Privacy policy

MahaOcean operates this store and website, including its related information, content, features, products, tools, and services, to provide customers with a curated shopping experience (collectively, the “Services”).

Our store is powered by Shopify, which enables us to provide the Services. This Privacy Policy explains how we collect, use, process, and disclose personal information when you visit or use the Services, make a purchase or other transaction, create an account, or communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy concerning the collection, processing, or disclosure of personal information, this Privacy Policy will control.

By using the Services, you acknowledge that you have read and understood the practices described in this Privacy Policy.

Personal information we collect or process

“Personal information” means information that identifies you or can reasonably be linked to you or another person. It does not include information that has been collected anonymously or appropriately de-identified.

Depending on how you interact with the Services, where you live, and what applicable law permits or requires, we may collect or process the following categories of personal information:

Contact information, including your name, billing address, shipping address, telephone number, and email address.
Payment and transaction information, including your payment method, billing details, transaction amount, payment status, and payment confirmation. Complete payment-card details are generally processed by Shopify and the applicable payment processor rather than directly by MahaOcean.
Account information, including your username, account credentials, preferences, and settings.
Transaction information, including products you view, place in your cart, add to a wishlist, purchase, return, exchange, or cancel, as well as your previous transactions.
Communications, including information you provide when contacting customer support, submitting a return request, responding to a survey, or otherwise communicating with us.
Device and technical information, including information about your device, browser, network connection, IP address, and other online identifiers.
Usage information, including how and when you interact with, access, or navigate the Services.
Marketing information, including your communication preferences and interactions with promotional messages.
Order-fulfillment information, including tracking information, delivery status, return status, and communications with fulfillment providers or shipping carriers relating to your order.

Sources of personal information

We may collect personal information from the following sources:

Directly from you when you make a purchase, create an account, use the Services, communicate with us, request customer support, or otherwise provide information.
Automatically through cookies, pixels, analytics technologies, and similar tools when you access or use the Services.
From Shopify and our payment, technology, analytics, marketing, security, and customer-support providers.
From approved suppliers, fulfillment providers, shipping carriers, and return-processing partners.
From business partners, social-media platforms, advertising partners, and other third parties, where permitted by law.

How we use personal information

Depending on how you interact with us, we may use personal information for the following purposes:

Providing and improving the Services

We use personal information to:

Process payments and transactions.
Fulfill, ship, deliver, track, cancel, return, or refund orders.
Communicate order and account information.
Maintain and administer customer accounts.
Remember customer preferences and products of interest.
Provide customer service.
Investigate missing, damaged, defective, or incorrect products.
Enable product reviews or other store features.
Recommend products and personalize the shopping experience.
Analyze and improve the functionality, performance, and usability of the Services.

Marketing and advertising

Where permitted by law, we may use personal information to send marketing and promotional communications by email, text message, postal mail, or other channels.

We may also use information about your interactions with the Services to measure advertising performance, understand customer interests, and display advertisements on our Services or other websites and platforms.

You may unsubscribe from promotional emails at any time by using the unsubscribe link included in those messages.

Security and fraud prevention

We may use personal information to:

Authenticate accounts.
Protect the security of the Services.
Provide a secure payment and shopping experience.
Detect, investigate, prevent, or respond to potentially fraudulent, illegal, malicious, or unsafe activity.
Enforce our policies and protect MahaOcean, our customers, and others.

If you create an account, you are responsible for protecting your account credentials and should not share your password or access information with anyone else.

Communicating with you

We use personal information to respond to questions, provide customer support, communicate about orders and returns, deliver important notices, and maintain our business relationship with you.

Legal and compliance purposes

We may use personal information to:

Comply with applicable laws and regulations.
Respond to subpoenas, court orders, government inquiries, and other valid legal processes.
Investigate or participate in actual or potential claims, disputes, litigation, or regulatory proceedings.
Enforce our Terms of Service and other policies.
Protect our legal rights and the rights, safety, and property of customers and others.

How we disclose personal information

We may disclose personal information to third parties for legitimate business purposes, subject to this Privacy Policy and applicable law.

Recipients may include:

Shopify, which hosts the Services and processes information necessary to operate and improve our store.
Payment processors and financial-service providers that process payments, refunds, disputes, and fraud-prevention activities.
Approved suppliers, fulfillment providers, shipping carriers, and return-processing partners. We may provide information necessary to process an order, including your name, shipping address, contact information, ordered products, and relevant order or return details.
Technology and service providers that assist with website hosting, cloud storage, analytics, cybersecurity, customer support, communications, accounting, and other business functions.
Marketing and advertising partners, where permitted, to provide marketing services, measure advertising, or display relevant advertising.
Professional advisers, including attorneys, accountants, auditors, insurers, and consultants.
Government agencies, regulators, courts, or law-enforcement authorities where disclosure is required or permitted by law.
Parties to a business transaction, such as a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction.

We may also disclose personal information when you direct us, request the disclosure, or otherwise consent, including when using social-media widgets, integrations, or third-party login tools.

Third-party fulfillment

Certain products purchased through MahaOcean may be stored, processed, or shipped directly by approved third-party suppliers and fulfillment partners.

