Privacy Policy

Last updated: June 14, 2026

1. Introduction

MayaHue (“we”, “our”, “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketplace platform. Please read this policy carefully. By using MayaHue, you consent to the practices described herein.

2. Data We Collect

We collect the following types of data:

Account Data

  • Name, username, email address, and password (hashed).
  • Profile information such as bio, avatar, and shop details.
  • Shipping addresses and phone numbers for order fulfillment.

Transaction Data

  • Purchase history, listing details, prices, and payment records.
  • Payment method information (processed by payment processors; we do not store full card details).

Technical Data

  • IP address, browser type, operating system, and device information.
  • Pages visited, time spent, and referral URLs.
  • Cookies and similar tracking technologies (see Section 7).

Communication Data

  • Messages sent through our platform between buyers and sellers.
  • Support inquiries and correspondence with our team.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data under the following legal bases:

  • <strong>Contract performance:</strong> To fulfill orders and provide marketplace services.
  • <strong>Legitimate interests:</strong> To improve the platform, prevent fraud, and ensure security.
  • <strong>Consent:</strong> For marketing communications and non-essential cookies.
  • <strong>Legal obligation:</strong> To comply with applicable laws and regulations.

4. How We Use Your Data

  • To operate, maintain, and improve the marketplace platform.
  • To process transactions and send order confirmations.
  • To facilitate communication between buyers and sellers.
  • To detect and prevent fraud, abuse, and prohibited activities.
  • To comply with legal obligations.
  • To send service-related notifications (not marketing, unless you opt in).

5. Data Sharing and Third Parties

We may share your data with:

  • <strong>Sellers/Buyers:</strong> Necessary information to complete transactions (e.g., shipping address to seller, your name to buyer).
  • <strong>Payment processors:</strong> To process payments securely.
  • <strong>Service providers:</strong> Hosting, analytics, and email delivery services.
  • <strong>Law enforcement:</strong> When required by law or to protect our rights.

We do not sell your personal data to third parties.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 90 days to comply with legal obligations, resolve disputes, and enforce agreements. Anonymized analytics data may be retained indefinitely.

7. Cookie Policy

Essential Cookies

  • Session cookies for authentication and cart functionality.
  • Security cookies to prevent fraud.

Analytics Cookies

  • We use privacy-respecting analytics to understand platform usage.
  • No personal data is shared with third-party analytics providers.

Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality. You may also use our cookie consent banner to accept or reject non-essential cookies.

8. Your Rights (GDPR & CCPA)

You have the following rights regarding your data:

  • <strong>Access:</strong> Request a copy of the data we hold about you.
  • <strong>Rectification:</strong> Correct inaccurate or incomplete data.
  • <strong>Erasure ('Right to be Forgotten'):</strong> Request deletion of your data.
  • <strong>Portability:</strong> Receive your data in a structured, machine-readable format.
  • <strong>Restriction:</strong> Limit how we process your data in certain circumstances.
  • <strong>Objection:</strong> Object to processing based on legitimate interests.
  • <strong>Withdraw consent:</strong> Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at privacy@mayahue.com. We will respond within 30 days. If you are in the EEA, you also have the right to lodge a complaint with your local data protection authority.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS 1.3), hashed passwords (bcrypt), and regular security audits. However, no method of transmission or storage is 100% secure.

10. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for transfers from the EEA.

11. Children's Privacy

MayaHue is not intended for children under 18. We do not knowingly collect data from children. If we learn that a child under 18 has provided us with personal data, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Material changes will be notified to you via email or platform notice.

13. Contact

For privacy-related inquiries, contact our Data Protection Officer at privacy@mayahue.com or write to: MayaHue, 123 Artisan Way, San Francisco, CA 94102, USA.