Privacy policy
Last updated: 10 August 2026
MM Collection respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how MM Collection (“MM Collection”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information when you visit our website, create an account, make a purchase, subscribe to marketing, contact us or otherwise interact with our online store.
Our store is hosted on Shopify.
This Privacy Policy is intended to comply with applicable South African privacy law, including the Protection of Personal Information Act 4 of 2013 (“POPIA”), and, where applicable, privacy laws in other jurisdictions in which we offer goods or services, including the European Union, European Economic Area and United Kingdom.
1. WHO IS RESPONSIBLE FOR YOUR INFORMATION?
For personal information collected through the MM Collection store, MM Collection generally acts as the responsible party or data controller and determines why and how your personal information is used.
Shopify and certain other service providers may process personal information on our behalf to provide ecommerce, hosting, payment, analytics, security, fulfilment and other services.
If you have questions about how we use your personal information, please contact us through the Contact Us page on our website.
2. PERSONAL INFORMATION WE MAY COLLECT
Depending on how you interact with MM Collection, we may collect the following categories of personal information:
IDENTITY AND CONTACT INFORMATION
This may include:
• your first and last name;
• email address;
• telephone number;
• billing address;
• delivery or shipping address; and
• account details.
ORDER AND TRANSACTION INFORMATION
This may include:
• products purchased or viewed;
• order numbers;
• order dates;
• amounts paid;
• discounts or promotional codes;
• delivery information;
• returns and refunds; and
• correspondence relating to an order.
PAYMENT INFORMATION
Payments may be processed by Shopify Payments, payment gateways, banks or other payment service providers.
We generally do not receive or store complete payment-card numbers where those details are processed directly by the payment provider.
We may receive limited payment-related information necessary to confirm and manage your transaction.
DEVICE AND TECHNICAL INFORMATION
When you use our website, certain information may be collected automatically, including:
• IP address;
• browser type;
• device type;
• operating system;
• approximate location;
• cookie identifiers;
• pages viewed;
• referring website;
• dates and times of visits; and
• interactions with our website.
ACCOUNT INFORMATION
If you create a customer account, we may process information associated with that account, including order history and saved customer details.
COMMUNICATIONS
If you contact us, we may retain communications between you and MM Collection, including emails, contact-form submissions, support enquiries, complaints and return requests.
MARKETING INFORMATION
Where applicable, we may collect:
• whether you have subscribed to our emails;
• marketing preferences;
• interactions with promotional communications; and
• information about whether you opened or clicked a marketing message.
REVIEWS AND USER-SUBMITTED CONTENT
If you submit a review, testimonial or other content, we may process the information you choose to provide.
Please do not include sensitive personal information in a public review.
3. HOW WE COLLECT PERSONAL INFORMATION
We may collect information:
• directly from you when you place an order, create an account, subscribe, complete a form or contact us;
• automatically when you browse or use our website;
• from Shopify and other ecommerce service providers;
• from payment providers;
• from delivery, courier or logistics providers;
• from marketing and analytics providers;
• from fraud-prevention and security providers; and
• from other third parties where collection is lawful.
4. WHY WE USE YOUR PERSONAL INFORMATION
We may process personal information for the following purposes:
PROCESSING ORDERS
We use information to:
• process and confirm purchases;
• receive and verify payment;
• source, prepare and fulfil orders;
• arrange shipping or delivery;
• provide order updates;
• handle returns and refunds; and
• provide customer support.
OPERATING OUR STORE
We may use information to:
• provide and maintain our website;
• create and manage customer accounts;
• remember customer preferences;
• troubleshoot technical problems;
• improve the shopping experience; and
• understand how visitors use our store.
CUSTOMER SERVICE
We use information to respond to enquiries, complaints, returns, refund requests and other communications.
SECURITY AND FRAUD PREVENTION
We may process information to:
• prevent fraudulent transactions;
• detect suspicious activity;
• protect customers and our business;
• secure our website and systems; and
• enforce our terms and policies.
LEGAL AND REGULATORY COMPLIANCE
We may process and retain information where reasonably necessary to:
• comply with tax, accounting or consumer-protection obligations;
• maintain transaction records;
• respond to lawful requests;
• exercise or defend legal claims; and
• comply with other applicable laws.
MARKETING
Where permitted by applicable law, we may use your contact information to send you information about:
• new products;
• promotions;
• sales;
• digital products;
• special offers; and
• other MM Collection updates.
You may unsubscribe from marketing emails at any time using the unsubscribe link contained in the message or by contacting us.
