Privacy Policy

Privacy Policy

This page sets out what personal information Maddie and Madison collects, why we collect it, and the control you have over it.

Who is responsible

Maddie and Madison is a store operated by SAJET LLC, 30 N Gould St Ste 700, Sheridan, WY 82801, United States. SAJET LLC is the controller of the data described here. You can contact us any time at info@maddieandmadison.com.

Information gathered automatically

Loading our website generates some technical information on its own: which page you opened, the date and time, how much data was transferred, the referring URL, your browser and its version, your operating system, and a shortened (anonymised) IP address. We process this in our legitimate interest in keeping the site secure and working properly (Art. 6(1)(f) GDPR). The store runs on Shopify International Ltd. in Dublin, Ireland; their privacy terms are at shopify.com/legal/privacy.

Cookies and your choices

Our cookies fall into three groups: strictly necessary ones that keep your cart and checkout working, functional/statistical ones tied to Shopify Analytics, and marketing cookies that only run once you consent. The relevant legal bases are Art. 6(1)(b), 6(1)(f) and 6(1)(a) GDPR.

When you get in touch

If you message us, we only use what you send to deal with your request (Art. 6(1)(b) and 6(1)(f) GDPR). We delete that correspondence once it's resolved, unless the law requires us to keep it longer.

Placing an order

Completing an order means we process your name, billing and delivery address, email, an optional phone number, and the details of what you bought (Art. 6(1)(b) GDPR).

Payments

Payments go through Shopify Payments. The information needed to take payment — your name, billing address, payment details and order data — is transmitted securely, and we never keep your full card number (Art. 6(1)(b) GDPR).

Delivery

To actually get your order to you, the necessary details are passed to our warehouse and delivery partners (Art. 6(1)(b) GDPR).

Measurement

We rely on Shopify's basic, anonymised analytics. We don't load Google Analytics, the Meta pixel or Google Ads tracking unless you've explicitly agreed (Art. 6(1)(f) GDPR).

The rights you hold

Under the GDPR you can ask to see your data, correct it, delete it, restrict or object to how we use it, take it elsewhere, or withdraw consent, and you can complain to a supervisory authority. To use any of these, just email info@maddieandmadison.com.

How long we keep things

We hold on to personal data only for as long as the purpose above requires, or for as long as the law obliges us to.