Who we are
This policy explains how Mallexp (mall-exp.com) handles personal information. The site is operated by Mallexp LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States, which is the data controller for the personal information described here. For any privacy question, email [email protected].
Information we collect
| Data | Examples | When |
|---|---|---|
| Contact details | Name, email, company and phone (optional) | Checkout, inquiries, contact form |
| Order data | Shipping address and postcode, products, quantities, amounts, shipping method, order reference | Cart checkout |
| Quotation data | Products and quantities requested, ship-to country, messages, quotation and payment references | Request a quote, quotation pages |
| Payment status | Whether a payment succeeded, amount, payment method type and the processor’s transaction ID — not your full card number | Payments via Stripe, PayPal or bank transfer |
| Bank transfer details | Payer name, amount, date and the payment reference you include | Quotation payments by ACH / wire |
| Account data | Login email and account details, if you create an account | Registration, sign-in |
| Google / Facebook sign-in | Your name, email address and the ID of your Google or Facebook account — never your Google or Facebook password | When you choose “Continue with Google” or “Continue with Facebook” |
| Advertising data | Pages you view and shop actions (product views, searches, add to cart, checkout, payment details added, inquiries, sign-ups, purchases), the cookie IDs of the Meta and TikTok pixels and the click ID of an ad link you arrived from | Browsing the Site — only with your consent where required |
| Support messages | Emails and photos you send us, for example for returns | When you contact us |
| Technical data | IP address, browser and device type, security signals | Every visit, through our hosting and security provider |
How we use your information
- To process cart orders and quotations, take payments and ship your order.
- To send transactional emails: the order confirmation after payment, the shipping notice with carrier and tracking number, and quotation and invoice emails.
- To answer support requests, returns and claims.
- To match bank transfers to quotations using the payment reference.
- To keep the site secure and prevent fraud and abuse.
- To meet legal, accounting and tax-record obligations.
- To let you sign in with Google or Facebook: we use the name and confirmed email address the provider shares to find your Mallexp account (or link it, if one with that email exists) or to create one.
- To measure our advertising on Facebook, Instagram and TikTok — only with your consent where required (see Advertising measurement).
Marketing emails: we send marketing emails only if you opted in (for example when creating an account). Every marketing email has an unsubscribe link, or email us at [email protected]. We will not send marketing emails without your permission.
Consent
When you give us personal information to complete a transaction, request a quotation, arrange a delivery or return a purchase, you consent to our collecting and using it for that specific reason only. If we ask for your information for a secondary reason, such as marketing, we will ask you directly for your consent or give you the chance to say no.
You can withdraw your consent at any time by emailing [email protected].
Where the EU or UK GDPR applies, we rely on these legal bases:
- Performance of a contract — processing orders, quotations and your account.
- Legal obligations — keeping accounting and tax records.
- Legitimate interests — fraud prevention, security, improving the store and answering support requests.
- Consent — the ad pixels and ad-click IDs, where consent is required.
Service providers & sharing
We share personal information only with providers that need it to run the Service, and only as far as necessary:
| Provider | Purpose |
|---|---|
| Stripe | Card payment processing and fraud prevention |
| PayPal | PayPal payment processing |
| Our banking partners Mercury and Wise | Receiving bank transfers (Mercury for USD transfers, Wise for bank transfers in other currencies) and reconciling them with quotation payment references |
| Cloudflare | Hosting, content delivery (CDN) and security, including bot protection |
| Namecheap | Hosting of our store server and database, and sending order, shipping and quotation emails |
| Google Cloud Translation | Machine translation of site content and of the text of approved product reviews (never names, addresses or contact details) |
| Carriers | Delivering your order (name, address, postcode, contact details) |
| Sign-in with Google, if you choose it (Google confirms your identity and shares your name and email address with us) | |
| Meta Platforms (Facebook) | Sign-in with Facebook, if you choose it; advertising measurement with the Meta Pixel and the Meta Conversions API — only with your consent where required |
| TikTok | Advertising measurement with the TikTok Pixel and the TikTok Events API — only with your consent where required |
| Analytics | We do not currently use analytics tools. |
Payment processors such as Stripe and PayPal have their own privacy policies for the information they process for your purchase. We recommend reading them.
