Last updated: August 26, 2025

This Privacy Policy explains how we collect, use, and protect your personal information when you interact with MAKETTE. Our site and services are operated by Chalico Trading Company Ltd, registered in Cyprus under company number 79035, with its registered office at Floor 2ND, Building Fortuna Court, Street 284 Arch. Makarios, Lemesos 3105, Cyprus. Chalico Trading Company Ltd is the Data Controller responsible for your personal data under EU data protection law (GDPR).

We collect information in three ways:

- Information you provide: name, contact details, shipping/billing addresses, payment confirmations, account logins, customer service messages.

- Information we collect automatically: device details, IP address, browsing activity, cookies, and tracking pixels (small images embedded in web pages or emails to track user activity).

- Information from partners: payment providers (e.g. Stripe, Apple Pay), logistics providers (e.g. DHL), analytics/marketing platforms (e.g. Google, Meta, Klaviyo).

We use your personal information to process and deliver your orders, provide customer support, manage your account, send service updates, improve site performance, and—where you’ve chosen, share news and offers. Our legal bases include contract necessity, legal compliance, legitimate interest, and consent where applicable.

We only share your data with trusted partners who help us run our business, such as Shopify, Stripe, Klaviyo, Google Analytics, Meta, and logistics providers. These providers are bound by GDPR-compliant data processing agreements. We do not sell your information. We may share it with regulators or legal authorities if required.

Some of our partners process data outside the EU, including in Canada, the U.S., and the UAE. We use safeguards approved by the European Commission, such as Standard Contractual Clauses (SCCs), and assess recipient countries’ data protection laws to ensure equivalent protection, to keep your data protected.

We keep your data only for as long as necessary: 

• order and payment data up to 7 years for tax reasons (legal obligation)
• marketing preferences: up to 3 years after your last interaction, unless you withdraw consent earlier; and 
• account data: until you request deletion 

After these periods, data is securely deleted or anonymized to prevent re-identification. We will notify you if retention periods change significantly.

You are in control of your data. Under GDPR, you can:

• Access a copy of your data
• Correct or delete it
• Limit or object to how we use it
• Withdraw consent at any time
• Ask for portability of your data

To  exercise these rights, email us at info@makette.com. We will respond within 30 days, with possible extensions for complex requests. We may verify  your identity to protect your data. Excessive or unfounded requests may incur a reasonable.. If you’re  unsatisfied, you may complain to the  Office of the Commissioner for Personal Data Protection in Cyprus: P.O. Box 23378, 1682 Nicosia, Cyprus; Email: commissioner@dataprotection.gov.cy; Website: www.dataprotection.gov.cy. We encourage you to contact us first to resolve concerns.

We use cookies to make our site work smoothly, remember your preferences, and understand how visitors use our site. Essential cookies are always active; non-essential cookies (e.g. analytics, marketing) require your explicit consent via our cookie banner and are disabled by default. You can withdraw consent at any time via the banner or your browser settings.

Our services are not directed at children under 16. We use age verification during account creation to prevent data collection from children. If we accidentally collect such data, we will delete it within 7 days of notification. Parental consent is obtained for marketing to users under 16, where applicable.  Contact us at info@makette.com if you believe we have collected children’s data. 

We take security seriously and use encryption, secure servers, and strict access controls to protect your data. In case of a data breach, we will notify the Cyrus Data Protection Commissioner within 72 hours and inform affected user promptly if the breach poses a high risk to their rights. Report suspected breaches to dpo@makette.com. No system is 100% secure, so please protect your account details and notify us immediately of any concerns.

We use analytics and marketing tools (e.g. Klaviyo, Meta) for profiling to provide personalized offers based on your consent or legitimate interest. Profiling involves analyzing browsing activity and preferences to tailor content. You may object to profiling or request human intervention by emailing dpo@makette.com. 

We may update this Privacy Policy if our practices or legal obligations change. Updates will appear here with a new date. Significant changes will be communicated via email or site notifications. 

If you have any questions or concerns, you can reach us at:

info@makette.com

By continuing to use our Site, you acknowledge this Privacy Policy and consent to our data practices where applicable.