đź“„ Privacy Policy

Introduction
This Privacy Policy is provided in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable privacy laws. It explains how MAGAZINBAY COMPANY LIMITED 71-75 SHELTON STREET COVENT GARDEN WC2H9JQ LONDON UK (hereinafter “the Company”), collects, uses, stores, and protects personal data of users visiting the website and purchasing products.

1. Data Controller

The data controller is the Company.
For any communication regarding personal data protection, you can contact us at:
📧 email@magazinbay.com
đź“ž +1 (313) 2091539

2. Categories of Data Collected

The Company collects different categories of personal data:

  1. Data provided voluntarily by the user

    • First and last name

    • Shipping and billing address

    • Phone number and email address

    • Payment details (processed via secure payment gateways, never stored in full by the Company)

    • Any additional information provided through support requests or messages

  2. Browsing data

    • IP addresses

    • Browser type and device parameters used to connect to the site

    • Pages visited, date and time of access

    • Technical logs

  3. Cookies and tracking tools

    • Technical cookies: strictly necessary for website operation

    • Analytical cookies: used in anonymous or aggregated form

    • Profiling and marketing cookies (active only upon explicit consent)

3. Purposes and Legal Basis for Processing

Personal data is processed for the following purposes:

  1. Execution of contract

    • Order management, payment processing, shipping, returns, and customer support

    • Legal basis: performance of a contract (Art. 6.1.b GDPR)

  2. Legal obligations

    • Compliance with accounting, tax, and regulatory obligations

    • Legal basis: legal obligation (Art. 6.1.c GDPR)

  3. Legitimate interests of the Company

    • Fraud prevention, IT security, defense of rights in legal proceedings

    • Legal basis: legitimate interest (Art. 6.1.f GDPR)

  4. Marketing communications

    • Sending newsletters, promotions, and product updates

    • Legal basis: user consent (Art. 6.1.a GDPR)

  5. Profiling and targeted advertising

    • Analysis of purchase preferences, remarketing on platforms such as Google Ads or Meta Ads

    • Legal basis: explicit consent (Art. 6.1.a GDPR)

4. Processing Methods

Personal data is processed using electronic and telematic tools, applying adequate technical and organizational security measures to ensure confidentiality, integrity, and availability.

5. Data Retention

  • Accounting and billing data: retained for 10 years (legal obligation).

  • Order and shipping data: retained for 36 months.

  • Marketing data: retained until consent withdrawal or maximum 24 months.

  • Technical logs and browsing data: retained for 12 months.

6. Data Disclosure and Transfer

Personal data may be disclosed to:

  • Couriers and shipping providers

  • Payment service providers (e.g., PayPal, Stripe, banking circuits)

  • Tax and legal consultants

  • IT and hosting providers

  • Competent authorities upon legitimate request

Data may be transferred to non-EU countries (e.g., USA) only to entities providing adequate protection levels (e.g., EU-US Data Privacy Framework, or Standard Contractual Clauses approved by the European Commission).

7. User Rights

Under Articles 15–22 GDPR, users may exercise the following rights:

  • Access their personal data

  • Rectify inaccurate or outdated data

  • Erase personal data (“right to be forgotten”)

  • Restrict data processing

  • Data portability to another controller

  • Object to processing based on legitimate interest

  • Withdraw consent (without affecting prior lawful processing)

To exercise these rights, users can contact email@magazinbay.com.

8. Cookie Policy

The site uses cookies to ensure proper functionality and improve user experience.

  • Technical cookies: mandatory, no consent required

  • Analytical cookies: collected in aggregated form

  • Profiling/marketing cookies: active only with explicit consent, managed through the cookie banner and preferences panel

Users can manage or revoke consent via browser settings or the cookie preferences center.

9. Data Security

The Company adopts the following measures:

  • HTTPS/SSL encrypted transmission

  • Encryption of sensitive data

  • Regular backups

  • Access limited to authorized personnel

  • Continuous monitoring against unauthorized access or cyberattacks

10. Minors

The website is not intended for users under 18. If any minor’s data is collected, it will be deleted as soon as the Company becomes aware of it.

11. Changes to this Policy

The Company reserves the right to update this Privacy Policy at any time. Updates will be communicated through the website and, where applicable, via email. The date of the last update will always be indicated below.

Last updated: August 19, 2025