Privacy Notice

Last Updated: 28.July 2022

ย 

This MNTD Privacy Notice (the โ€œNoticeโ€) explains how your personal data is collected and processed when you access and use the website available at https://getmntd.com (the โ€œWebsiteโ€).ย 

We kindly ask you to read this Notice carefully before using the Website and providing us any personal data.

  1. Contact Information

    The Website is operated by MNTD PTE. LTD. (โ€œweโ€, โ€œourโ€, โ€œusโ€), a company registered in Singapore, having Unique Entity Number โ€‹202124287C and registered address at 1 Marina boulevard #28-00 One Marina Boulevard Singapore (018989).

    With respect to the personal data collected on the Website we act as a data controller.

    ย 

    Data Protection Officer

    MNTD has appointed the external DPO โ€” Sekurno Oรœ:

    An information security and data protection firm.

    Company number: 14992608.

    Address: Estonia, Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 10151.

    DPOโ€™s email: [email protected].


    Please contact us or our DPO to receive answers to any data protection-related questions. Please note that we may record any communication to preserve the evidence of your request and our response.ย 

    ย 

    EU representative

    MNTD has appointed an EU Representative (as required by Article 27 of the GDPR). The representative would act as a contact point for supervisory authorities and data subjects located in the European Union.ย ย 

    Correspondence address: Rickert Rechtsanwaltsgesellschaft mbH; ColmantstraรŸe 15, 53115, Bonn, Germany.

    ย 

    EU Representativeโ€™s email: [email protected]

  2. What Personal Data We Collect

    We may collect and process your personal information when you:

    • make a purchase on the Website (โ€œPurchase Dataโ€);

    • contact us via the Website or contact details available on the Website (โ€œContact Dataโ€);

    • agree to receive updates or marketing emails from us (โ€œMarketing Dataโ€); or

    • access and browse the Website (โ€œWebsite Dataโ€).

    Such personal data is collected and processed as follows:

    1. Purchase Data

      While making a purchase on the Website you provide us with your billing and shipping information. Such information is necessary to purchase and deliver the products available on the Website. If you do not provide us with the necessary Purchase Data, we would not be able to process your order and fulfill a contract with you. The Purchase Data includes the following:

      Data item

      Purposeย 

      Legal grounds

      General Information

      Full name

      To identify you as a purchaser of a product

      Performance of a contract with you

      Email address or telephone number

      To provide you with the information regarding the order processing and product delivery

      Performance of a contract with you

      Delivery Information

      Delivery address

      To deliver the ordered product

      Performance of a contract with you

      Billing Information

      Billing Addressย 

      To process the payment of the order

      Performance of a contract with you

      Purchase amount

      To process the payment of the order

      Performance of a contract with you

      Date of purchase

      To process the payment of the order

      Performance of a contract with you

      Payment methodย 

      To process the payment of the order

      Performance of a contract with you

      Payment card number, CCV, expiry date, and cardholderโ€™s name

      To process the payment of the order

      Performance of a contract with you

      Your payment history

      To maintain records of your purchasing activities

      Compliance with a legal obligation

      To process the order made on the Website, we use a third-party solution https://www.shopify.com. With respect to the information provided on the Website, Shopify has deemed our processor, meaning that it will process your personal data in accordance with our instructions and/or applicable legislation.

      The Purchase Data will be stored and processed by Shopify.com, however, in order to process your order, we will store and process only the following Purchase Data provided by you:

      • last 4 digits of the payment card;

      • CVV;

      • cardholderโ€™s name;ย 

      • billing address; and

      • shipping address.

      We are able to retrieve from Shopify.com all other information provided by you, however, we will do that only if it is reasonably necessary, for example, to comply with the legislation requirements or assist you with your inquiry.

    2. Contact Data

      When you contact us via the Website or contact details available on the Website, you may provide us with the following data:ย 

      Data item

      Purpose

      Legal grounds

      Full name

      To address you correctly

      Legitimate interest to assist you with your inquiry

      Email address or telephone number

      To contact you back, if necessary

      Legitimate interest to assist you with your inquiry

      Other personal information that (a) you chose to provide us or (b) is necessary for resolving the requested issue

      To assist you with your inquiry related to such personal information

      Legitimate interest to assist you with your inquiry

      We use Zendesk to address usersโ€™ issues, answer usersโ€™ requests, contact users back, or address them properly.