Unsubscribing from marketing will not prevent us from sending transactional communications that are necessary for an existing order or customer relationship.
5. LAWFUL GROUNDS FOR PROCESSING
We process personal information only where we have a lawful basis or justification to do so.
Depending on the circumstances and applicable law, this may include:
• your consent;
• processing necessary to enter into or perform a contract with you;
• processing necessary to comply with a legal obligation;
• processing necessary to protect a legitimate interest of you, MM Collection or another person where permitted by law; and
• another ground authorised by applicable law.
Where processing is based on consent, you may withdraw that consent where applicable.
Withdrawal of consent does not affect processing that was lawful before the withdrawal.
6. DIRECT MARKETING
We aim to comply with applicable rules governing electronic direct marketing.
Where consent is required before sending electronic marketing, we will seek that consent.
Where the law permits marketing based on an existing customer relationship or another lawful ground, we may rely on that ground subject to your right to opt out.
Every marketing communication should provide a reasonable way to unsubscribe.
You may object to the use of your personal information for direct marketing at any time.
We will not require payment for you to opt out of direct marketing.
7. COOKIES AND SIMILAR TECHNOLOGIES
Our website may use cookies, pixels, tags and similar technologies.
These technologies may be used to:
• keep the website functioning;
• remember preferences;
• maintain shopping-cart functionality;
• improve security;
• measure website performance;
• understand how customers use the website;
• provide analytics; and
• support advertising or marketing where permitted.
Some cookies are necessary for the website to function.
Other cookies, including certain analytics or advertising technologies, may be optional depending on your location and applicable law.
Where required by law, we will seek consent before using non-essential cookies or similar technologies.
You may be able to manage certain privacy and cookie preferences through the controls displayed on our website or through your browser settings.
Disabling certain cookies may affect website functionality.
8. SHOPIFY
MM Collection uses Shopify to host and operate our online store.
As part of providing its ecommerce services, Shopify may process personal information relating to visitors and customers on our behalf.
Shopify may also process certain information for purposes described in its own privacy documentation where it acts in another capacity.
Your information may therefore be processed through Shopify's systems and infrastructure.
9. WHEN WE MAY SHARE PERSONAL INFORMATION
We do not disclose personal information without a lawful purpose.
We may share information with service providers where reasonably necessary to operate our business.
These may include:
SHOPIFY
For website hosting, ecommerce functionality, order management, analytics and related services.
PAYMENT SERVICE PROVIDERS
To process and verify payments and manage payment-related fraud or disputes.
COURIERS, DELIVERY AND LOGISTICS PROVIDERS
To deliver your order.
This may require us to provide your name, delivery address and contact information.
SUPPLIERS AND FULFILMENT PARTNERS
Where necessary to source, prepare or fulfil an order, limited customer or order information may be provided to an appropriate supplier or fulfilment partner.
We aim to share only information reasonably necessary for the relevant purpose.
TECHNOLOGY AND APP PROVIDERS
We may use applications and services that assist with:
• website functionality;
• customer support;
• reviews;
• email marketing;
• analytics;
• fraud prevention;
• digital-product delivery;
• accounting; and
• other business operations.
PROFESSIONAL ADVISERS
Information may be disclosed to accountants, attorneys, insurers or other professional advisers where reasonably necessary.
LEGAL AND REGULATORY AUTHORITIES
We may disclose information where required or permitted by law, including in response to a valid court order, regulatory request or other legal process.
BUSINESS TRANSFERS
If MM Collection is sold, reorganised, merged or transferred, personal information may form part of that transaction, subject to applicable law.
10. INTERNATIONAL TRANSFERS
MM Collection is based in South Africa, but some of the technology providers, ecommerce platforms, applications, payment providers or other service providers we use may process information in other countries.
As a result, your personal information may be transferred to or accessed from a country other than the country in which you live.
Where South African law applies, we take reasonable steps to ensure that cross-border processing or transfers comply with applicable requirements under POPIA.
Where EU, EEA or UK data-protection law applies to an international transfer, we will rely on an appropriate lawful transfer mechanism where one is required, which may include:
• an adequacy decision or regulation;
• approved contractual safeguards;
• binding corporate rules where applicable;
• another recognised transfer mechanism; or
• a lawful exception where permitted.
11. HOW LONG WE KEEP PERSONAL INFORMATION
We do not intend to retain personal information for longer than is reasonably necessary for the purpose for which it was collected, subject to legal and operational requirements.
Retention periods may depend on:
• the nature of the information;
• whether an active customer relationship exists;
• tax and accounting requirements;
• consumer-protection requirements;
• fraud-prevention requirements;
• contractual obligations;
• dispute or legal-claim periods; and
• other applicable legal obligations.
