Privacy policy

Last updated: December 3, 2025 

horeca-madara operates this store and website, including all related information, content, features, tools, products and services (the “Services”). The Services are provided exclusively to business customers. Individuals who register an account on behalf of a company (“company representatives”) supply personal information that enables us to provide and operate the Services for the company they represent. The Services are powered by Shopify. 

This Privacy Policy describes how we collect, use, and disclose personal information when you visit the Services, register a business account, place an order, or otherwise interact with us. 

By registering a business account and accepting our Terms & Conditions during registration, a contract is formed between horeca-madara and the company you represent. This Privacy Policy governs the processing of personal information for the purpose of providing the Services. 

Personal Information We Collect 

“Personal information” means information that identifies or can reasonably be linked to an individual. In a B2B context, this refers to personal data of company representatives. 

We may collect or process the following categories of personal information: 

Business and Contact Details 

  • Name
  • Business email address
  • Business phone number
  • Business billing and shipping address
  • Company name
  • Company registration number
  • VAT number
  • Job role or position 

Financial Information 

  • Payment card or payment account details
  • Transaction details
  • Payment confirmations 

Account Information 

  • Username
  • Password
  • Security credentials
  • Account preferences and settings 

Transaction and Shopping Information 

  • Items viewed
  • Items added to wishlist
  • Items added to cart
  • Orders, cancellations, exchanges and returns
  • Shopping behaviour used for basic service personalization (e.g., relevant product suggestions, saved preferences)
  • Cart reminders if a purchase is not completed 

Communications 

  • Information included in support inquiries or communications with us 

Device and Usage Information 

  • Device, browser and network information
  • IP address
  • Interactions with the Services, such as navigation and usage patterns 

Sources of Personal Information 

We may collect personal information: 

  • Directly from company representatives when creating an account, placing orders, or communicating with us
  • Automatically through the Services (cookies, analytics, device data)
  • From service providers acting on our behalf
  • From partners or other third parties where necessary to operate the Services 

How We Use Personal Information 

We use personal information only to the extent necessary to provide and operate the Services for the company you represent, and to fulfil applicable legal obligations. 

Provide and Operate the Services 

  • Create, verify and manage business accounts
  • Authenticate company representatives
  • Process orders, payments, returns and exchanges
  • Arrange shipping
  • Maintain account preferences such as saved items and wishlist
  • Provide a consistent and functional shopping experience
  • Send reminders to complete an order
  • Show product suggestions based on previous orders and stored preferences 

Legal basis: performance of a contract with the company you represent; legitimate interest in providing a functional B2B purchasing environment. 

Marketing Communications 

We may send marketing emails to the business email address provided during registration. 

You can opt out at any time using the unsubscribe link. 

Legal basis: legitimate interest in B2B marketing, unless local law requires consent. 

Personalized Advertising 

We may display advertising or recommendations based on previous orders or activity within our Services. 

We do not combine your data with external consumer data sources. 

Legal basis: legitimate interest, limited to activity within our Services. 

Security and Fraud Prevention 

  • Verify account authenticity
  • Detect and prevent fraudulent or unauthorized activity
  • Maintain the security and integrity of the Services 

Legal basis: legitimate interest; legal obligations. 

Legal Compliance 

  • Accounting, tax and VAT requirements
  • Responding to legitimate requests from authorities
  • Maintaining business records as required by law 

Legal basis: legal obligation. 

We do not process personal information for purposes unrelated to providing the Services. 

How We Disclose Personal Information 

We may disclose personal information: 

  • To Shopify (hosting and platform operation)
  • To service providers performing functions such as payment processing, shipping, IT services, analytics and customer support
  • Within our corporate group
  • When instructed or authorised by the company you represent
  • To authorities where required by law
  • In connection with business transactions such as mergers or reorganisations 

We do not sell personal information. 

Relationship with Shopify 

Shopify processes certain personal information as part of hosting and operating the Services. 

For Shopify’s processing practices and rights relating to data controlled by Shopify, consult the Shopify Consumer Privacy Policy and Shopify Privacy Portal. 

Third-Party Links 

The Services may link to external websites that are not controlled by us. Their privacy practices are not governed by this Privacy Policy. 

Children’s Data 

The Services are intended for business use only and are not directed at children. We do not knowingly collect personal information from individuals under the age of majority. 

Security and Retention 

We use appropriate technical and organizational measures to protect personal information. 

Retention depends on: 

  • Contractual requirements
  • Legal and accounting obligations
  • Operational needs such as maintaining accurate order records
  • Dispute-resolution periods 

Personal information is not retained longer than necessary. 

Rights of Company Representatives 

Individuals whose personal information we process have the following rights under GDPR and other applicable laws: 

  • Access
  • Correction
  • Deletion
  • Restriction of processing
  • Objection, including the right to object to marketing
  • Data portability
  • Withdrawal of consent (where consent applies) 

These rights apply to individuals, even when acting on behalf of a company. 

We may require identity verification. Requests may be declined only where permitted by law. 

For data processed by Shopify, submit requests via the Shopify Privacy Portal. 

International Transfers 

Personal information may be transferred outside your country. 

For transfers from the EEA or UK, we use Standard Contractual Clauses or other recognised transfer mechanisms unless an adequacy decision applies. 

Chnges to This Privacy Policy 

We may update this Privacy Policy from time to time. The “Last updated” date will be updated accordingly. 

Contact 

For questions or for exercising your rights, contact: 

horeca@madaracosmetics.com 

We act as the data controller for personal information processed through the Services.