Datenschutzerklärung
Privacy Policy
Last updated: September 22, 2026
This Privacy Policy explains how PINK GALAXY LIMITED (“we”, “us” or “our”) collects, uses, stores and protects personal information when you visit mlddxc.shop, place an order, contact us or otherwise use our online store.
We are committed to handling personal data responsibly and in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable to customers and visitors in Germany, Austria and the European Economic Area.
1. Data Controller
The controller responsible for the processing of personal data through this online store is:
PINK GALAXY LIMITED
Company Registration Number: 9385683
Registered Address:
Flat 9, 9 Fields Parade
Oteha, Auckland 0632
New Zealand
Email: support@mlddxc.shop
Telephone: +64 21 768 684
Website: mlddxc.shop
If you have questions about this Privacy Policy or the processing of your personal data, you may contact us using the details above.
2. Personal Data We Collect
Depending on how you interact with our store, we may collect and process information such as:
-
Your name;
-
Billing and delivery address;
-
Email address;
-
Telephone number;
-
Order and transaction information;
-
Products purchased or viewed;
-
Information relating to returns, refunds and customer service requests;
-
Payment-related information necessary to process or administer an order;
-
Device and browser information;
-
IP address;
-
Website usage and interaction information;
-
Cookie and similar technology information;
-
Communications you send to us.
Because Cash on Delivery (COD) may be available for orders, we may also process information necessary to arrange delivery, confirm an order, collect payment on delivery and administer refunds where applicable.
We only collect personal information that is reasonably necessary for the relevant purpose.
3. How We Collect Personal Data
We may collect personal data directly from you when you:
-
Visit or browse our website;
-
Place or attempt to place an order;
-
Enter your delivery or contact information;
-
Contact our customer service;
-
Request a return or refund;
-
Subscribe to communications where available;
-
Interact with features of our online store.
Certain technical information may also be collected automatically through cookies, server logs and similar technologies.
We may also receive limited information from service providers involved in operating our store, processing orders, delivering products, preventing fraud or providing technical services.
4. Purposes and Legal Bases for Processing
We process personal data only where we have an appropriate legal basis.
Performance of a Contract
We may process your personal data where necessary to:
-
Process and fulfil your order;
-
Arrange delivery;
-
Provide Cash on Delivery where available;
-
Communicate with you about your order;
-
Process returns and refunds;
-
Provide customer support;
-
Handle warranty or product-related requests.
The legal basis for this processing is generally the performance of a contract or taking steps at your request before entering into a contract.
Legal Obligations
We may process and retain certain information where necessary to comply with applicable legal, accounting, tax, regulatory or record-keeping obligations.
Legitimate Interests
Where permitted by law, we may process information based on our legitimate interests, including:
-
Operating and improving our online store;
-
Protecting our website, customers and business;
-
Preventing fraud and misuse;
-
Maintaining appropriate business records;
-
Understanding general website performance;
-
Responding to and managing customer enquiries.
Where we rely on legitimate interests, we consider the interests and rights of the individuals concerned.
Consent
Where required by law, we rely on your consent for certain activities, such as specific marketing communications or the use of non-essential cookies.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Order and Delivery Information
When you place an order, we process the information necessary to complete and deliver that order.
This may include your:
-
Name;
-
Delivery address;
-
Email address;
-
Telephone number;
-
Order details;
-
Delivery instructions where provided.
Where necessary, relevant information may be provided to delivery, fulfilment or logistics service providers so that your order can be delivered.
Our standard shipping is currently provided free of charge for eligible orders and destinations supported by our store.
6. Cash on Delivery
Where Cash on Delivery (COD) is available during checkout, information necessary to arrange and administer the COD transaction may be shared with the relevant delivery or logistics provider.
This may include your name, delivery address, telephone number, order value and other information reasonably required to complete delivery and collect payment.
If a refund relating to a COD order is required, we may request appropriate payment information from you solely for the purpose of processing that refund.
The payment and delivery options actually available for an individual order are those displayed during checkout.
7. Service Providers and Recipients
We may share personal data with service providers where reasonably necessary to operate our online store and fulfil our obligations to customers.
These may include categories of providers such as:
-
E-commerce platform and website hosting providers;
-
IT and technical service providers;
-
Delivery and logistics providers;
-
Payment and transaction service providers;
-
Customer support providers;
-
Analytics and website performance providers;
-
Fraud prevention and security providers;
-
Professional advisers where necessary.
These parties may process personal data only to the extent necessary for the relevant services or as otherwise permitted or required by law.
We may also disclose information where required by law, regulation, court order or a competent public authority.