      Zendesk solution is operated by โ€‹โ€‹Zendesk Inc., 989 Market St, San Francisco, CA, United States.

      When you send a request, the requested data is also processed by Zendesk, who helps us to receive and process your inquiries. Each time you submit a support request, Zendesk creates a ticket on that request for us containing the ticket data (date/time of request and other details), user data who made a request, and the request details.

      This data is necessary to address your issue, answer your request, contact you back, or address you properly, where and as applicable depending on the type of personal information. The legal basis for processing such data โ€” is our legitimate interest to assist you with your request regarding the Website and its services/products.

      Note that โ€‹โ€‹Zendesk is located in the US, therefore competent US state authorities may have access to the personal data processed by Zendesk. For more information on how Zendesk processes personal data, please check Zendesk Privacy Documentation.

    3. Marketing Data

      On the Website you may be allowed to subscribe to receive emails from us with news and updates about the Website and relevant products. By providing your email in the respective field of the Website, you provide your consent to receive respective emails from us and our affiliates (meaning companies that control, are under common control with, or controlled by us). Your data will be processed as follows:

      Data item

      Purpose

      Legal grounds

      Email address

      To send you our marketing emails

      Your consentย 

      We use Klaviyo (a third-party solution) to send marketing emails. Klaviyo solution isย  operatedย  by Klaviyo Inc., with a legal address at 125 Summer St, Floor 6, Boston, MA, United States. Since Klaviyo is located in the US, competent US authorities may have access to the personal data retained by Klaviyo. For more information on how Zendesk processes personal data, please check Klaviyoโ€™s data privacy section.

      You may always unsubscribe from receiving marketing emails by (a) contacting us or (b) clicking the unsubscribe button available within each marketing email we send you. When you unsubscribe from receiving marketing emails, your Marketing Data will be erased from the respective database.

    4. Website Data

      When you visit the Website, certain personal data is collected automatically. At first, when you access the Website, you must indicate your country of residence. This is necessary to determine whether you can order our products from the country where you are located. The legal basis for processing such data is a legitimate interest to determine whether you are able to make a purchase on the Website.

      Certain personal data is collected automatically when you access and browse the Website. Most of the Website Data is collected via cookie technology. Cookies are small text files that we place on your computer while you visit us. The data stored in cookies uses identificators unique to your device, so we are able to identify the exact device. Please note, that you are able to customise cookies manually and disable any/all of them with your browser settings.

      The following data is collected automatically when you access and use the Website:

      Google Analytics, represented by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA, United States

      This type of cookie allows us to better understand usersโ€™ behavior on the Website, e.g., how many users visited the Website, how long they stayed, and how they interact with the Website and its content.ย 

      The information gathered by Google Analytics includes the following: (1) IP address, (2) the type of device used, (3) the deviceโ€™s operating system, and (4) the browser used. The IP address of the user is anonymised (masked).ย 

      After collecting the aforementioned personal data, Google Analytics creates reports about the use of the Website, which contain aggregated information where we do not see any data pertaining to a particular person. In other words, we cannot identify you from the other visitors.

      Google Analytics prescribes users with the unique, randomly generated string that will allow them to further associate concrete users with their computers, but only for single browsing sessions.

      The cookie expiration periods are as follows:

      • _ga โ€” 2 years โ€” used to distinguish users.

      • _gid โ€” 24 hours โ€” used to distinguish users.

      • ga<container-id> โ€” 2 years โ€” used to persist session state.

      • gacgb_<container-id> โ€” 90 days โ€” contains campaign related information.

      For more information regarding the retention periods, please see the Google Analytics documentation.

      You may learn more about Google Analytics in the Google Analytics Privacy documentation.

      Note that since Google is based in the US, competent US authorities may have access to the personal data collected via Google Analytics. In addition, Google may use this personal data for any of its own purposes, such as profiling and cross-platform tracking.

      The legal basis for processing such data is your consent.

      Shopify Analytics, Shopify Inc. 151 Oโ€™Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada

      This type of cookie allows us to analyse the Website speed and transaction analysis.

