parties: from Shopify, which provides the technical support for our Website; from payment service providers; and from the technology partners we use for analytics and advertising.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Processing orders, handling payments and coordinating shipments | Performance of the contract |
| Handling returns, refunds and customer service enquiries | Performance of the contract |
| Creating and managing an account | Performance of the contract |
| Sending commercial emails and personalised offers | Your consent; or legitimate interest if you are already a customer and the products are similar, with an option to unsubscribe in every message |
| Analytical cookies and personalised advertising on third-party platforms | Your consent, given via the cookie banner |
| Detecting and preventing fraud | Legitimate interest in protecting the shop and our customers |
| Complying with accounting and tax obligations | Legal obligation |
Sharing your personal data
We do not sell your data. We only share it where necessary to run the shop or where required by law:
- E-commerce platform — Shopify, which hosts and supports the Website
- Payment service providers, which process your payment data
- Fulfilment centre and carriers — our fulfilment centre in China and the carriers receive your name, address and the contents of your order
- Email and analytics — Klaviyo, for our order and marketing emails and for insight into the use of the Website
- Advertising — Meta, via the Meta Pixel, if you have consented to marketing cookies
- Order tracking — Parcel Panel, which powers our tracking page
- Competent authorities, where we are legally required to do so
We conclude a data processing agreement with parties that process data on our behalf.
International transfers
We are based in the Netherlands. Our fulfilment centre is located in China, and some of our service providers (such as Shopify, Klaviyo and Meta) also process data outside the European Economic Area. Your personal data may therefore be processed outside the European Economic Area. For these transfers, we ensure appropriate safeguards, such as the standard contractual clauses approved by the European Commission, supplemented where necessary by additional measures and a transfer assessment. If you would like to receive a copy of the safeguards used, please email info@montecypria.com.
Cookies
Cookies are small files stored on your device. Necessary cookies make sure the Website works and do not require consent. Analytical and marketing cookies are only placed after you have given your consent via our cookie banner.
| Provider | Type | What it does | Retention period |
|---|---|---|---|
| Shopify | Necessary | Shopping cart, checkout process, security and session management. Essential for the functioning of the Website. | Session up to 2 years |
| Parcel Panel | Necessary | Provides the tracking page and shows up-to-date information about your shipment. | Up to 1 year |
| Klaviyo | Analytical | Measures how visitors use the Website and how our emails perform, so that we can improve both. | Up to 2 years |
| Meta Pixel | Marketing | Tracks browsing behaviour and conversions to show you personalised ads on Facebook and Instagram. | Up to 2 years |
Managing your preferences. On your first visit, we ask you to accept or reject non-necessary cookies. Rejecting is just as easy as accepting. You can change or withdraw your choice at any time via the Cookie settings link on the Website, just as easily as you gave it. You can also block or delete cookies through your browser settings, although this may affect how certain parts of the Website work.
Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal, nor your ability to order from us.
Retention periods
- Order and invoice data: 7 years, in accordance with the statutory tax retention obligation.
- Account data: for as long as your account exists, and up to 1 year after it is closed.
- Marketing data: until you unsubscribe or withdraw your consent.
- Cookies: in accordance with the periods in the table above.
- Customer service correspondence: 3 years after the last contact.
Your rights
You have the right to access, rectify and erase your personal data, as well as the right to withdraw your consent, to object to processing, to have processing restricted, and the right to data portability.
Send your request to info@montecypria.com. To make sure the request comes from you, we may ask you to confirm your identity, for example using details of a recent order. We will respond as quickly as possible and in any case within one month.
You can lodge a complaint with our lead supervisory authority, the Dutch Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the supervisory authority in your own country: in Spain the Agencia Española de Protección de Datos (aepd.es), in Italy the Garante per la protezione dei dati personali (garanteprivacy.it), and in France the Commission Nationale de l'Informatique et des Libertés (cnil.fr).
Security
We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, unwanted disclosure and unauthorised alteration. The Website uses a secure SSL connection. No system is completely watertight: do not send us sensitive information through channels that are not appropriately secured for that purpose.
Minors
Our Services are not aimed at children under the age of 16, and we do not knowingly collect their personal data. If you are a parent or guardian and believe that a minor has provided us with personal data, please email info@montecypria.com and we will delete it.
Third-party websites and links
The Website may contain links to third-party pages. We are not responsible for their content, security practices or privacy policies. Please read their policies before providing them with personal data.
Changes to this privacy policy
This policy may be updated to reflect changes in our practices or for legal or operational reasons. We will publish the updated version on the Website with a new date.
Contact
Email: info@montecypria.com.
Data controller
| Controller | EB Collective VOF (general partnership under Dutch law) |
| Trade name | Monte Cypria |
| Chamber of Commerce (KvK) number | 97970786 |
| VAT number | NL868308572B01 |
| Address | Industrieweg 7 (0.7, Postbus K4), 4338 PR Middelburg, the Netherlands |
| info@montecypria.com | |
| Website | montecypria.com |