Privacy policy

Last updated: September 16, 2026

Who is responsible for your data
Mara Linden, Vuurdoornlaan 6, Nootdorp, the Netherlands, is the controller of the personal data described on this page. Because we are established in the Netherlands, European data protection law applies to everything we do, wherever you live. If you live in California, you also have the rights set out further down under the CCPA and the CPRA.

You can reach us about anything on this page at support@maralinden.com.

What we collect, why we collect it, and on what legal basis

Order data. Your name, shipping address, billing address, email address, phone number if you give one, and what you ordered. We need this to take your payment, ship your parcel and handle a return. Legal basis: performance of the contract with you, Article 6(1)(b) GDPR.

Payment data. Your card details go straight to our payment processor. We never see or store your full card number. We receive the last four digits, the card brand and whether the payment succeeded, which we need to match payments to orders and handle refunds and chargebacks. Legal basis: performance of the contract, Article 6(1)(b) GDPR.

Accounting records. Your invoice and order data are kept for 7 years. Legal basis: a legal obligation under Dutch tax law, Article 6(1)(c) GDPR.

Support messages. When you email us we keep your message and our reply so we can help you properly if you write again. Legal basis: performance of the contract where it concerns an order, and our legitimate interest in good customer service, Article 6(1)(f) GDPR.

Marketing emails. If you sign up, we keep your email address and what you clicked, so we can send you our emails. Legal basis: your consent, Article 6(1)(a) GDPR. Every email has an unsubscribe link and one click is enough. Withdrawing consent does not affect anything we sent before.

Website and device data. Your IP address, browser and device type, the pages you look at and what you click. We use this to keep the store working, to spot fraud and abuse, and to understand which products people are interested in. Legal basis: our legitimate interest in a working, secure and understandable store, Article 6(1)(f) GDPR. For any cookie that is not strictly necessary we ask your consent first, Article 6(1)(a) GDPR.

We do not use your data for automated decision making or profiling that has a legal or similarly significant effect on you.

Who we share it with

These are our processors and the recipients of your data:

Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, Ontario, K2P 2L8, Canada. Hosts our store, runs the checkout and processes payments through Shopify Payments.

Our fulfillment partners in Asia. They receive your name, address and order contents in order to pack and ship your parcel.

Our return center in the United States, Fulfillment Hub USA in Doral, Florida. Receives your name and order reference when you send something back.

The delivery carriers who bring the parcel to your door. They receive your name, address and phone number where the carrier requires one.

Google, where our analytics or advertising tags are running. Receives a record of your visit and, where you consented, cookie data.

Our email provider, if you have subscribed to our emails. Receives your email address and engagement data.

We do not sell your personal data. We do not share it with anyone for their own marketing. We only pass on what a party actually needs, and every processor is bound by a data processing agreement.

We will also disclose data where the law requires it, for example to a tax authority or in response to a valid legal order.

Sending data outside the European Economic Area
Our fulfillment partners are in Asia and several of our providers are in the United States and Canada, so your data does leave the EEA. We do that on the basis of the European Commission's Standard Contractual Clauses, combined with additional technical and organizational safeguards such as encryption in transit and access limited to the people who need it. You can ask us for a copy of the safeguards that apply to a specific transfer by emailing support@maralinden.com.

How long we keep things

Your rights under European law
Wherever you live, you can:

• Ask what personal data we hold about you and get a copy of it
• Have incorrect data corrected
• Have your data deleted, unless we are legally required to keep it
• Ask us to restrict what we do with your data while a dispute is being sorted out
• Object to processing we base on our legitimate interest
• Receive your data in a portable, machine readable format, or have it sent to another company
• Withdraw any consent you gave, at any time

Email support@maralinden.com with what you want. We verify that the request really comes from you, usually by matching the email address to an order, and we answer within one month. If a request is unusually complex we may need another two months, and we tell you within the first month if that happens. There is no charge.

Your rights if you live in California
Under the CCPA and the CPRA you can ask us to tell you what categories of personal information we collected about you in the past 12 months, where it came from, what we used it for and which categories of third party we shared it with. You can ask for a copy. You can ask us to delete it. You can ask us to correct it. You can opt out of any sale or sharing of your personal information, and you can limit the use of sensitive personal information. We do not sell or share personal information and we do not collect sensitive personal information as the CPRA defines it, so there is nothing to opt out of, but the right stands.

To make a request, email support@maralinden.com with the subject line Privacy Request. We answer within 45 days and can extend that once by another 45 days if we tell you why. You may use an authorized agent, in which case we will ask for written proof of their authority. We will never treat you differently, charge you a different price or give you worse service because you used one of these rights.

Cookies
Our store uses cookies that are strictly necessary to keep your cart, keep you signed in during checkout and prevent fraud. Those run without consent because the store cannot work without them. Analytics and advertising cookies run only where you have agreed to them, and you can change your mind at any time through the cookie settings on the site or by clearing cookies in your browser. Blocking the strictly necessary ones will break the cart and the checkout. No cookie we set lasts longer than 12 months.

Payment methods
The only payment methods we offer are the ones that actually work at our checkout: Visa, Mastercard, American Express, Discover, Shop Pay, Apple Pay and Google Pay, all handled by Shopify Payments. We do not show logos for methods you cannot use.

Children
Our store is not intended for children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, email us and we will delete it.

Security
The whole site runs over an encrypted connection. Payment data is handled by our payment processor under the PCI DSS standard. Inside our business, access to order data is limited to the people who need it to do their job. If a data breach happens that is likely to put your rights at risk, we will tell you and the supervisory authority within the legal deadlines.

How to complain
Email support@maralinden.com first and we will try to fix it. If you are not satisfied you can complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl, or to the supervisory authority in your own EU country. For consumer matters in the Netherlands you can also contact the Autoriteit Consument en Markt. If you live in California you can contact the California Attorney General or the California Privacy Protection Agency. Other US residents can contact their own state Attorney General.

Changes to this policy
If we start using a new tool that handles your data, we update this page and change the date at the top. Material changes are announced on the site.

Related pages
Our Terms of Service, Shipping Policy and Refund & Return Policy cover the rest of the relationship.

Company and contact
Mara Linden
Vuurdoornlaan 6
Nootdorp, the Netherlands

Email: support@maralinden.com
Customer service: Monday through Friday, 9:00 AM to 5:00 PM Eastern Time, reply within 24 hours on business days.
Phone: +1 239 523 9993, business inquiries only.