Privacy policy

Privacy Policy

Last updated: 23 August 2026

This Privacy Policy explains how GAUSEL ECOM, trading as Malden Limited (“Malden Limited”, “we”, “us” or “our”), collects, uses, discloses and protects personal data when you visit https://maldenlimited.com, purchase our products, contact us or otherwise use our services (the “Services”).

1. Data controller

The controller responsible for the processing described in this Privacy Policy is:

GAUSEL ECOM, trading as Malden Limited
Organisation number: 938 048 622
Tårnfalkveien 41, 4318 Sandnes, Norway
Email: support@maldenlimited.com

2. Personal data we process

Depending on how you use the Services, we may process:

Identity and contact data, such as your name, email address, telephone number, billing address and delivery address.
Order and transaction data, such as products ordered, order value, discounts, delivery method, returns, refunds and transaction confirmation.
Payment-related data. Payments are processed by Shopify and the payment providers available at checkout, which may include Klarna and card-payment providers. We generally receive payment status and limited transaction information, not your complete card details.
Account data, such as account identifiers, saved addresses, preferences and order history if you create or use a customer account.
Communications, such as customer-service messages, return requests, complaints, reviews and other information you choose to provide.
Device and usage data, such as IP address, browser type, device identifiers, pages viewed, referring pages and interactions with the Store.
Cookie and marketing data, such as cookie choices, advertising identifiers, campaign interactions and marketing preferences, where permitted.

Please do not send us sensitive personal data unless it is necessary for us to handle a specific request.

3. How we collect personal data

We collect personal data:

directly from you when you place an order, create an account, subscribe to marketing, submit a review or contact us;
automatically through the Store, cookies and similar technologies;
from Shopify and service providers involved in payments, fulfilment, delivery, analytics, advertising, fraud prevention and customer support; and
from advertising or referral partners when you interact with our campaigns, where permitted by law.

4. Purposes and legal bases

We process personal data for the following purposes and legal bases:

Purpose	Legal basis
Process payments, fulfil orders, deliver products, administer returns and provide requested customer service	Performance of a contract or steps taken at your request before entering into a contract
Maintain transaction, tax and accounting records and respond to lawful authority requests	Compliance with legal obligations
Prevent fraud, secure the Store, troubleshoot errors and protect our legal rights	Our legitimate interests in operating a secure and lawful business
Improve the Store, understand general performance and provide relevant customer support	Our legitimate interests, where those interests are not overridden by your rights; consent where required for the technology used
Send email or SMS marketing	Your consent, where required, or another lawful basis permitted by applicable law
Use non-essential analytics or advertising cookies and provide personalised advertising	Your consent where required
Establish, exercise or defend legal claims	Our legitimate interests and compliance with legal obligations

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

5. Cookies and similar technologies

We and our service providers use cookies and similar technologies to operate the Store, remember your choices, secure transactions, measure performance and, with your permission where required, support analytics and advertising.

Strictly necessary technologies may operate without consent where allowed by law. Non-essential analytics and advertising technologies are used only after the required consent has been obtained. You can change or withdraw your choices through the cookie banner or the privacy-preferences link available in the Store. You may also adjust your browser settings, although blocking necessary technologies can affect Store functionality.

6. Marketing and advertising

If you consent to receive marketing, we may send information about our products and offers. You can unsubscribe at any time through the link in a marketing message or by contacting us.

Where enabled and permitted by your cookie choices, we may use advertising and measurement services such as Google and Meta to understand campaign performance and show relevant advertising. These providers may process online identifiers and usage information under their own privacy notices. Rejecting advertising cookies does not prevent you from using the Store.

7. How we disclose personal data

We disclose personal data only as reasonably necessary to operate the Services, comply with law and protect our rights. Recipients may include:

Shopify, which hosts the Store and provides commerce, account, checkout and related services;
payment providers, including providers displayed at checkout such as Klarna and card-payment processors;
fulfilment and delivery providers, which may include CJdropshipping, TeamDrop, warehouses, postal operators, couriers and customs-service providers;
analytics and advertising providers, such as Google and Meta, where enabled and permitted;
review and customer-engagement providers, such as Judge.me, where enabled;
IT, hosting, email, security and customer-support providers;
professional advisers, such as accountants, legal advisers and insurers; and
public authorities or other parties where disclosure is required by law or reasonably necessary to establish, exercise or defend legal claims.

These providers receive only the information reasonably necessary for their role. Some act as our processors, while others act as independent controllers for parts of their services.

8. Shopify

The Store is hosted by Shopify. Shopify processes personal data to provide and improve its commerce services, prevent fraud and support features used across Shopify stores. More information is available in the Shopify Consumer Privacy Policy and through the Shopify Privacy Portal.

9. International transfers

We are established in Norway and may use service providers in the European Economic Area and other countries. Where personal data is transferred to a country without an applicable adequacy decision, we or the relevant provider use recognised safeguards where required, such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where appropriate.

You may contact us for more information about the safeguards relevant to your data.

10. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to:

fulfil orders and administer returns, warranties and customer service;
comply with tax, accounting and other legal retention requirements;
maintain an account while it remains active;
keep marketing records until consent is withdrawn or the data is no longer required; and
establish, exercise or defend legal claims during applicable limitation periods.

Retention periods vary according to the type of data, the purpose, legal requirements and whether a dispute or investigation is ongoing. When data is no longer required, it is deleted or anonymised in accordance with our processes and those of our providers.

11. Your rights

Subject to applicable law, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete data;
request deletion of personal data;
request restriction of processing;
object to processing based on legitimate interests, including direct marketing;
receive certain data in a portable format;
withdraw consent at any time; and
lodge a complaint with a data-protection authority.

To exercise your rights, email support@maldenlimited.com. We may request information reasonably necessary to verify your identity. You will not be discriminated against for exercising your rights.

You may complain to the Norwegian Data Protection Authority, Datatilsynet, or to the competent supervisory authority in your country of residence. A list of EEA supervisory authorities is available from the European Data Protection Board.

12. Automated processing

Payment, security and fraud-prevention providers may use automated systems to assess transactions. GAUSEL ECOM does not make decisions based solely on automated processing that produce legal or similarly significant effects for you, unless this is permitted by law and appropriate safeguards and information are provided.

13. Information required to place an order

Certain information, including contact, delivery and payment information, is required to enter into and perform a purchase contract. If you do not provide it, we may be unable to process or deliver your order.

14. Children

The Services are not directed to children. We do not knowingly collect personal data directly from children who cannot validly consent or enter into a purchase under applicable law. If you believe a child has provided personal data to us, please contact us.

15. Security

We use reasonable technical and organisational measures designed to protect personal data. However, no method of transmission or storage is completely secure. Please do not send payment-card details or other sensitive information through ordinary email.

16. Third-party websites

The Store may link to websites or services operated by third parties. Their processing is governed by their own privacy notices, and we are not responsible for independent third-party websites.

17. Changes to this Privacy Policy

We may update this Policy to reflect changes in our practices, providers or legal obligations. The current version will be published in the Store with an updated date. Where required, we will provide additional notice or request renewed consent.