Privacy policy

Effective Date: January 2026
Last Updated: January 1st 2026

At MusallahMat, your privacy matters. This policy explains what personal data we collect, how we use it, and your rights as a customer. Whether you’re just browsing or placing an order, we want you to feel confident about how your data is handled.

1. Who We Are

This website is operated by ASE Digital.
For all privacy-related questions, please contact us via our Contact Page.

2. Information We Collect

  • We may collect the following personal data when you interact with our website:
  • Name and contact details (email, phone number, shipping address)
  • Payment information (via trusted third-party processors)
  • IP address, browser/device type, and usage activity on our site
  • Any data submitted through forms, such as newsletter sign-ups or customer service inquiries
  • Reviews or survey responses
  • Application data if you apply for a job or collaborate with us

We do not collect or store your full credit card details. Payments are handled securely by third parties like Mollie, PayPal, and Shopify Payments.

3. How We Use Your Data

We only process your personal data when we have a legal basis to do so. This includes:

  • To fulfill your order (shipping, confirmations, returns)
  • To send order updates or product review requests
  • To deliver newsletters or offers if you opt in
  • To improve our site and user experience
  • To comply with legal obligations

We may also use cookies (see Section 8) to analyze website traffic and personalize content.

4. Legal Bases for Processing

We rely on the following lawful bases:

  • Contractual necessity (e.g. to deliver products you order)
  • Your consent (e.g. for marketing emails)
  • Legal obligations (e.g. tax laws)
  • Legitimate interest (e.g. website analytics, fraud prevention)

You may withdraw consent at any time by clicking "unsubscribe" in emails or contacting us directly.

5. Who We Share Data With

We only share your data when absolutely necessary, including with:

  • Shopify – eCommerce platform
  • Mollie & PayPal – payment processing
  • CJ – order fulfillment and shipping
  • Google (Gmail) – customer service communications
  • Social media platforms (e.g. Facebook, Instagram) when you interact with our accounts

We require all partners to uphold strong security standards and never sell your data.

Some of our partners are located outside the EU/EEA. In such cases, we use legally approved mechanisms (like the EU’s Standard Contractual Clauses) to protect your information.

6. Data Retention

We retain your personal data only as long as needed for the purpose for which it was collected or as required by law:

  • Order information: kept for 7 years for tax/accounting
  • Marketing data: until you unsubscribe
  • Inactive customer accounts: deleted after 2 years
  • Job applications: deleted after 4 weeks (unless you consent to longer retention)

7. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Correct inaccuracies
  • Delete your data (“right to be forgotten”)
  • Object to or restrict processing
  • Withdraw consent
  • Request your data in a portable format
  • Lodge a complaint with a data protection authority

To make a request, contact us via our contact page. We’ll respond within 24 hours.

8. Cookies & Tracking Technologies

We use cookies and pixels for:

  • Website functionality
  • Analytics (e.g. Google Analytics, Shopify Reports)
  • Personalized advertising via social platforms like Meta Ads

You can control your cookie preferences via the pop-up banner or browser settings. For full details, see Shopify’s cookie policy. 

9. Children’s Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal data from minors. If you believe we have done so, please contact us and we will delete the information.

10. Data Security

We take security seriously and implement industry-standard measures, including:

  • SSL encryption
  • Access control
  • Encrypted data storage
  • Monitoring & intrusion detection systems

While we work hard to protect your data, no system is 100% secure. We encourage you to use strong passwords and safeguard your login information.

11. Data Breach Notification

If a breach occurs that affects your personal data, we will notify you as required by law, including via email where appropriate.

12. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect and use
  • Request deletion of your personal information
  • Opt out of sale or sharing of personal data
  • Non-discrimination for exercising your rights

To exercise your rights under CCPA, contact us via our contact page. We do not sell your personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. You will always find the most recent version on this page. If significant changes are made, we will notify you by email (if we have your address).

14. Questions or Complaints

If you have any questions about this Privacy Policy or wish to file a complaint, please contact:

ASE Digital | MusallahMat

Email: info@musamat.com