Privacy policy

Last updated: August 15, 2026

This Privacy Policy explains how Georgia Mavi, trading as Gina Mavi (“Gina Mavi”, “we”, “us” or “our”), collects, uses and shares personal information when you visit ginamavi.com, make a purchase, create an account, subscribe to marketing communications, submit a review or contact us.

Data Controller

The controller responsible for processing your personal data is:

Georgia Mavi, trading as Gina Mavi
Lehn 270c/10
6444 Längenfeld
Austria
Email: mavi_georgia@icloud.com

Personal Information We Collect

Depending on how you interact with our store, we may collect:

  • Contact information, including your name, email address, telephone number, billing address and delivery address.

  • Order information, including purchased products, personalization details, order history, returns and refunds.

  • Account information, including login details, preferences and saved settings.

  • Payment and transaction information. Payments are processed by Shopify Payments, PayPal or the selected payment provider. We do not receive or store your complete payment-card details.

  • Communications you send to us through email, Shopify Inbox or other contact methods.

  • Review information, including your name, rating, review content and any photographs you choose to submit.

  • Technical and usage information, including your IP address, browser, device, network information and interactions with our website.

  • Cookie and consent information, including your selected cookie preferences.

  • Newsletter information, including your email address, consent status and confirmation of your subscription.

Please do not provide sensitive personal information when using personalization fields, reviews or communication forms.

How We Collect Your Information

We collect personal information:

  • Directly from you when you place an order, create an account, personalize a product, contact us, submit a review or subscribe to our mailing list.

  • Automatically through cookies, pixels and similar technologies when you use our website.

  • From service providers and business partners that support our store, payments, order fulfilment, delivery, analytics, advertising and customer communications.

How and Why We Use Your Information

We process personal information for the following purposes and legal bases:

  • To process payments, fulfil orders, arrange delivery and manage returns or refunds. This processing is necessary to perform our contract with you.

  • To produce and personalize products according to your instructions. This processing is necessary to perform our contract with you.

  • To provide customer support and respond to enquiries. This is necessary to perform our contract or is based on our legitimate interest in providing customer service.

  • To maintain customer accounts and store preferences requested by you.

  • To prevent fraud, protect our store and maintain the security of our services. This is based on our legitimate interests and legal obligations.

  • To comply with tax, accounting, consumer-protection and other legal requirements.

  • To send marketing emails where you have provided consent. New email subscribers must confirm their subscription through a double opt-in email. You may unsubscribe at any time by using the unsubscribe link in our emails.

  • To measure website performance, personalize the shopping experience and display relevant advertising, where you have consented to the relevant cookies.

  • To collect and display customer reviews, based on your submission of a review and our legitimate interest in presenting customer feedback.

We do not send SMS marketing unless you have separately and explicitly subscribed to it.

Shopify

Our store is hosted by Shopify. Shopify processes personal information required to operate the website, customer accounts, checkout, payments, fraud prevention, analytics and related services.

We use Shopify Network Intelligence, which may combine information about interactions with our store and other Shopify services to improve security, analytics, personalization and advertising. Where legally required, these activities depend on your cookie and privacy choices.

More information is available in the Shopify Consumer Privacy Policy and through the Shopify Privacy Portal.

Order Production and Fulfilment

We use Printful to manufacture and fulfil print-on-demand products. To fulfil your order, relevant information may be shared with Printful, including:

  • Your name and delivery address

  • Your contact details

  • The products ordered

  • Personalization details requested by you

  • Order and delivery information

Printful may use production facilities and delivery partners in different countries. More information is available in the Printful Privacy Policy.

Payments

Payments are processed through Shopify Payments and, where selected, PayPal. Payment providers process your payment details according to their own privacy policies and legal obligations.

We generally receive transaction confirmation, payment status and limited payment information rather than your complete card details.

More information is available in the Shopify Privacy Policy and the PayPal Privacy Statement.

Apps and Service Providers

We use service providers and Shopify applications to operate and improve our store, including:

  • Printful for product production and order fulfilment.

  • Easify Options for product options and personalization information.

  • Judge.me Reviews for collecting and displaying customer reviews.