      Shopify Analytics creates reports based on specific metrics including: average order value, online store conversion rate (it shows the percentage of sessions that lead to an order), online store sessions by device type, online store sessions by location, online store sessions by traffic source, online store sessions from social source, repeat customer rate, sales by POS location, sales by social source, sales by staff, sales by traffic source, top landing pages, top products by units sold, top referrers by sessions, total online store sessions, total orders, total sales, sales attributed to marketing. Similar to Google Analytics, and Shopify Analytics the expiration period for cookies is limited to one session. Also, the session may end after 30 minutes without activity.

      For more information, please refer to Shopify Analytics privacy documentation.

      The legal basis for processing such data is your consent.

      Goaffpro, represented by RVGA Enterprises Pvt. Ltd., Ist Floor, 159 D, new mandi Sirsa, Haryana, India

      Goaffpro.com is a third-party solution that helps us to set up an affiliate program. This solution provides affiliate marketing services via affiliates who share MNTD products with their followers on social media platforms or blogs. Users may use an affiliate link to purchase MNTD products.

      With Goaffpro.com we are able to identify that a particular Website user was referred to us by our affiliate. In this case, we may collect your name and email address.

      The legal basis for processing such data is our legitimate interest to maintain our affiliate network.

      IPQualityScore LLC, with a legal address at 600 BRICKELL AVE, FL, United States

      We use IPQualityScore third-party solution to identify patterns of fraudulent activities and prevent them from happening again. The following personal data will be processed: (1) IP address, (2) email address, (3) billing details, and (4) phone number.ย 

      We need this information to maintain ongoing confidentiality, integrity, and availability of our services within the Website. Without this information, Website would not reasonably be able to provide you with smooth and uninterrupted services.

      Note that since IPQualityScore is established in the US, competent US authorities may have access to the personal data stored by IPQualityScore LLC.

      The legal basis for processing such data is our legitimate interest to improve the services, ensure continuous and undisturbed work of the Website, and debug crashes within the Website.

      Klaviyo, Klaviyo Inc., 125 Summer St, Floor 6 Boston, MA 02111 United States

      If you are located in the US, we will use the Klaviyo onsite tracking solution to monitor: (1) your activities on the Website and (2) products viewed by you. The Klaviyo solution also records if you visited the Website from the email that we sent to you. With this solution we will be able to identify that a user visited a page, time of visit, userโ€™s browser, and device operating system. If you have, at some point, clicked through a Klaviyo email to the Website, or if you have, at some point, subscribed/opted-in through a Klaviyo form, or if you have, at some point, logged into the Website and we have identify tracking installed, we will be able to know you as a particular user.

      We will use the data collected with the Klaviyo solution to segment our users based on engagement level and to trigger emails to you, if you browse the Website several times without purchasing a product.

      You can learn more about Klaviyo at https://help.klaviyo.com/hc/en-us/articles/360034666712-Understanding-cookies-in-Klaviyo.

      The gathered information is stored for two (2) years. However, if you have Safari browser (ITP 2.1 version or later), the expiration date is seven (7) days.

      The legal basis for processing such data is our legitimate interest to improve the services and reach you with communications that may be of your interest.

      ย 

  3. How We Share Your Personal Data

    We do not sell or rent out your personal data. However, we may share your personal data if it is reasonably necessary for the performance of our undertakings with you (process your order) and/or our legitimate interest to maintain and develop the Website. In particular, your personal information is shared with the following categories of recipients:

    • our affiliates;

    • our subcontractors and team members, e.g., support team, technical team, etc.;

    • third-party solutions integrated into the Website, e.g., solutions enabling to make the purchase, chat functionality, etc.;

    • shipping companies, in order to deliver you the products ordered on the Website;

    • payment institutions that process payments on the Website;

    • marketing email solutions, such as Klaviyo or any other solution we may use;

    • analytical and other similar solutions, as outlined in this Notice;ย 

    • government institutions that may request access to your personal data;

    • new owner of the Website, if we sell or otherwise dispose of the Website or its part.

    Please note that we and the aforementioned recipients may be located in jurisdictions that do not ensure the same level of data protection as the country of your residence. We will endeavor to protect your personal data while it is processed, stored, or transferred.

    If and to the extent we are subject to the General Data Protection Regulation, when we transfer personal data to a country that does not ensure the same level of data protection as the country of your residence, we will use additional safeguards, namely, Standard Contractual Clauses.

