Privacy policy

Privacy Policy

Last Updated: November 6, 2025

Smiling Maria (“we”, “our”, or “us”) operates this online store and website https://smilingmaria.com, including all related content, products, and services (collectively, the “Services”).
This Privacy Policy describes how we collect, use, and protect your personal information when you visit or make a purchase from our store.

By using our website, you agree to the terms of this Privacy Policy.

1. Personal Information We Collect

When you use our Services, we collect the following categories of information:

  • Contact details: name, billing/shipping address, phone number, and email.

  • Order details: products purchased, payment method (last four digits only), order amount, and transaction ID.

  • Account information: login credentials (if applicable) and communication preferences.

  • Device and usage data: your IP address, browser type, pages visited, time spent on site, and actions taken.

  • Marketing and analytics data: collected via cookies or tracking tools such as Google Analytics and Meta Pixel to help us understand traffic patterns and improve our store.

We do not collect or store complete credit card numbers. All payments are securely processed through Shopify Payments and its integrated partners.

2. How We Use Your Information

We use personal data to:

  • Process and fulfill your orders (including shipping and returns)

  • Communicate with you regarding your order or inquiries

  • Personalize and improve your shopping experience

  • Prevent fraud and maintain site security

  • Comply with legal obligations (tax, accounting, or customs)

  • Analyze store performance via Google Analytics and Meta Pixel

3. Cookies and Tracking Technologies

We use cookies to enable essential site functions (cart, checkout, preferences) and to collect analytics for improving our Services.
You can control or disable cookies through your browser settings, though this may affect site functionality.

Third-party tracking tools we use:

  • Google Analytics (for traffic analysis)

  • Google Ads conversion tracking (to measure ad effectiveness)

  • Meta Pixel (for Facebook/Instagram campaign performance)

These tools do not identify you personally; they use anonymized data wherever possible.

4. Data Sharing and Third Parties

We only share information with trusted service providers as necessary to operate our store:

  • Shopify Inc. (store hosting and payment processing)

  • Shipping and logistics partners (for order delivery)

  • Analytics and advertising platforms (Google, Meta)

We do not sell or rent personal data to any third party.

5. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy — typically:

  • Order data: 5 years (for legal/tax compliance)

  • Marketing data: until you withdraw consent or unsubscribe

  • Analytics data: anonymized after 26 months

You may request deletion of your account or personal data at any time by contacting info@smilingmaria.com.

6. Your Rights (EU / GDPR)

If you are located in the European Union, you have the right to:

  • Access your personal data

  • Request correction or deletion

  • Restrict or object to processing

  • Withdraw consent to marketing communications

  • Request data portability

To exercise these rights, please contact info@smilingmaria.com.
We will respond within 30 days in accordance with GDPR requirements.

7. Data Transfers and IOSS Compliance

As an Estonia-based company, Smiling Maria may process data on servers located in the European Union or other secure jurisdictions approved by the European Commission.

For EU customers, purchases up to €150 are covered by our IOSS (Import One-Stop Shop) registration, meaning VAT is collected and remitted by us at checkout.

8. Data Security

We use SSL encryption, secure payment gateways, and Shopify’s PCI-DSS compliant systems to protect your data.
While we strive for complete security, no method of transmission over the Internet is 100% secure.

9. Children’s Privacy

Our Services are not directed to individuals under 18 years old.
We do not knowingly collect personal information from minors.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations.
Any updates will be posted here with the revised “Last Updated” date.

11. Contact

If you have any questions or requests regarding this Privacy Policy, please contact us:

DIJIBUY e-GLOBAL OÜ
Paavli tn 5a/1, Põhja-Tallinna linnaosa, 10412 Harju maakond, Tallinn, Estonia
📧 info@smilingmaria.com
🌐 https://smilingmaria.com

✅ GMC Summary (for Google Merchant Center)

  • Legal entity: DIJIBUY e-GLOBAL OÜ (Estonia)

  • Data processors: Shopify, Google Analytics, Meta

  • Data collected: order, contact, usage & analytics data

  • Data retention: 5 years (order), anonymized analytics after 26 months

  • Data rights: access, correction, deletion, restriction, portability (GDPR)

  • Contact: info@smilingmaria.com