Privacy policy.
Last updated: [date of publication]
This page is a draft prepared for launch. It will be reviewed by a lawyer before Mango goes on sale.
In short
- We collect what we need to take, ship and support your order, and nothing for advertising.
- We never see your full card number: payments go through our payment provider.
- We do not sell your data and we do not share it for advertising.
- No audience measurement runs on this site today. If we add it, it will only run with your consent.
Who is responsible
The controller of your personal data is [Company legal name], [Registered office address].
For any question about your data, or to use your rights, write to privacy@mangosound.com.
[If the seller is not established in the EU (or in the UK): name and address of its representative there, under Article 27 GDPR]
What we collect
When you pre-order
Your name, email address, delivery address, phone number if you give it for the carrier, the speakers you order, your order number and the status of your order. Your payment details are entered directly with our payment provider, which tells us whether the payment worked, the type of card and its last four digits.
Ordering as a guest
You do not need an account. To find your order on the Order status page, we use your order number together with the email address you ordered with.
Newsletter
If you sign up, your email address and the date of your consent. Every email has a link to unsubscribe.
Contact and support
When you write to us or use the contact, withdrawal or warranty forms: your name, email address, order number, your message and anything you choose to attach, such as a photo.
In your browser
Your cart, your cookie choice and the orders placed in this browser are kept in your browser's storage, on your device. We do not receive them. The list is in our cookie policy.
When you visit
Like any website, our host receives technical data when your browser requests a page: your IP address, browser type, the page requested and the time. Our typefaces are loaded from Google Fonts, so your browser also sends your IP address to Google when it fetches them.
Why we use it, and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Taking your pre-order, charging it when it ships, delivering it | Order, contact and delivery details, payment status | Performance of the contract |
| Emails about your order: confirmation, production, shipping, return reminder | Email address, order details | Performance of the contract |
| Withdrawals, returns, legal guarantee and warranty | Order details, your messages and photos | Performance of the contract and legal obligation |
| Invoices and accounting records | Order and payment details | Legal obligation |
| Answering your questions | Your messages and contact details | Our legitimate interest in helping you, or the contract if you are a customer |
| Newsletter | Email address | Your consent, which you can withdraw at any time |
| Keeping the site secure and available, preventing payment fraud | Technical data, payment data | Our legitimate interest in protecting the shop and our customers |
| Audience measurement (not active today) | Pages visited, device type | Your consent |
We do not make decisions about you based solely on automated processing. Our payment provider may run automated checks to detect fraudulent payments.
Who receives your data
Your data is seen by the people at Mango who handle orders and support, and by the service providers below, who act on our instructions and only for the purpose given.
| Provider | Role | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting and delivery of the website, security | United States, with servers worldwide |
| [payment provider] | Payments and fraud prevention | [location] |
| [email service provider] | Sending order emails and the newsletter | [location] |
| DHL | Delivering your parcel and the free returns, with tracking messages | the Netherlands |
| Google (Google Fonts) | Serving the typefaces of the site | United States |
| [audience measurement tool] | Audience measurement, only with your consent. Not active today. | [location] |
We may also disclose data when the law requires it, for example to a tax authority or a court. We never sell your data.
Transfers outside Europe
Some of our providers, including Cloudflare and Google, are based in the United States or may process data there. These transfers are protected by [transfer mechanism: for example the EU-US Data Privacy Framework, or the European Commission's standard contractual clauses]. You can ask us for a copy of the safeguards at privacy@mangosound.com.
How long we keep it
| Data | Kept for |
|---|---|
| Orders that shipped | 4 years after delivery, to cover the legal guarantee and the Mango warranty, then only what accounting law requires, for the period it requires |
| Invoices and accounting records | the period set by the accounting law that applies, for example 10 years |
| Pre-orders cancelled before shipping | 12 months after cancellation |
| Messages to support | 3 years after our last exchange |
| Newsletter | Until you unsubscribe, or 3 years without any opening or click |
| Technical logs | as set by our host, and no longer than 12 months |
| Storage in your browser | Until you clear it, see the cookie policy |
Your rights
You have the right to:
- access your data and get a copy of it,
- have it corrected if it is wrong or incomplete,
- have it erased, unless we must keep it, for example for accounting,
- restrict how we use it while a question is being settled,
- receive the data you gave us in a reusable format (portability),
- object to any use based on our legitimate interest,
- withdraw your consent at any time, for the newsletter or audience measurement, without affecting what was done before.
Write to privacy@mangosound.com. We answer within one month. We may ask you to confirm your identity, for example by writing from the email address you ordered with.
If you think we have not respected your rights, you can complain to [name and website of the supervisory authority], or to the data protection authority of the country where you live or work.
Security
The site is served over an encrypted connection (HTTPS). Access to customer data is limited to the people who need it to handle your order, and our providers are bound by contract to protect it.
Children
The shop is not intended for children. If you are under 16, please ask a parent or guardian to order for you.
Changes to this policy
We update this policy when our practices or the law change, and show the date of the last update at the top of the page. If a change affects how we use data you have already given us, we tell you by email.