  4. How Long Do We Store Your Personal Data

    As a general rule, we store your data as long as it is necessary for the purposes it was collected and according to the requirements of the applicable legislation. Following the expiration of the storage period, such data will be either erased or anonymised. In particular, your personal data will be processed as follows:

    • Purchase Data is processed as long as it is necessary under the requirements of the applicable legislation. According to the laws of Singapore, such data is stored for a period of fiveย  (5) years from the date it was collected.

    • Contact Data is processed for the period of one (1) year following our contact with you.

    • Marketing Data is stored until you remain subscribed to our newsletter. You may unsubscribe from receiving marketing emails in accordance with paragraph 2.3 above.

    • Website Data is stored during the applicable cookie storage period as described in paragraph 2.4 above. You may also learn more about such data in paragraph 2.4 above and on the websites of the applicable third parties.

  5. Your Rights

    According to the applicable data protection legislation you may have the following data protection rights:

    • right to access:

      You are able to request us if we process your personal data. If this is the case, you may request access to your personal data that we store about you. Among others you may ask us regarding:

      • the purposes for collecting personal information about you;

      • categories of personal information concerned;

      • who receives your personal information or categories of such recipients;

      • how long we are going to store the information about you and if not possible criteria to determine the storage period;

      • when your personal information was obtained not from you directly, the source where it came from;

      • the existence of either profiling activities or automated decision making based on your personal information. Where such activities are performed, we should also inform you about the importance, and expected consequences of them;

      • a copy of your personal information processing. For such requests further, we may charge you with a reasonable fee. We generally provide users with an electronic copy of their personal information unless they request otherwise.ย 

    • right to rectification:

      You have the right to correct inaccurate (for example, old or incorrect) personal information related to you.ย 

    • right to erasure or the right to be forgotten:

      You have, under certain circumstances, the right to request the erasure of your personal information. Please note, that this right only applies to the data available at the time of request and is not applicable to future data.ย 

      Request to the erasure of personal information is possible when:

      • personal information is no longer needed for the purposes it was primarily collected or processed;

      • when you have already withdrawn your consent for processing your personal data, and we do not have other legal ground to process it;

      • when your personal data is processed under legitimate interest and you object to such legal ground. Moreover, there is no overriding legitimate interest to proceed to process your personal data;

      • your personal information was unlawfully processed;

      • when your personal data has to be erased due to legal obligation.

    • right to restrict processing:

      You may request us to stop processing your personal information when:

      • you have reasonable doubts that your information is accurate, and we are verifying the accuracy of such information;

      • your personal information was unlawfully processed;

      • the purpose of your personal information collection no longer exists, but you wish to store it longer to defend a legal claim.

      Moreover, you may request us to stop processing your personal data while we are working on a rectification request or request to object to processing your personal information.

    • right to data portability:

      You have the right to obtain from us and further reuse your personal data for your own purposes within other services. You will also be able to transfer your personal information from one IT environment to another in a safe and secure way, when certain conditions apply, such as:

      • the processing is based on your consent or needed for the performance of a contract with you;

      • the processing is made only electronically, without any paper-based files included.

    • right to object:

      You have the right to object to the processing of your personal information at any time. This allows you to prevent us from (stop) processing your personal information. This right applies only when one of the following conditions are met:

      • your personal information is used for direct marketing purposes;

      • the processing is based on our legitimate interest;

      • we are performing tasks carried out for the public interest or by governmental authority;

      • your personal information was processed for either research or statistical purposes.

    • right not to be subject to automated decision making and profiling:

      Currently, neither we nor the Website uses your personal data for profiling or decisions made solely by automated means.

    • right to lodge a complaint with a supervisory authority:

      You have a right to lodge a complaint with a data protection authority in a country you either reside, permanently live, work, or in a country where data protection infringement takes place.

  6. Personal Information of Minors

    Website is not intended for the use of children (under 18 years old or older, if the country of your residence determines a higher age restriction). We do not knowingly market to, or solicit data from children. We do not knowingly process, collect, or use the personal data of children, and in case we receive such data, we will erase it within a reasonable timeframe.

  7. Revisions

    We keep this Notice under regular review and may update it at any time. If we make any changes to this document, we will change the โ€œLast Updatedโ€ date above. Please, review this Notice regularly, or follow the updates on the Website.