Privacy Policy

Last updated: June 2, 2026

This Privacy Policy explains how MA-HA VIRTUE ("MA-HA VIRTUE," "we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit www.mahavirtue.co, purchase our products, or otherwise interact with us (collectively, the "Services"). By using the Services, you agree to the practices described in this Policy.

1. Information We Collect

We collect the following categories of personal information:

  • Information you provide — name, email address, shipping and billing address, phone number, and order details when you create an account, place an order, subscribe to our newsletter, or contact us.
  • Payment information — processed securely by our third-party payment processors; we do not store full card numbers.
  • Automatically collected information — IP address, device and browser type, pages viewed, referring URLs, and similar usage data collected through cookies and comparable technologies.
  • Communications — records of your correspondence with us and your marketing preferences.

2. How We Use Your Information

  • To process and fulfill orders, payments, and returns.
  • To create and manage your account and provide customer support.
  • To send transactional messages and, with your consent, marketing communications.
  • To operate, personalize, analyze, and improve the Services.
  • To detect, prevent, and address fraud, security, and technical issues.
  • To comply with legal obligations and enforce our terms.

3. How We Share Your Information

We share personal information with service providers who perform functions on our behalf (e.g., payment processing, shipping, hosting, analytics, email delivery), with professional advisors, with authorities where required by law, and in connection with a business transfer. We do not sell your personal information for money.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to keep the site functioning, remember preferences, measure performance, and support marketing. You can control cookies through your browser settings and, where available, our cookie preferences tool. Some features may not function properly if cookies are disabled.

5. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements, after which it is deleted or anonymized.

6. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

7. Your California Privacy Rights (CCPA/CPRA)

California's privacy rules are primarily governed by the California Consumer Privacy Act (CCPA) and the expanded provisions of the California Privacy Rights Act (CPRA).

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, provides you the following rights:

  • Right to know the categories and specific pieces of personal information we collect, use, and disclose.
  • Right to delete personal information we have collected, subject to exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of the "sale" or "sharing" of personal information (including for cross-context behavioral advertising).
  • Right to limit the use and disclosure of sensitive personal information.
  • Right to non-discrimination for exercising your privacy rights.

To exercise these rights, contact us using the details below or use our "Do Not Sell or Share My Personal Information" link where applicable. We will verify your request and may ask for information to confirm your identity. You may use an authorized agent to submit a request on your behalf.

8. Your European Privacy Rights (GDPR/UK GDPR)

European privacy rights are primarily governed by the EU General Data Protection Regulation (GDPR) and, in the United Kingdom, the UK GDPR and the Data Protection Act 2018.

If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation grants you certain rights. Our legal bases for processing include performance of a contract, your consent, our legitimate interests, and compliance with legal obligations. You have the right to:

  • Access the personal data we hold about you.
  • Request rectification of inaccurate or incomplete data.
  • Request erasure ("right to be forgotten").
  • Restrict or object to certain processing, including direct marketing.
  • Data portability.
  • Withdraw consent at any time, without affecting prior processing.
  • Lodge a complaint with your local supervisory authority.

Where we transfer personal data outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses. To exercise your rights or to contact our data protection representative, use the details below.

9. Children's Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please contact us so we can delete it.

10. Changes to This Policy

We may update this Policy from time to time. We will post the revised version with an updated "Last updated" date, and material changes will be communicated as required by law.

11. Contact Us

For questions or to exercise your rights, contact us at privacy@mahavirtue.co.