Security and Privacy

1. WHO WE ARE

Thumbelina Ltd
VAT No: MT24052311
Registered Address: Upper Block A, A15, Industrial Area, Burmarrad, Malta
Email: info@okfashion.com.mt

We are the data controller responsible for your personal data.

2. WHAT DATA WE COLLECT

We may collect the following personal data:

- Name and surname
- Email address
- Phone number
- Billing and delivery address
- Payment details (processed securely via third-party providers)
- IP address and browsing data

3. HOW WE USE YOUR DATA

We use your data to:

- Process and deliver your orders
- Communicate with you regarding your order
- Provide customer support
- Improve our website and services
- Send marketing communications (only with your consent)

4. LEGAL BASIS FOR PROCESSING

We process your data based on:

- Contractual necessity (to fulfil your order)
-Legal obligations (tax/accounting requirements)
-Legitimate interests (improving services)
-Consent (for marketing communications)

5. SHARING YOUR DATA

We may share your data with trusted third parties, including:

- Payment providers (e.g. Shopify Payments, card processors)
- Delivery partners (couriers)
- IT and hosting providers (e.g. Shopify platform)

Your data is only shared where necessary to provide our services.

6. DATA RETENTION

We retain your personal data only as long as necessary:

- Order data is retained for legal and tax purposes
- Marketing data is kept until you withdraw consent

7. YOUR RIGHTS

Under GDPR, you have the right to:

- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Withdraw consent for marketing
- Request data portability

To exercise your rights, contact us at: info@okfashion.com.mt