Privacy Policy

Last Updated: June 20, 2026

At Mediterranean Marketplace (https://mediterraneanmarketplace.com), we respect your privacy. This policy explains how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Singapore Personal Data Protection Act (PDPA).

1. Data We Collect & Why

We only collect data necessary to run our shop and fulfill your orders:

  • Identity & Contact Data: Name, shipping address, billing address, email, and phone number. Purpose: To process and deliver your orders, and communicate updates.

  • Payment Data: Handled securely via our third-party payment processors. We do not store your full credit card details.

  • Technical & Account Data: IP address, login details, and browser type. Purpose: For fraud prevention, website security, and account management.

  • Cookies: We use cookies to keep track of your shopping cart contents and keep you logged in. You can manage cookie settings in your browser.

2. Lawful Basis & Consent

  • EU (GDPR): We process your data to fulfill our contract with you (processing orders) or based on our legitimate interest (security and analytics).

  • Singapore (PDPA): By placing an order or creating an account, you consent to the collection and use of your data for those specific purposes.

3. Data Sharing & International Transfers

We do not sell your data. We only share it with essential service providers who help us run our business:

  • Payment gateways & delivery couriers to fulfill your purchases.

  • IT and security providers (e.g., automated spam/fraud detection).

Because we serve global users, your data may be transferred outside the EU or Singapore. We ensure all external partners protect your data to the same high standards required by law.

4. How Long We Keep Your Data

  • Order Information: Retained for as long as necessary to fulfill the legal, accounting, or tax obligations required by law (typically 5–7 years).

  • Account & Comments: Retained until you delete your account or request data removal.

5. Your Rights

Under both GDPR and PDPA, you have significant control over your data. You can request to:

  • Access a copy of the personal data we hold about you.

  • Correct any inaccurate or incomplete information.

  • Delete your personal data (unless we are legally required to keep it).

  • Withdraw Consent for marketing communications at any time.

6. Contact Us / Data Protection Officer

If you have any questions or wish to exercise your rights, please reach out to our Data Protection Officer (DPO) at:

Email: store@mediterraneanmarketplace.com