Privacy Policy

Overview

Mistorchen LLC takes your privacy seriously. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the Marmu Shop at store.marmupt.com. It also explains your rights regarding that information.

By using the Shop, you agree to the collection and use of information as described in this policy.

Key Terms

Information We Collect

When you use the Marmu Shop, we may collect the following information:

How We Use Your Information

We use your personal information to:

• Process and fulfill your orders
• Send order confirmations, shipping notifications, and delivery updates
• Respond to support inquiries and replacement requests
• Detect and prevent fraud or unauthorized activity
• Comply with applicable legal obligations
• Improve the Shop's performance and user experience

We do not use your personal information for automated decision-making that produces legal or similarly significant effects.

Payment Processing

All payment transactions are processed by Stripe. When you enter your payment details at checkout, that information is transmitted directly to Stripe and is subject to Stripe's privacy policy. Mistorchen LLC does not store or have access to your full card number, CVV, or other sensitive payment credentials.

Order Fulfillment

To fulfill and ship your order, we share necessary information (name, shipping address, order details) with Shippo for label generation and carrier handoff. Shippo is bound by its own data protection obligations.

We Do Not Sell Your Information

Mistorchen LLC does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes, under any circumstances.

Who We Share Your Information With

We share your personal information only as necessary to operate the Shop:

• Stripe — payment processing
• Shippo — order fulfillment and shipping
• Medusa — e-commerce platform powering the Shop
• Legal and regulatory authorities — when required by law
• Potential business successors — in the event of a sale or restructuring of Mistorchen LLC, subject to confidentiality obligations

We only share what is necessary and require all service providers to handle your data appropriately.

Cookies

The Shop uses cookies to support core functionality (e.g., cart persistence, checkout sessions) and to understand how users navigate the site. You may adjust cookie preferences through your browser settings, though some features may not function correctly if cookies are disabled.

Data Retention

We retain your personal information for as long as necessary to fulfill your order, comply with legal obligations, and resolve any disputes. Order records are typically retained for a minimum of 5 years in accordance with standard business and tax record-keeping requirements.

Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, loss, or disclosure. Access to your data is limited to personnel with a legitimate need. In the event of a suspected data breach, we will notify affected individuals and relevant authorities as required by law.

California Residents — Your Rights Under the CCPA

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know — the categories and specific pieces of personal information we have collected about you
• Right to deletion — request that we delete your personal information, subject to legal exceptions
• Right to opt-out — we do not sell personal information, so no opt-out is required
• Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights

To exercise these rights, contact us at developer@mistorchen.com.

European Union and UK Residents — Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights:

• Access — obtain a copy of your personal information
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal information in certain circumstances
• Restriction — request that we limit processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests or for direct marketing

Data transfers outside the EEA to service providers (e.g., Stripe, Shippo) are conducted under appropriate safeguards in accordance with applicable data protection law.

To exercise your rights or to lodge a complaint, contact us at developer@mistorchen.com.

Links to Third-Party Sites

The Shop may contain links to external websites. Mistorchen LLC is not responsible for the privacy practices of those sites and encourages you to review their privacy policies independently.

Contact

For privacy-related inquiries or to exercise your rights: