Privacy Policy

This Privacy Policy explains how Mownii E-Commerce (“Mownii”, “we”, “our”) collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and other applicable laws.

1. Data We Collect

We may collect the following categories of personal data:

  1. Identity data: name, address, date of birth, contact details
  2. Account data: username, password, preferences, purchase history
  3. Transaction data: payments, orders, billing information
  4. Technical data: IP address, device, browser type, cookies
  5. Location data: geolocation for currency and shipping
  6. Communication data: customer service inquiries, emails
  7. Vendor-related data (for sellers): company documents, tax information, listings

2. How We Use Your Data

Your data is processed for:

  1. Account registration and management
  2. Order processing and delivery
  3. Payment authentication and fraud prevention
  4. Customer support and dispute resolution
  5. Marketing (only with consent)
  6. Vendor onboarding and verification
  7. Compliance with EU consumer law and taxation obligations
  8. Improvement of platform performance and user experience

3. Legal Basis for Processing

We process your data based on:

  1. Contractual necessity (e.g., processing orders)
  2. Legal obligations (VAT, invoicing, fraud control)
  3. Legitimate interests (platform security, service improvement)
  4. Consent (marketing, cookies)

4. Data Sharing

We may share data with:

  1. Payment processors
  2. Logistics and shipping partners
  3. Cloud hosting providers
  4. Vendor-sellers fulfilling your orders
  5. Government authorities where legally required
  6. Fraud prevention agencies

We do not sell personal data.

5. International Transfers

Where transfers occur outside the EU/EEA, they are secured using:

  1. EU-approved Standard Contractual Clauses (SCCs)
  2. Countries with EU adequacy decisions
  3. Robust technical and organisational security measures

6. Data Retention

Data is stored only for the period necessary to fulfil the purpose collected, including legal retention periods (e.g., tax documents: 10 years under Luxembourg law).

7. Your Rights

Under GDPR, you have the right to:

  1. Access your data
  2. Rectify inaccuracies
  3. Erase your data (“right to be forgotten”)
  4. Restrict processing
  5. Withdraw consent
  6. Object to processing
  7. Data portability

Requests can be sent to privacy@mownii.com.

8. Security Measures

We use:

  1. Encryption (SSL/TLS)
  2. PCI-DSS–compliant payment gateways
  3. Role-based access control
  4. Secure cloud infrastructure
  5. Continuous monitoring of system vulnerabilities

9. Contact

privacy@mownii.com