  • Shopify Inbox and Shopify Messaging for customer communication.

  • Shopify Flow for store and order automation.

  • Shopify Search & Discovery for store search and product discovery.

  • Shopify Translate & Adapt for translated and localized store content.

  • Smart Pricing for pricing-related store functions.

  • Google & YouTube and Pinterest for sales-channel integration, analytics and advertising, subject to your consent where required.

  • Delivery companies and postal providers for shipping and tracking orders.

These providers receive only the information reasonably required to perform their services and may process data under their own privacy terms.

Reviews

If you submit a product review, Judge.me may process your name, email address, order information, rating, review text and any media you voluntarily submit.

Published reviews may be visible publicly. Your email address is not displayed publicly as part of the review.

Cookies, Analytics and Advertising

We use necessary cookies to operate the website, customer accounts, shopping cart, checkout, security and cookie preferences.

With your consent, we may also use:

  • Personalization cookies

  • Analytics cookies

  • Marketing and advertising cookies

  • Google & YouTube tracking technologies

  • Pinterest tracking technologies

  • Shopify analytics and Network Intelligence features

Non-essential cookies and pixels are not intended to be used for these purposes before you provide consent where consent is legally required.

You can accept, decline or manage cookie categories through the cookie banner. You can change your selection at any time through the “Cookie preferences” link in the website footer. Withdrawing consent does not affect processing that occurred before withdrawal.

Sharing Personal Information

We may share personal information with:

  • Shopify and its affiliated service providers.

  • Printful and its production partners.

  • Shopify Payments, PayPal and other payment providers selected by you.

  • Delivery, postal and logistics providers.

  • Applications and service providers used to operate the store.

  • Google and Pinterest, where you have consented to analytics or marketing processing.

  • Professional advisers, tax authorities, courts or public authorities where required by law.

  • A purchaser or successor if the business is transferred, provided applicable data-protection requirements are followed.

We do not sell your personal information.

International Data Transfers

Some service providers may process data outside Austria or the European Economic Area.

Where personal information is transferred outside the European Economic Area, appropriate safeguards are used where required, such as an adequacy decision by the European Commission or Standard Contractual Clauses.

Data Retention

We retain personal information only for as long as necessary for the purposes described in this policy.

Order, invoice, payment and accounting information is generally retained for seven years to comply with Austrian tax and accounting requirements. Information may be retained longer where necessary for legal claims or other statutory obligations.

Customer-account information is retained while the account remains active and afterwards where required by law. Customer-service communications are retained for as long as reasonably necessary to resolve the enquiry and protect legal interests.

Newsletter information is retained until you unsubscribe or withdraw your consent, subject to limited records required to demonstrate previous consent.

Cookie retention periods vary depending on the cookie and provider.

Your Rights

Subject to the conditions of applicable data-protection law, you may have the right to:

  • Request access to your personal information.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of your information.

  • Request restriction of processing.

  • Object to processing based on legitimate interests or direct marketing.

  • Receive certain information in a portable format.

  • Withdraw consent at any time where processing is based on consent.

  • Submit a complaint to a data-protection authority.

To exercise your rights, contact us at mavi_georgia@icloud.com. We may need to verify your identity before completing your request.

You may also submit privacy requests relating to information processed by Shopify through the Shopify Privacy Portal.

Austrian Data Protection Authority

You have the right to lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria
Website: https://www.dsb.gv.at

Children’s Privacy

Our store is not directed at children, and we do not knowingly collect personal information from children who are not legally able to provide their information or enter into a purchase without the required consent.

If you believe that a child has provided personal information to us improperly, please contact us.

Data Security

We and our service providers use appropriate technical and organizational measures designed to protect personal information. However, no system or internet transmission can be guaranteed to be completely secure.

Changes to This Policy

We may update this Privacy Policy when our business practices, services or legal obligations change. The current version and its last-updated date will always be published on this page.

Contact

For questions about this Privacy Policy or requests concerning your personal information, contact:

Georgia Mavi, trading as Gina Mavi
Lehn 270c/10
6444 Längenfeld
Austria
Email: mavi_georgia@icloud.com