To fulfill these orders, we may provide the applicable partner with information such as your name, delivery address, telephone number, email address, ordered products, and relevant order instructions.

These partners receive information to perform services such as processing, shipping, delivering, tracking, supporting, or returning an order. MahaOcean remains the customer’s point of contact for orders placed through our store.

Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information relating to your access to and use of the Services to provide, secure, personalize, and improve Shopify’s services.

Information submitted through the Services may be transmitted to Shopify and other service providers, including providers located outside the country where you reside.

Shopify may offer enhanced services that use information concerning interactions with our store and other Shopify merchants. Where those services are enabled, Shopify processes relevant information as described in its applicable terms and privacy notices.

To learn more about Shopify’s privacy practices and available privacy rights, visit the Shopify Consumer Privacy Policy.

Cookies and similar technologies

We and our service providers may use cookies, pixels, software development kits, and similar technologies to operate the Services, remember preferences, understand store usage, prevent fraud, measure performance, and support marketing and advertising.

Where required, we will request consent before using non-essential cookies. Available cookie and privacy controls may depend on your location.

Depending on your jurisdiction, you may be able to exercise applicable opt-out rights through the Your Privacy Choices or privacy-preferences link displayed on our website.

Third-party websites and links

The Services may contain links to websites or online platforms operated by third parties.

If you follow a link to a third-party service, you should review that party’s privacy policy, security practices, and terms. We do not control and are not responsible for the privacy, security, accuracy, or reliability of third-party websites or services.

The inclusion of a third-party link does not necessarily imply that MahaOcean endorses the third party or its content.

Information you post in public or semi-public locations, including third-party social-media platforms, may be visible and used by other people. You should exercise care when disclosing information publicly.

Children’s privacy

The Services are not intended for children under 13, and we do not knowingly collect personal information directly from children under 13.

If you are a parent or legal guardian and believe a child has provided personal information to us, contact us at support@mahaocean.com to request its deletion.

We do not have actual knowledge that we sell or share, as those terms may be defined by applicable law, personal information belonging to individuals under 16 years of age.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However, no security system or method of transmitting information over the internet is completely secure. We cannot guarantee absolute or perfect security.

Please avoid sending sensitive or confidential information through unsecured communication channels.

Retention of personal information

We retain personal information for as long as reasonably necessary to:

Provide the Services.
Fulfill orders and administer customer accounts.
Maintain business and transaction records.
Comply with tax, accounting, legal, and regulatory obligations.
Prevent fraud and protect the security of the Services.
Resolve disputes and enforce agreements and policies.

Retention periods depend on the nature of the information, the purposes for which it was collected, and applicable legal requirements.

When personal information is no longer reasonably necessary, we may delete, anonymize, or securely dispose of it.

Your privacy rights and choices

Depending on where you live, you may have some or all of the following rights:

Access or knowledge: You may have the right to request information about the personal information we maintain about you.
Deletion: You may have the right to request deletion of certain personal information.
Correction: You may have the right to request correction of inaccurate personal information.
Portability: You may have the right to receive a copy of certain personal information in a portable format.
Opt out of sale, sharing, or targeted advertising: You may have the right to opt out of certain uses or disclosures considered a “sale,” “sharing,” or “targeted advertising” under applicable law.
Withdraw consent: Where processing is based on consent, you may have the right to withdraw that consent.
Appeal: You may have the right to appeal a decision concerning a privacy request.

These rights are not absolute and may apply only in certain circumstances. We may decline or limit a request where permitted or required by law.

You may submit a privacy request by emailing support@mahaocean.com or by using the privacy-request options available through the Services.

We may need to verify your identity before completing a request. Where permitted, an authorized agent may submit a request on your behalf, but we may require proof of authorization and direct identity verification.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

Global Privacy Control and Do Not Track

Where required by applicable law, we will treat a recognized Global Privacy Control signal as a request to opt out for the browser or device transmitting that signal.

If Shopify can associate the device with a Shopify account, the preference may also be applied to that account.

To learn more about Global Privacy Control, visit globalprivacycontrol.org.

Except where required by applicable law, we do not respond to other “Do Not Track” signals.

Communication preferences

You may unsubscribe from promotional emails at any time by selecting the unsubscribe option included in those emails.

After opting out of promotional communications, we may continue sending non-promotional messages concerning orders, transactions, account security, policy changes, recalls, or customer-service matters.

International transfers

We, Shopify, and our service providers may transfer, store, and process personal information outside the state, province, or country where you reside.

When applicable law requires safeguards for international transfers, we or the relevant service provider will rely on legally recognized transfer mechanisms, such as adequacy decisions or approved contractual protections.

Complaints and appeals

If you have a question or complaint concerning how we process personal information, contact us using the information below.

Depending on where you live, you may have the right to appeal our decision concerning a privacy request or submit a complaint to your applicable attorney general, privacy regulator, or data-protection authority.

To appeal a decision made by MahaOcean concerning a privacy request, email support@mahaocean.com and include “Privacy Appeal” in the subject line.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, services, legal obligations, or other operational requirements.

When we update the policy, we will publish the revised version on this website and provide any additional notice required by applicable law.