When personal information is no longer reasonably required, we will take reasonable steps to delete, destroy or de-identify it where appropriate and legally permitted.
12. SECURITY
We take reasonable technical and organisational measures designed to protect personal information against:
• loss;
• misuse;
• unauthorised access;
• unauthorised disclosure;
• alteration; and
• destruction.
However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.
Customers are responsible for keeping their account credentials secure and should not share passwords with other people.
13. DATA BREACHES AND SECURITY INCIDENTS
If we become aware of a security compromise involving personal information, we will investigate it and take reasonable steps to address the incident.
Where applicable law requires notification to an affected person, regulator or other authority, we will make the required notification in accordance with the applicable legal requirements.
14. YOUR PRIVACY RIGHTS IN SOUTH AFRICA
Subject to POPIA and other applicable law, you may have the right to:
• request confirmation of whether we hold personal information about you;
• request access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion or destruction of personal information where permitted;
• object to certain processing;
• withdraw consent where processing is based on consent;
• object to direct marketing; and
• lodge a complaint with the Information Regulator (South Africa).
Certain rights may be subject to legal exceptions.
We may need to verify your identity before fulfilling a request.
15. EU AND EEA PRIVACY RIGHTS
If the GDPR applies to our processing of your personal information, you may have rights including:
• the right to be informed;
• the right of access;
• the right to rectification;
• the right to erasure in qualifying circumstances;
• the right to restrict processing in qualifying circumstances;
• the right to data portability where applicable;
• the right to object to certain processing;
• the right to withdraw consent at any time where consent is the lawful basis; and
• rights relating to certain automated decision-making and profiling.
You also have the right to lodge a complaint with the competent data-protection supervisory authority.
These rights are subject to the conditions and exceptions contained in applicable law.
16. UNITED KINGDOM PRIVACY RIGHTS
If UK data-protection law applies to our processing, you may have rights relating to:
• access;
• correction;
• erasure;
• restriction;
• portability;
• objection;
• direct marketing;
• withdrawal of consent; and
• certain automated decision-making.
You may also have the right to lodge a complaint with the UK Information Commissioner's Office.
These rights are subject to applicable legal conditions and exceptions.
17. OTHER INTERNATIONAL PRIVACY RIGHTS
Customers located in other countries, states or territories may have additional privacy rights.
Where a privacy law that applies to MM Collection gives you additional rights that cannot lawfully be excluded, we will respect those rights.
This may include, depending on your jurisdiction, rights to:
• know or access information;
• correct information;
• request deletion;
• opt out of certain targeted advertising or data-sharing practices; and
• appeal certain decisions concerning a privacy request.
18. HOW TO EXERCISE YOUR RIGHTS
To make a privacy request, please contact MM Collection through the Contact Us page on our website.
Please clearly state that your message concerns a privacy or personal-information request.
We may ask for reasonable information to verify your identity before fulfilling a request.
We will respond within the time required by applicable law.
We will not discriminate against a customer merely because they exercised a privacy right available to them under applicable law.
19. CHILDREN'S PRIVACY
MM Collection sells products that may be intended for children, but our online store is intended to be used by adults who are legally capable of entering into purchase transactions.
We do not knowingly seek to collect personal information directly from children without a lawful basis or appropriate authorisation where required.
If you believe a child has provided personal information to us in circumstances that are not legally permitted, please contact us so that we can investigate and take appropriate action.
20. THIRD-PARTY WEBSITES
Our website may contain links to websites, services or platforms operated by third parties.
We are not responsible for the privacy practices of an independent third party.
We encourage you to review the privacy policy of any external website or service you choose to use.
21. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect:
• changes to our business;
• new services or technologies;
• changes to our service providers; or
• changes in legal or regulatory requirements.
The updated policy will be posted on our website with a revised “Last updated” date.
Where required by law, we will provide additional notice of material changes.
22. COMPLAINTS
If you have a concern about how MM Collection handles your personal information, please contact us first so that we have an opportunity to investigate and respond.
South African customers may also lodge a complaint with:
Information Regulator (South Africa)
Customers in the European Union or European Economic Area may lodge a complaint with the competent data-protection supervisory authority in their jurisdiction.
UK customers may lodge a complaint with:
Information Commissioner's Office (ICO)
23. CONTACT US
For privacy enquiries, data-subject requests or questions about this Privacy Policy, please contact MM Collection through the Contact Us page on our website.
Please include “Privacy Request” in your message where possible.
Sending a gift? Add a note+
