Privacy policy
Last updated: 30/08/2026
This Privacy Policy explains how BMLTECH ("BMLTECH", "MAYASELL", "we", "us", "our") collects, uses and protects your personal data when you visit or buy from mayasell.com (the "Site").
We are committed to being straightforward about the data we collect and why — in the same spirit as the rest of our brand.
1. Who we are
BMLTECH, trading as MAYASELL SIRET: 10202959200015 Registered address: 21 Place Victor Schoelcher, 91300 Massy, France Contact: [insert contact email]
BMLTECH is the data controller responsible for your personal data in connection with your use of the Site.
Because we sell to customers in the United Kingdom, this policy is written to comply with the UK GDPR and the Data Protection Act 2018. As a French company, we also apply the EU GDPR to any customers based in the EU.
2. What personal data we collect
| Category | Examples | When it's collected |
|---|---|---|
| Order and delivery data | Name, delivery address, billing address, email, phone number (optional) | When you place an order |
| Payment data | Processed directly by our payment provider (Shopify Payments). We do not store your full card details on our own systems. | When you check out |
| Browsing and device data | IP address, browser type, pages viewed, referring site, approximate location, cookie identifiers | Automatically, when you browse the Site |
| Marketing and advertising data | Interactions with our adverts and pixel-based tracking (see Section 4 — Meta Pixel) | If you interact with our ads or visit the Site after clicking one |
| Communications | Anything you send us by email or contact form (e.g. customer service, refund requests) | When you contact us |
We do not knowingly collect any special category data (e.g. health data) beyond what you voluntarily share with us in a customer service message.
3. Why we use your data, and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Processing and fulfilling your order, taking payment | Performance of a contract |
| Customer service, handling refunds and guarantee claims | Performance of a contract / legitimate interest |
| Preventing fraud, complying with accounting and tax obligations | Legal obligation |
| Retargeting advertising via Meta Pixel | Legitimate interest / your cookie consent, where required |
| Improving the Site based on how it is used | Legitimate interest |
We do not sell your personal data to third parties.
4. Cookies and tracking — Meta Pixel
We use the Meta Pixel (Facebook/Instagram) to understand how visitors interact with our advertising and to show relevant ads to people who have visited the Site. This works by placing a cookie in your browser and sharing limited interaction data (e.g. that you viewed a product page) with Meta Platforms Ireland Ltd.
We also use essential cookies provided by our e-commerce platform, Shopify, which are necessary for the Site to function (e.g. keeping items in your basket).
You can control non-essential cookies through your browser settings or, where available, a cookie banner on the Site. Blocking cookies may affect how the Site works but will not prevent you from placing an order.
5. Marketing emails
At present, we only send you transactional emails via Shopify (e.g. order confirmation, shipping updates). If we introduce a marketing email tool (such as Klaviyo) in future, we will only send you marketing emails if you have opted in (for example, by signing up to our newsletter or ticking a consent box at checkout), in line with the UK Privacy and Electronic Communications Regulations (PECR).
Every marketing email will include a simple way to unsubscribe at any time, free of charge.
6. Who we share your data with
We share personal data with the following categories of recipients, strictly for the purposes described above:
- Shopify — our e-commerce and payments platform, which hosts the Site and processes payments and order data
- Meta Platforms Ireland Ltd — for advertising and retargeting via the Meta Pixel
- Delivery and courier partners — to deliver your order
- Professional advisers (e.g. accountant), where necessary for our legal obligations
- Authorities, where required by law
International transfers
Some of our service providers (including Shopify and Meta) are based outside the UK and EU, including in the United States. Where we transfer personal data outside the UK/EU, we rely on appropriate safeguards recognised under UK GDPR, such as Standard Contractual Clauses, or the provider's own certified compliance mechanisms.
7. How long we keep your data
- Order and invoicing data: kept for the period required by French and UK accounting/tax law (typically several years).
- Marketing/advertising data: kept only while you interact with our ads, or until you opt out.
- Customer service correspondence: kept for a reasonable period to handle any follow-up queries or guarantee claims.
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data, in certain circumstances
- Restrict or object to our processing of your data
- Request a copy of your data in a portable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us at [insert contact email].
If you are not satisfied with our response, UK-based customers have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. As a French company, you may also contact the CNIL (cnil.fr).
9. Children
The Site is not directed at, and we do not knowingly collect data from, anyone under the age of 18.
10. Security
We take reasonable technical and organisational measures to protect your personal data, including relying on Shopify's PCI-DSS compliant infrastructure for payment processing.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent version.
12. Contact us
BMLTECH (trading as MAYASELL) 21 Place Victor Schoelcher, 91300 Massy, France Email: [insert contact email]