We may also disclose personal information if we are required by law to do so or if you violate our Terms & conditions.
We do not sell your personal information. Under some US state laws, sharing data with ad platforms through pixels can count as “sharing” — you can opt out with Cookie settings or a Global Privacy Control signal.
Payments
Card details are entered directly in Stripe’s secure payment fields, and PayPal payments are approved in PayPal. Mallexp does not receive or store your full card number. We receive confirmation of the payment and limited details such as the payment method type.
For bank transfers, your quotation invoice carries a payment reference (for example MXQ000123-D). Our banking partners (Mercury for USD transfers, Wise for other currencies) report incoming transfers to us so we can match each one to the right quotation.
Advertising measurement
With your consent where required, the Site loads the Meta Pixel and the TikTok Pixel to measure whether our ads on Facebook, Instagram and TikTok lead to visits and to actions on the Site: viewing a product, searching, adding to the cart, starting checkout, adding payment details, sending an inquiry, creating an account and completing a purchase. Without consent the pixels are not loaded and nothing is sent.
While the pixels are active, our server also sends the same events directly to Meta (Conversions API) and TikTok (Events API), with the same event ID so each one is counted only once. These server events contain your IP address and browser type, the pixel cookie IDs and ad-click IDs where available and, if you are signed in or for a paid order, identifiers such as your email address, phone number, name, city, postcode and country — in hashed (one-way encoded) form, never in plain text. A paid order is reported only if consent was given (where required) while you checked out.
You can change your choice at any time with “Cookie settings” at the bottom of every page; see the Cookie policy for the cookies involved. For the data collected through their pixels on our site, we and Meta / TikTok may act as joint controllers; each platform’s use of the data for its own purposes is governed by its privacy policy.
International transfers
Some of our providers are located in, or have facilities in, a different country from you or us. If you use a service that involves such a provider, your information may be subject to the laws of the country where that provider or its facilities are located. Where personal information is transferred outside the EU/EEA or UK, we rely on our service providers’ safeguards such as the European Commission’s Standard Contractual Clauses.
When you leave our site or are redirected to a third-party website or application (for example PayPal), this Privacy policy no longer applies.
How long we keep data
- Order and payment records: 7 years.
- Quotations: 3 years.
- Support emails: 2 years.
- Account data: until you ask us to delete your account. Records we must keep by law are kept for the periods above.
Security
We take reasonable precautions to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration or destruction. Card data is handled by Stripe and PayPal. No method of transmission over the internet or of electronic storage is 100% secure.
Keep your quotation links private: anyone with the link can view that quotation.
Your choices & rights
You can ask us to access, correct, update or delete the personal information we hold about you, or to stop using it for a particular purpose. Email [email protected] from the address you used with us; we may ask you to confirm the request. Some records must be kept for legal or accounting reasons.
EU / EEA and UK: you have the right to access, rectify and erase your personal information, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. You also have the right to complain to your local data protection supervisory authority.
California: you have the right to know, delete and correct the personal information we hold about you, to opt out of its sale or sharing, and not to be discriminated against for exercising these rights. We do not sell personal information; you can opt out of sharing with Cookie settings or a Global Privacy Control signal.
To make any of these requests, email [email protected].
Cookies
We use cookies and similar technologies that are needed to run the store securely and — with your consent where required — the Meta and TikTok pixels for ad measurement. You can change your choice at any time with “Cookie settings” at the bottom of every page. See the Cookie policy for details.
Age of consent
By using this site, you confirm that you are at least the age of majority where you live, or that you are the age of majority and have given consent for any minor dependents to use this site.
Links to other sites
Links on our store may take you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
Changes to this policy
We may update this policy at any time. Changes take effect when they are posted here and the “Last updated” date changes. If we make material changes, we will say so on this page. If Mallexp is acquired or merged with another company, your information may be transferred to the new owners so that we can continue to serve you.
Contact
To access, correct or delete your information, make a complaint, or ask a question: [email protected].
Privacy contact: [email protected]