Privacy policy

Last updated: August 13, 2026

Malalma operates this store and this website, including the information, content, features, tools, products, and services provided to you, the customer, to offer you a curated shopping experience (the “Services”). Malalma is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase, or complete another transaction through the Services, or when you communicate with us by any other means. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will prevail with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your personal information is collected, used, and disclosed in accordance with this Privacy Policy.

Personal information we collect or process

When we use the term “personal information”, we mean any information that identifies you or can reasonably be linked to you or another person. Personal information does not include information collected anonymously or information that has been de-identified so that it cannot reasonably identify or be linked to you. Depending on how you interact with the Services, where you live, and what applicable law permits or requires, we may collect or process the following categories of personal information, including inferences drawn from that information:

  • Contact details, including your name, address, billing address, shipping address, telephone number, and email address.
  • Financial information, including credit card, debit card, and financial account numbers, payment card information, financial account details, transaction details, payment method, payment confirmation, and other payment-related information.
  • Account information, including your username, password, security questions, preferences, and settings.
  • Transaction information, including the items you view, add to your cart, save to your wishlist, purchase, return, exchange, or cancel, as well as your previous transactions.
  • Communications with us, including the information you provide when communicating with us, for example when submitting a customer service request.
  • Device information, including information about your device, browser or network connection, your IP address, and other unique identifiers.
  • Usage information, including information about how and when you interact with, use, or browse the Services.

Sources of personal information

We may collect personal information from the following sources:

  • Directly from you, including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
  • Automatically through the Services, including information from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies.
  • From our service providers, including when we engage them to enable certain technology or when they collect or process your personal information on our behalf.
  • From our partners or other third parties.

How we use your personal information

Depending on how you interact with us and which Services you use, we may use your personal information for the following purposes:

  • Providing, personalizing, and improving the Services. We use your personal information to provide the Services, including to perform our contract with you, process your payments, manage your orders, remember your preferences and items of interest, send you account-related notifications, process purchases, returns, exchanges or other transactions, create, maintain and manage your account, arrange shipping, facilitate returns and exchanges, allow you to post reviews, and offer a personalized shopping experience, such as recommending products related to your purchases.
  • Marketing and advertising. We use your personal information for marketing and promotional purposes, such as sending you commercial, advertising, and promotional communications by email, text message, or postal mail, and showing you online ads about products or services on the Services or on other websites, including based on items you previously purchased, added to your cart, or other activities performed on the Services.
  • Security and fraud prevention. We use your personal information to authenticate your account, provide a secure shopping and payment experience, detect, investigate, or take action regarding possible fraudulent, illegal, harmful, or malicious activity, protect public safety, and ensure the security of our services. If you use the Services and create an account, you are responsible for keeping your login credentials confidential. We strongly recommend that you do not share your username, password, or other information with anyone.
  • Communications with you. We use your personal information to provide customer support, respond to your requests, deliver services efficiently, and maintain our business relationship with you.
  • Legal reasons. We use your personal information to comply with applicable law or respond to valid legal processes, including requests from law enforcement or government authorities, and to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

How we disclose personal information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes in accordance with this Privacy Policy. These circumstances may include:

  • With Shopify, vendors, and other third parties who provide services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, order management, and shipping.
  • With business and marketing partners to provide marketing services and show you advertising. For example, we use Shopify to support personalized advertising through third-party services based on your online activity across different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have the right to tell us not to share information about you for personalized advertising and marketing based on your online activity across different merchants and websites.
  • When you direct us, request us, or otherwise consent to our disclosure of certain information to third parties, for example to ship products to you or through your use of social media widgets or login integrations.
  • With our affiliates or generally within our corporate group.
  • In connection with a business transaction, such as a merger or insolvency process, to comply with applicable legal obligations, to enforce applicable Terms of Service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify and with third parties that may be located in countries other than yours. In addition, to help protect, develop, and improve our business, we use certain advanced Shopify features that incorporate data and information obtained from your interactions with our store, with other merchants, and with Shopify. In these circumstances, Shopify is responsible for processing your personal information, including responding to your requests to exercise your rights related to the use of that information for those purposes. To learn more about how Shopify uses your personal information and what rights you may have, you can review the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights regarding your personal information here: Shopify Privacy Portal.

Third-party websites and links

The Services may include links to websites or online platforms operated by third parties. If you access links to sites not affiliated with or controlled by us, we recommend that you review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of those sites, including the accuracy, completeness, or reliability of the information they contain.

Children’s data

The Services are not intended for use by children, and we do not knowingly collect personal information from minors as defined by applicable law in your jurisdiction.

Security and retention of your information

No security measure is perfect or impenetrable, and we cannot guarantee “absolute security”. The length of time we retain your personal information depends on several factors, including the need to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce applicable agreements and policies.

Your rights and choices

Depending on where you live, you may have some or all of the following rights in relation to your personal information: access, deletion, correction, data portability, and the right to object to the sale or sharing of data for personalized advertising. You may also manage communication preferences and unsubscribe from promotional emails at any time. If you reside in the United Kingdom or the European Economic Area (EEA), and subject to local law, you may also have the right to object to or restrict processing and to withdraw consent when processing is based on consent.

You may exercise these rights where indicated in the Services or by contacting us using the details below. We will not discriminate against you for exercising these rights. We may need to verify your identity before processing your request.

Complaints

If you have a complaint about how we process your personal information, please contact us using the details below. Depending on where you live, you may have the right to appeal our decision or lodge a complaint with your local data protection authority. For the EEA, you can find a list of data protection authorities here.

International transfers

We may transfer, store, and process your personal information outside the country where you live. If we transfer your personal information outside the EEA or the United Kingdom, we will use recognized transfer mechanisms, such as the European Commission’s Standard Contractual Clauses or an equivalent contract issued by the competent UK authority, unless the transfer is to a country recognized as providing an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the updated version on this website, update the “Last updated” date, and notify you of changes as required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your rights, call us at , email us at celebrappmain@gmail.com, or contact us at Calle de Juan Zapata 1, 28703 San Sebastián de los Reyes, Madrid, Spain. For purposes of applicable data protection law, we are the data controller of your personal information.