Privacy Policy – Mila’s Secret

This Privacy Policy explains how Mila’s Secret (milassecret.com), operated by Crescent Auto Fragrance Kft., Árpád út 51-53, 1042 Budapest, Hungary (“we”, “our”, “the Company”), collects, uses, and protects your personal data when you browse our website or purchase our products.

We are committed to safeguarding your privacy and processing your personal information in accordance with the General Data Protection Regulation (GDPR) and all applicable Hungarian and EU legislation.

1. Data We Collect

When you use our website, we may collect and process the following categories of data:

Information you provide directly

Name, billing/shipping address, email address, phone number, payment details (when placing an order)
Account details if you register on our website
Messages you send through contact forms, email, or live chat

Automatically collected information

IP address, browser type, device details, and browsing activity
Cookies and similar tracking technologies (see Section 6)

Information from third parties

Data received from payment processors, courier partners, fraud-prevention tools, or marketing platforms when necessary

2. How We Use Your Data

We process your personal data for the following purposes:

To process, manage, and deliver your orders
To create and administer customer accounts
To communicate with you regarding orders, returns, or support requests
To send marketing communications (only with your explicit consent)
To analyze site performance and improve user experience
To comply with legal, tax, and regulatory obligations

3. Legal Basis for Processing

We rely on the following legal grounds under GDPR:

Contractual necessity – to fulfil your orders and provide customer service
Legal obligations – such as tax, accounting, and consumer protection laws
Legitimate interest – to improve our website, prevent fraud, and ensure a secure shopping experience
Consent – for newsletters, marketing emails, or optional cookies (you may withdraw your consent at any time)

4. Sharing of Data

We never sell or rent your personal data. Your information may be shared only with:

Payment providers – for secure transaction processing
Courier and logistics partners – to deliver your order
IT, hosting, and technical service providers – to maintain website functionality and security
Authorities or regulators – when required by law

All partners are contractually obligated to comply with GDPR and ensure adequate protection of your data.

5. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this policy.

Order-related information may be stored for up to 8 years to meet legal and accounting requirements
Marketing data is kept until you withdraw your consent
Support and communication records may be kept for a reasonable period for service quality and legal compliance

6. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience:

Essential cookies – required for core functionality (shopping cart, checkout, security)
Analytics cookies – used to analyze traffic and improve site performance
Marketing cookies – used only with your consent to personalize offers and display relevant ads

You may manage or disable cookies at any time through your browser settings. More details can be found in our Cookie Policy (if available).

7. Your GDPR Rights

As a data subject, you have the following rights:

Right of access – obtain confirmation and a copy of your personal data
Right to rectification – correct inaccurate or incomplete data
Right to erasure – request deletion of your data, where legally possible
Right to restriction of processing – limit how your data is used
Right to data portability – receive your data in a structured, machine-readable format
Right to object – object to certain processing, including marketing
Right to withdraw consent – at any time, without affecting the lawfulness of prior processing