8. Shopify
Our online store may use Shopify and related e-commerce technologies to provide website, checkout, order-management and other online-store functionality.
When you use our store, certain personal information may therefore be processed through the technical infrastructure used to operate the online store.
The processing of information by such service providers is also subject to their applicable privacy and data protection arrangements.
9. Cookies and Similar Technologies
Our website may use cookies and similar technologies that are necessary for the operation, security and functionality of the online store.
Depending on the configuration of our website, additional technologies may also be used for purposes such as:
-
Remembering user preferences;
-
Measuring website performance;
-
Understanding how visitors interact with the store;
-
Analytics;
-
Advertising or marketing, where applicable.
Where required under applicable law, non-essential cookies or similar technologies will only be used after the appropriate consent has been obtained.
Where available, you may use the cookie or privacy controls provided on our website to manage your preferences.
You can also configure your browser to block or delete certain cookies, although doing so may affect some website functions.
10. Marketing Communications
Where permitted by law, we may send marketing communications if you have provided the necessary consent or another valid legal basis applies.
You may withdraw your consent or unsubscribe from marketing communications at any time using the unsubscribe method provided in the communication or by contacting:
Transactional communications relating to your orders, deliveries, returns, refunds or customer service requests are not marketing communications and may still be sent where necessary.
11. International Data Transfers
PINK GALAXY LIMITED is established in New Zealand, and some service providers involved in operating our online store may also process personal data outside Germany, Austria or the European Economic Area.
Where personal data subject to the GDPR is transferred internationally, we take appropriate steps to ensure that the transfer is made in accordance with applicable data protection requirements.
Where required, this may include reliance on an applicable adequacy decision or other legally recognised safeguards.
12. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer service, handling returns or disputes, maintaining business records and complying with legal, accounting and tax obligations.
Different categories of personal data may therefore be retained for different periods.
When personal data is no longer reasonably required and there is no legal basis requiring continued retention, it may be deleted, anonymised or otherwise securely disposed of.
13. Data Security
We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, accidental loss or destruction.
However, no method of transmitting or storing information electronically can guarantee absolute security.
Customers are also responsible for taking reasonable measures to protect their account information and devices where applicable.
14. Your GDPR Rights
Where the GDPR applies to the processing of your personal data, you may have rights including:
-
Right of access – to request information about personal data we process about you;
-
Right to rectification – to request correction of inaccurate or incomplete personal data;
-
Right to erasure – to request deletion of personal data where the applicable legal requirements are met;
-
Right to restriction – to request restriction of certain processing activities;
-
Right to data portability – to receive certain personal data in a structured, commonly used and machine-readable format where applicable;
-
Right to object – to object to certain processing based on legitimate interests and to processing for direct marketing;
-
Right to withdraw consent – where processing is based on consent;
-
Right to lodge a complaint – with a competent data protection supervisory authority.
These rights may be subject to conditions, limitations or exceptions under applicable law.
15. Exercising Your Privacy Rights
To exercise an applicable privacy or data protection right, please contact us at:
Please clearly describe your request and provide sufficient information for us to identify the relevant personal data.
We may request reasonable additional information where necessary to verify your identity and protect personal information against unauthorised disclosure.
We will respond to valid requests within the time required by applicable law.
16. Right to Lodge a Complaint
If you are located in Germany or Austria and believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.
We encourage you to contact us first at support@mlddxc.shop if you have questions or concerns so that we can review the matter.
This does not affect your right to contact a competent supervisory authority directly.
17. Automated Decision-Making
We do not intend to make decisions producing legal or similarly significant effects on customers solely through automated processing unless such processing is permitted under applicable law.
Automated tools may nevertheless be used for ordinary website security, fraud detection, order administration or similar operational purposes.
18. Children's Privacy
Our online store is not intended to knowingly collect personal information from children who are not legally able to enter into the relevant transaction or provide valid consent under applicable law.
If you believe that personal data relating to a child has been provided to us improperly, please contact us at support@mlddxc.shop.
19. Third-Party Websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices of independent third parties. We recommend reviewing the privacy information provided by those third parties before providing personal information to them.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business practices, website functionality, service providers or applicable legal requirements.
The current version will be published on mlddxc.shop, together with the applicable “Last updated” date.
21. Contact Information
For questions, requests or concerns regarding privacy or personal data, please contact:
PINK GALAXY LIMITED
Company Registration Number: 9385683
Registered Address:
Flat 9, 9 Fields Parade
Oteha, Auckland 0632
New Zealand
Email: support@mlddxc.shop
Telephone: +64 21 768 684
Website: mlddxc.shop