Privacy and cookie policy

Effective from: 03/11/2026

This policy explains how we collect and use personal data when you visit the MAYDRIX online shop, place an order or contact us, and how we use cookies. It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who we are

The data controller responsible for your personal data is MF Projects - Dawid Boreński, trading as MAYDRIX, ul. Pisarka 25 lok. 12, 39-300 Mielec, Poland. Registered in the Polish Central Register of Business Activity (CEIDG). Tax ID (NIP): 8172204052. REGON: 521197769.

For any privacy question or request, e-mail contact@maydrix.com. We have not appointed a data protection officer.

2. What data we collect

• Identity and contact data: your name, delivery and billing address, e-mail address and, if you choose to give it at checkout, a phone number for the carrier.
• Order data: the products you buy, order history, cancellations, returns and fault reports.
• Payment data: payment status and limited details such as the card type and last four digits. Full card details are handled only by our payment provider; we never see or store them.
• Correspondence: messages you send us by e-mail or through the contact form.
• Technical data: IP address, cookie identifiers, device and browser information, and how you use the Shop.

We collect this data directly from you, and technical data automatically through cookies and similar technologies (see section 9).

3. Why we use your data and our lawful bases

• Processing and delivering your order, including sending the MAYDRIX Pack and order e-mails. Lawful basis: performance of a contract with you. Kept for the duration of the contract and then as described below.
• Handling cancellations, returns and fault reports. Lawful basis: legal obligation (consumer law) and performance of a contract. Kept until the matter is closed and then as described below.
• Keeping accounting and tax records. Lawful basis: legal obligation. Kept for as long as tax law requires, normally 6 years from the end of the financial year concerned.
• Establishing, exercising or defending legal claims. Lawful basis: our legitimate interests in protecting our rights. Kept for up to 6 years after the end of the contract (the general limitation period for contract claims in England and Wales).
• Answering your messages. Lawful basis: our legitimate interests in responding to enquiries, or steps you ask us to take before entering into a contract. Kept for up to 12 months after the conversation ends, unless it relates to an order.
• Keeping the Shop secure and preventing fraud. Lawful basis: our legitimate interests in protecting the Shop and our customers. Kept for as long as needed for that purpose.
• Analytics and advertising measurement (for example Meta advertising tools). Lawful basis: your consent, given through the cookie banner. Kept until you withdraw consent or the cookie expires.
• Newsletter, if you sign up. Lawful basis: your consent. Kept until you unsubscribe.

Giving us your data is voluntary, but we need your name, delivery address and e-mail address to accept and deliver an order. Without them we cannot enter into a contract with you.

Where we rely on legitimate interests, you can ask us for more information about how we have balanced our interests against yours.

4. How we protect your data

• All connections to the Shop are encrypted (SSL/TLS).
• Access to personal data is limited to people who need it to handle orders and enquiries.
• Card details are processed only by our payment provider.
• Our Shop administration accounts are protected with strong passwords and two-factor authentication.

5. Who we share your data with

We only share your data where needed for the purposes above, with:

• Shopify, which hosts the Shop and processes payments;
• our fulfilment partners (product suppliers, including suppliers selling through AliExpress) and the delivery carriers they use;
• Meta Platforms (advertising tools), only if you consent to marketing cookies;
• providers of e-mail, IT and accounting services;
• professional advisers, such as lawyers, where needed;
• public authorities, where the law requires it.

We share your name, delivery address and order details with our fulfilment partners and their delivery carriers only to fulfil and deliver your order.

6. International transfers

Some of the organisations above may process your data outside the UK, for example Shopify (Canada and other countries), Meta (United States) and our fulfilment partners and the delivery carriers they use, which may be based outside the UK. Sharing your delivery details with them to fulfil your order can therefore involve a transfer of your data outside the UK. Where this happens, we rely on UK adequacy regulations (such as the UK Extension to the EU-US Data Privacy Framework, where the recipient is certified) or on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.

7. Your rights

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict how we use your data in certain circumstances;
• receive your data in a portable format, where processing is based on consent or contract and carried out by automated means;
• withdraw your consent at any time, without affecting processing carried out before you withdrew it. You can change your cookie choices at any time through the cookie settings link in the Shop footer, and unsubscribe from the newsletter using the link in any e-mail.

Your right to object: you can object at any time to processing based on our legitimate interests, and you can always object to direct marketing.

To use any of these rights, e-mail contact@maydrix.com. We will reply within one month, which can be extended in some cases, and we will tell you if that happens.

Complaints: if you are unhappy with how we have handled your data, please contact us first so that we can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk/make-a-complaint.

8. Automated decisions and profiling

We do not make decisions that have legal or similarly significant effects on you based solely on automated processing. If you consent to marketing cookies, Meta may use information about your activity in the Shop to show you more relevant adverts.

9. Cookies

Cookies are small files stored on your device. We use them and similar technologies in four categories:

• Strictly necessary: needed for the Shop to work, for example to keep your basket, process checkout and keep the Shop secure. These do not require consent.
• Functional: remember your preferences and settings.
• Analytics: help us understand how the Shop is used so that we can improve it.
• Marketing: used by advertising partners such as Meta to measure our adverts and show you relevant adverts on other sites.

When you first visit the Shop, a cookie banner lets you accept or reject non-essential cookies. We only set functional, analytics and marketing cookies if you allow them, and you can change your choices at any time through the cookie settings link in the Shop footer. You can also block or delete cookies in your browser settings; if you block strictly necessary cookies, the basket and checkout may not work.

10. Changes to this policy

We may update this policy when the law or the tools we use change. The current version and its effective date are always published on this page.