Privacy Policy

Magic Box by Melanie is operated by Carmen Melania Sălăgean, a sole trader based in Dublin, Ireland ("we", "us", "our"). For the purposes of data protection law, we are the data controller of the personal data described in this policy.

Contact: carmenmelania1993@gmail.com — Malahide Road, Artane, Dublin 5, Ireland.

Contact details you give us — such as your name, email address, phone number and any message you send through our contact form, WhatsApp, Instagram, Facebook, TikTok or email.

Order and account details — if you create an account or place an order, we collect your name, email, delivery address, phone number and order history. Payment card details are processed directly by our payment provider (Stripe) and are never stored on our servers.

Technical data — such as your IP address, browser type and pages visited, collected automatically through standard website logs and cookies (see our Cookie Policy).

To respond to your messages and enquiries.

To process, deliver and manage orders for Magic Box kits, including payment, shipping and customer support.

To manage your account, wishlist and order history, where applicable.

To send you order confirmations and service-related communications.

With your consent, to send occasional updates about new products or offers — you can opt out at any time.

To keep our website secure and improve how it works.

We process your data based on: performance of a contract (processing your order), your consent (e.g. marketing messages, non-essential cookies), our legitimate interests (responding to enquiries, keeping the site secure), and compliance with legal obligations (e.g. accounting and tax records).

We only share personal data with trusted service providers who help us run this business, such as: payment processing (Stripe), transactional email delivery (Resend), website hosting and infrastructure (Vercel, Supabase), and delivery/courier partners once shipping is arranged.

We do not sell your personal data to anyone.

We keep contact form messages for as long as needed to handle your enquiry. Order and invoicing data is kept for as long as required by Irish tax and accounting law (currently up to 6 years). You can ask us to delete other data at any time, subject to any legal retention obligations.

You have the right to: access the personal data we hold about you, ask us to correct inaccurate data, ask us to delete your data, restrict or object to certain processing, and receive your data in a portable format.

To exercise any of these rights, email us at carmenmelania1993@gmail.com. You also have the right to lodge a complaint with the Irish Data Protection Commission (www.dataprotection.ie) if you believe your data has been mishandled.

Our website uses a small number of cookies and similar technologies. Details are set out in our separate Cookie Policy.

Our website and services are not directed at children under 16, and we do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "last updated" date.