Privacy Policy for MXGRADE.COM
Effective Date: May 1st, 2025

KSHS EUROPE OÜ ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your personal data when you interact with our webshop www.mxgrade.com ("Website"). Our practices are in compliance with applicable EU legislation, including the General Data Protection Regulation (GDPR), and Estonian laws.

1. What Personal Data We Collect

We collect the following types of personal data:

  • Contact information (name, email address, phone number, postal address)

  • Login and account data (username, password, language preferences)

  • Purchase history and shopping preferences

  • Communication preferences and consent

  • Payment and billing details (processed securely via third-party providers)

  • Data from cookies (refer to our Cookie Policy for more details)

Personal data may be collected:

  • When you create an account or place an order

  • When you contact us or subscribe to newsletters

  • Through cookies while browsing our Website

  • When you apply for hire-purchase

2. Use of Personal Data

We use your personal data to:

  • Process and fulfil orders

  • Provide customer support

  • Improve our Website and services

  • Send you relevant offers, news, and product updates (with your consent)

  • Fulfill legal and regulatory requirements

You can unsubscribe from marketing emails at any time by clicking the “unsubscribe” link or by contacting us directly.

3. Legal Basis for Processing

We process your data under the following legal bases:

  • Performance of a contract (e.g., order fulfilment)

  • Legal obligations (e.g., tax records)

  • Legitimate interest (e.g., fraud prevention, Website optimization)

  • Consent (e.g., marketing communications)

4. Data Sharing and Third Parties

We may share your data with:

  • Shopify Inc., our e-commerce platform provider, for hosting and secure data processing

  • Shopify Payments and authorised payment providers (e.g., Montonio Finance OÜ/UAB) for payment transactions

  • Delivery and logistics partners for fulfilling your orders

  • Marketing and analytics partners, only with your consent

All third parties are contractually bound to protect your data and process it only under our instructions.

5. Data Retention

We retain personal data for as long as necessary to:

  • Fulfill the purposes for which it was collected

  • Comply with legal, tax, and accounting requirements

Customer account data is retained until the account is deleted. You may request deletion at any time by contacting us.

6. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Correct or update your data

  • Withdraw your consent at any time

  • Request data deletion (“right to be forgotten”)

  • Request data portability

  • Restrict or object to data processing

Requests must be submitted in a verifiable format (e.g., signed digitally or accompanied by valid ID). We will respond within 30 days.

To exercise your rights, please contact us at info@mxgrade.com.

7. Data Security

We implement administrative, technical, and physical safeguards to protect your personal data. Access is limited to authorised personnel.

Payment data is handled via secure, encrypted connections and stored by our payment processors, not on our servers.

If you believe your data has been mishandled, please notify us immediately so we can take appropriate action.

8. Amendments to This Policy

By using our Website, you acknowledge this Privacy Policy and agree to its terms. We may update this policy periodically. Updates will be posted on our Website, and material changes will be communicated to users.

9. Data Controller and Contact

The controller of your personal data is:
KSHS EUROPE OÜ
Email: info@mxgrade.com

If you believe your rights under GDPR have been violated, you may contact:

This Privacy Policy is effective as of May 1st, 2025.