This page describes the privacy practices of marianatang.com and how Personal Data is collected, used, and protected in connection with this service.

Owner and Data Controller

Mariana Tang
Website: https://marianatang.com
Contact email: contact@marianatang.com

Types of Personal Data Collected

Among the types of Personal Data that this Website collects, by itself or through third parties, there are:

• First name and last name
• Email address
• Usage Data (see definition below)
• Trackers (cookies and similar technologies)
• Billing address and shipping address
• Phone number
• Order ID and payment information
• Data relating to the point of sale

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.

Users are responsible for any third-party Personal Data obtained, published, or shared through this website, while Personal Data may be provided voluntarily by the User or collected automatically as Usage Data when using this Website.

Unless specified otherwise, all Data requested by this Website is mandatory and failure to provide this Data may make it impossible for this Website to provide its services. Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner at contact@marianatang.com.

Mode and Place of Processing the Data

Methods of Processing

The Owner takes appropriate security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of the Data.

Data processing is carried out using computers and/or IT-enabled tools, following organisational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons involved with the operation of this Website, or to external parties (such as third-party technical service providers, hosting providers, and IT companies) appointed, if necessary, as Data Processors by the Owner.

Place

Personal Data is processed by the Owner and by third-party service providers used to operate the Website, such as hosting, analytics, and email services. Depending on the User’s location, data transfers may involve transferring the User’s Data to a country other than their own.

Retention Time

Personal Data shall be processed and stored for as long as required by the purpose for which it was collected, as described in this Privacy Policy.

Purposes of Processing

The Data concerning the User is collected to allow the Owner to provide its services, comply with legal obligations, respond to enforcement requests, protect its rights and interests, detect any malicious or fraudulent activity, as well as the following specific purposes:

• Contacting the User
• Analytics
• Managing orders and payments
• Platform services and hosting
• Mailing list and newsletter management

Detailed Information on the Processing of Personal Data

Analytics:  Google Analytics 4

This Website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

Google Analytics collects Personal Data to monitor and analyse web traffic and to keep track of User behaviour. This includes:

• Number of Users and session statistics
• Pages visited and time spent on each page
• General geographic location (country/city level)
• Device type, browser, and operating system
• IP address (anonymised)

Place of processing: Ireland / United States (Google LLC is certified under the EU-US Data Privacy Framework)

Personal Data processed: Usage Data, Trackers, number of Users, session statistics, IP address

Legal basis: Consent (Users are asked for consent via the cookie banner prior to any analytics tracking)

Retention: Google Analytics data is retained for 26 months by default.

Users may opt out of analytics tracking at any time by adjusting cookie preferences via the cookie banner, or by installing the Google Analytics Opt-out Browser Add-on.

For further information, see Google’s Privacy Policy.

Contacting the User

Contact Form

By completing the contact form with their information, the User authorises this Website to use these details solely to respond to their enquiry.

Personal Data processed:

• First name and last name
• Email address
• Message content
• Usage Data

Legal basis: Legitimate interest (responding to User inquiries)

Retention: Contact form submissions and related correspondence may be retained for as long as necessary to manage ongoing communications, maintain business records, and establish, exercise, or defend legal claims.

Mailing List or Newsletter

By subscribing to the mailing list, the User consents to receive newsletters, updates, and promotional communications from the Owner. Subscriber data is stored directly in the WordPress database of this Website and may additionally be exported to a private spreadsheet managed solely by the Owner. Subscriber data is not shared with any third-party email marketing platform.

Personal Data processed:

• Email address
• First name and last name (if provided)

Legal basis: Consent (the User actively opts in via the subscription form or contact form)

Retention: Personal Data is retained until the User unsubscribes or requests deletion.

Users may withdraw their consent and unsubscribe at any time by clicking the unsubscribe link contained in any newsletter, or by contacting the Owner at contact@marianatang.com.

Managing Orders and Payments:  WooCommerce

Orders placed through this Website are managed via WooCommerce, an e-commerce platform operated by the Owner as part of this Website. WooCommerce processes and stores Personal Data necessary to fulfil purchases, issue order confirmations, and handle returns or disputes.

Personal Data processed:

• Full name
• Billing address and shipping address
• Email address
• Phone number (optional)
• Order ID and order history
• Payment information (see Payment Providers below)

Legal basis: Performance of a contract (the User’s purchase agreement)

Retention: Order data is retained for 7 years in accordance with Irish tax and accounting obligations.

Payment Providers

Payments are processed securely by the following third-party providers. The Owner does not store full card details on this Website. Each provider operates under its own privacy policy and processes payment data in accordance with PCI DSS security standards:

• WooPayments / Woocommerce:  automattic.com/privacy
• Stripe:  stripe.com/ie/privacy
• PayPal:  paypal.com/ie/legalhub/privacy-full
  
  

Platform Services and Hosting

These services have the purpose of hosting and running key components of this Website, allowing the provision of the service from within a unified platform.

Hostinger (Hosting Provider)

This Website is hosted by Hostinger International Ltd. As the hosting provider, Hostinger processes technical data such as IP addresses, server access logs, and related infrastructure data necessary for the operation and maintenance of this Website.

