General Data Protection Regulation (GDPR)
General Data Protection Regulation (GDPR) Policy
Owner Information:
Majestic Boards
W. Jagiełły 3, 98-200 Sieradz, Poland
TAX ID: 8272310598
Email: shop@majesticboards.com
1. Introduction
This General Data Protection Regulation (GDPR) Policy explains how Majestic Boards ("we", "us", "our") collects, uses, and protects your personal data when you visit and interact with our online store at majesticboards.com ("Store").
Majestic Boards operates the Store on behalf of the manufacturer and seller, Dongguan RuiLing Tech Co., Ltd, and is responsible for data handling related to order processing, customer support, and warranty coordination.
2. Data Controller
The data controller responsible for your personal data is:
Majestic Boards
W. Jagiełły 3, 98-200 Sieradz, Poland
Email: shop@majesticboards.com
3. Personal Data We Collect
We may collect the following types of personal data:
-
Contact Information: name, email address, phone number, postal address
-
Account Information: login credentials (email and password), order history, preferences
-
Order and Payment Details: order number, delivery details, selected payment method, transaction ID, invoice data (e.g. name, address)
-
Technical Data: IP address, browser type and version, time zone setting, device type, operating system
-
Usage Data: information about how you use our Store, including browsing history and preferences
-
Marketing Data: your consent preferences and communication settings
Note: We do not collect or store full payment card details. Payments are processed externally via our payment providers. The payment recipient is Dongguan RuiLing Tech Co., Ltd.
4. How We Use Your Personal Data
We process your personal data for the following purposes:
-
To process and deliver your orders, and provide post-purchase service
-
To manage your account and verify transactions
-
To communicate with you about your purchases or account
-
To provide technical support and respond to your inquiries
-
To improve and secure our Store, prevent fraud, and ensure service integrity
-
To send you updates, promotional offers (only if consent is given)
-
To meet our legal obligations (e.g., tax and accounting)
5. Legal Basis for Processing Your Data
We rely on the following legal bases for processing your personal data:
-
Performance of a contract (e.g., to deliver your order)
-
Compliance with a legal obligation (e.g., invoices, consumer rights)
-
Legitimate interests (e.g., IT security, business analytics)
-
Consent (e.g., marketing, newsletter)
6. Sharing Your Personal Data
We may share your data only when necessary and with trusted parties, including:
-
Dongguan RuiLing Tech Co., Ltd – for payment receipt and product/warranty responsibility
-
IT service providers (e.g., hosting, platform administration)
-
Couriers and logistics providers
-
Legal, accounting, or tax consultants
-
Government bodies or regulators where legally required
All third parties are contractually obligated to protect your data and may not use it for their own purposes.
7. International Data Transfers
Some of your data may be transferred outside the European Economic Area (EEA), particularly to Dongguan RuiLing Tech Co., Ltd (China).
We ensure such transfers are compliant with GDPR by using one of the following safeguards:
-
Transfers to countries with an adequate level of protection (as per EU Commission)
-
Standard Contractual Clauses (SCCs) approved by the European Commission
-
Other appropriate mechanisms permitted under Article 46 of the GDPR
8. Data Security
We have implemented appropriate organizational and technical security measures to protect your data from unauthorized access, disclosure, alteration, or loss. Access is limited to staff and partners who require it for operational purposes and are bound by confidentiality.
9. Data Retention
We retain your data only as long as necessary for the purposes described, including:
-
Completing transactions and providing services
-
Complying with legal, tax, or regulatory obligations
-
Resolving disputes and enforcing agreements
Retention periods are based on legal requirements and the nature of the data.
10. Your Rights Under GDPR
You have the right to:
-
Request access to your personal data
-
Request rectification of inaccurate data
-
Request deletion of your data ("right to be forgotten")
-
Object to or restrict the processing of your data
-
Request transfer of your data ("data portability")
-
Withdraw your consent at any time (where applicable)
To exercise these rights, please contact us at: shop@majesticboards.com
11. Changes to This Policy
We may revise this policy as necessary to reflect legal or operational changes. Updates will be posted on this page and, where appropriate, notified to you directly.
12. Contact Us
If you have any questions or concerns about how we process your personal data, contact us at:
Majestic Boards
W. Jagiełły 3, 98-200 Sieradz, Poland
Email: shop@majesticboards.com