PRIVACY POLICY

1. DEFINITIONS

For the purposes of this Privacy Policy:

“Company”, “we”, “us”, “our” means MAXFISHING LTD, a company incorporated in Cyprus under registration number HE434772, with registered office at Neofytou Nikolaidi, 17 Sofoclio Pittokopitis Business, Flat/Office 406 Center, Paphos, 8011, Cyprus.

“Website”means the website https://maxfishing.com operated by us, including all related pages, subdomains and services (the “Website”).

“User”, “you”, “your” means any individual who accesses, browses, registers on, or makes a purchase through the Website.

“Customer” means a User who places an order through the Website.

“Personal Data” has the meaning given in the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

This Privacy Policy should be read together with our Terms and Conditions.

2. WHAT DATA WE COLLECT

We act as the data controller in relation to your Personal Data.

Contact details: info@maxfishing.com

We may collect the following categories of Personal Data:

• Identity data: name, surname
• Contact data: email address, phone number
• Delivery data: shipping and billing address
• Transaction data: order details and payments (processed via third-party providers)
• Technical data: IP address, browser type, device information
• Usage data: browsing behaviour on the Website
• Marketing data: preferences regarding communications

We may also collect:

• Communications data: any information you provide when contacting us (e.g. emails, support requests, feedback)
• User-generated content: reviews, comments, images or other content submitted via the Website (where applicable)

We do not store full payment card details.

You are not required to provide personal data; however, failure to provide certain information may prevent us from fulfilling your order or providing our services.

3. SOURCE OF PERSONAL DATA

We collect Personal Data from the following sources:

• Directly from you: when you place an order, create an account, contact us, subscribe to communications, or otherwise interact with the Website
• Automatically: when you use the Website, including through cookies and similar technologies (e.g. IP address, browsing behaviour, device information)
• From third parties acting on our behalf: where necessary to provide our services, including:
  • payment providers (for transaction confirmation);
  • delivery partners (for shipment and delivery updates).

We do not obtain personal data from third-party data brokers or resellers of personal data.

4. PURPOSES AND LEGAL BASIS

We process your Personal Data for the following purposes:

(a) To perform a contract (Art. 6(1)(b) GDPR)

• processing and fulfilling your orders
• delivery of products (including sharing necessary data with delivery providers)
• payment processing and transaction verification
• handling returns, refunds and order-related issues
• communicating with you regarding your orders and services

(b) Legal obligations (Art. 6(1)(c) GDPR)

• accounting and tax compliance
• responding to legal requests and regulatory requirements

(c) Legitimate interests (Art. 6(1)(f) GDPR)

• fraud prevention and detection
• ensuring Website security and integrity
• improving Website functionality, performance and user experience
• analysing Website usage and customer behaviour for statistical and business purposes
• managing customer support and internal administration
• personalising content, including product recommendations

(d) Consent (Art. 6(1)(a) GDPR)

• sending marketing communications
• use of cookies and similar technologies (where required)
• displaying personalised advertising based on your preferences and browsing behaviour

You may withdraw your consent at any time.

We do not sell your Personal Data to third parties.

5. MARKETING COMMUNICATIONS

We will send you marketing communications only if you have opted in.

You can unsubscribe at any time by:

• clicking the unsubscribe link in emails
• contacting us at info@maxfishing.com

We do not send unsolicited marketing.

6. DATA RETENTION

We retain your data only as long as necessary:

• Orders & financial data → 6 years (legal obligation)
• Customer support → 2 years
• Marketing data → until you withdraw consent
• Account data → until account deletion

After that, data is securely deleted or anonymised.

Personal Data may be stored on secure servers and processed by service providers as described in this Policy.

7. SHARING YOUR DATA

We may share your Personal Data with:

• payment providers (e.g. Viva, Stripe)
• logistics and delivery partners
• IT and hosting providers
• professional advisors (e.g. lawyers, auditors)

We may also share your Personal Data:

• where required by law or regulation, including with public authorities, courts or regulators
• to prevent fraud, security threats or unlawful activities
• in connection with a business transaction, such as a merger, acquisition, restructuring or sale of assets

We may share aggregated and anonymised data (which does not identify you) for statistical or business purposes.

All third parties are required to process Personal Data in accordance with applicable data protection laws and only to the extent necessary for the purposes described in this Policy.

8. INTERNATIONAL TRANSFERS

Some of our service providers may be located outside the European Economic Area (EEA), including providers of payment, IT, analytics or marketing services in countries that may not provide the same level of data protection as the EEA.

Where Personal Data is transferred outside the EEA, we ensure that appropriate safeguards are in place to protect your data, including:

• the use of Standard Contractual Clauses (SCCs) approved by the European Commission
• or other legally approved transfer mechanisms

You may request further information about the safeguards applied to your Personal Data by contacting us.

We take all reasonable steps to ensure that your Personal Data is treated securely and in accordance with this Privacy Policy.

9. COOKIES

The Website uses cookies and similar technologies to ensure its proper functioning, improve user experience, analyse usage, and, where applicable, provide personalised content and advertising.

Cookies are small text files stored on your device when you visit the Website. Some cookies may process Personal Data, such as IP address or browsing behaviour.

The use of cookies is not strictly required for visiting the Website. However, disabling certain cookies may affect the functionality and performance of the Website.

Types of cookies we use:

• Necessary cookies – required for the operation of the Website and cannot be disabled
• Analytics cookies – used to understand how users interact with the Website (enabled only with your consent)
• Marketing cookies – used to provide personalised advertising and track browsing behaviour (enabled only with your consent)

Third-party cookies

Some cookies are placed by third-party service providers, such as analytics or advertising partners.

Managing cookies

You can manage your cookie preferences at any time via:

• the cookie banner or cookie settings tool available on the Website
• your browser settings

You may withdraw or modify your consent at any time.

10. YOUR RIGHTS

Under the GDPR, you have the following rights:

• the right to access your Personal Data
• the right to rectify inaccurate or incomplete data
• the right to request erasure of your data
• the right to restrict processing
• the right to object to processing
• the right to data portability
• the right to withdraw your consent at any time (where processing is based on consent)

To exercise your rights, you may contact us at: info@maxfishing.com.

We will respond to your request within 30 days, in accordance with applicable law. We may request proof of identity before responding to your request.

You also have the right to lodge a complaint with:

Cyprus Data Protection Authority

https://www.dataprotection.gov.cy

11. CHILDREN

Our Website is not intended for individuals under 18.

We do not knowingly collect data from children.

12. SECURITY

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• encryption of data where appropriate
• secure servers and infrastructure
• restricted access to Personal Data on a need-to-know basis
• internal procedures to prevent unauthorised access, loss, misuse or alteration of data

Access to Personal Data is limited to authorised personnel who require such access for the performance of their duties.

While we take reasonable steps to protect your Personal Data, no system is completely secure, and we cannot guarantee absolute security of data transmitted over the internet.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time.

The latest version will always be available on our Website.

14. HOW TO CONTACT US

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us at:

Email: info@maxfishing.com

Company: MAXFISHING LTD

Address: Neofytou Nikolaidi, 17 Sofoclio Pittokopitis Business, Flat/Office 406 Center, Paphos, 8011, Cyprus.

We will respond to your request in accordance with applicable data protection laws.