Personal Data processed: Usage Data, IP addresses, server logs

For further information, see: hostinger.com/privacy-policy

WordPress (Website Platform)

This Website is built on WordPress, an open-source platform by Automattic Inc. WordPress stores data including order records, data usage and form submissions in the Website’s database, hosted on Hostinger’s infrastructure.

Personal Data processed: Usage Data, order data

For further information, see: automattic.com/privacy

Forminator (Forms Plugin)

Contact and subscription forms on this Website are built using the Forminator plugin for WordPress, developed by WPMU DEV. Form submissions are stored within the WordPress database of this Website.

Personal Data processed: First name, last name, email address, message content, Usage Data

For further information, see: wpmudev.com/privacy-policy

Cookie Policy

This Website uses Trackers. Trackers are technologies ( including Cookies, unique identifiers, and web beacons ) that enable the tracking of Users by accessing or storing information on the User’s device.

The types of Trackers used by this Website include:

• Essential Trackers — strictly necessary for the functioning of this Website and the e-commerce service (e.g. WooCommerce session and cart cookies)
• Analytics Trackers — used to monitor and analyse User behaviour (Google Analytics 4. Only activated upon User consent)

Users may manage or withdraw their consent to non-essential Trackers at any time via the cookie banner displayed on this Website.

To learn more, Users may consult the full [Cookie Policy].

Further Information for Users in the European Union

Legal Basis of Processing

The Owner may process Personal Data relating to Users if one of the following applies:

• Consent: the User has given their consent for one or more specific purposes
• Contract: provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations
• Legal obligation: processing is necessary for compliance with a legal obligation to which the Owner is subject
• Legitimate interests: processing is necessary for the purposes of the legitimate interests pursued by the Owner or a third party, provided such interests are not overridden by the User’s fundamental rights and freedoms

Data Transfers Outside the European Economic Area

Some of the third-party services used by this Website (including Google Analytics, Stripe, and PayPal) may transfer Personal Data to countries outside the European Economic Area (EEA). Where such transfers occur, they are carried out under appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, or under adequacy decisions such as the EU-US Data Privacy Framework.

The Rights of Users Based on the GDPR

Users may exercise certain rights regarding their Personal Data processed by the Owner. In particular, Users have the right to:

• Withdraw consent at any time, where processing is based on consent
• Object to processing of their Data, where processing is carried out on a legal basis other than consent
• Access their Data and obtain disclosure regarding how it is being processed
• Verify and seek rectification of inaccurate or incomplete Data
• Restrict the processing of their Data
• Obtain erasure of their Personal Data (“right to be forgotten”)
• Receive their Data in a structured, machine-readable format and have it transferred to another controller (data portability)
• Lodge a complaint with a competent data protection authority

How to Exercise These Rights

Any requests to exercise User rights can be directed to the Owner via the contact details provided in this Privacy Policy. Requests are free of charge and will be answered within one month, providing Users with the information required by law.

Users who are not satisfied with the Owner’s response may lodge a complaint with the Irish Data Protection Commission (DPC):

• Website: dataprotection.ie
• Phone: +353 (0)761 104 800
  
  

Additional Information About Data Collection and Processing

System Logs and Maintenance

For operation and maintenance purposes, this Website and any third-party services may collect files that record interaction with this Website (System logs) or use other Personal Data (such as IP addresses) for this purpose.

Legal Action

Personal Data may be used for legal purposes by the Owner in court or in the stages leading to possible legal action arising from improper use of this Website or the related services. The Owner may be required to disclose Personal Data upon request of public authorities.

Security

The Owner takes appropriate technical and organisational measures to protect Personal Data against unauthorised access, loss, destruction, or alteration. This Website uses HTTPS encryption for all data in transit. However, no method of transmission over the internet is entirely secure, and the Owner cannot guarantee absolute security.

Changes to This Privacy Policy

The Owner reserves the right to make changes to this privacy policy at any time. Users will be notified of changes via an updated date at the top of this page. It is strongly recommended to check this page periodically.

Should the changes affect processing activities performed on the basis of the User’s consent, the Owner shall collect new consent from the User where required.

Definitions and Legal References

Personal Data (or Data) Any information that directly, indirectly, or in connection with other information allows for the identification or identifiability of a natural person.

Usage Data Information collected automatically through this Website, which may include: IP addresses, browser type and version, pages visited, time and date of visit, time spent on pages, device identifiers, and other diagnostic data.

User The individual using this Website who, unless otherwise specified, coincides with the Data Subject.

Data Subject The natural person to whom the Personal Data refers.

Data Processor The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Data Controller.

Data Controller (or Owner) The natural or legal person who determines the purposes and means of the processing of Personal Data. For this Website, the Data Controller is Mariana Tang.

This Website The means by which the Personal Data of the User is collected and processed:  marianatang.com.

Tracker Any technology (including Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting) that enables the tracking of Users by accessing or storing information on the User’s device.

Cookie A Tracker consisting of small sets of data stored in the User’s browser.

European Union (or EU) Unless otherwise specified, all references to the European Union include all current member states of the European Union and the European Economic Area.

This policy relates solely to this Website, unless otherwise stated within this Privacy Policy.