Privacy policy

Last updated: 31 August 2026.

At Mardi éditions we collect the minimum data needed to send you your orders, answer you and keep the brand running. This notice explains which data, why, how long we keep it and how to take back control of it. It also covers our cookie policy.

1. Who is responsible for your data

MAR & DI SRL, trading as Mardi éditions, Rue du Page 15, 1050 Ixelles (Brussels), Belgium, company number 0715.781.212, is the data controller within the meaning of the General Data Protection Regulation (GDPR, Regulation EU 2016/679) and of the Belgian Act of 30 July 2018.

For any question about your data: hello@mardi-editions.com or by post to the address above. We have not appointed a data protection officer, as the nature and volume of our processing do not require one.

2. The data we process

Identity and contact details: surname, first name, delivery and billing addresses, email address, phone number.
Orders: items, sizes, amounts, delivery method, purchase history online and in store, returns and refunds.
Payment: we never see or keep your full card number. Payment is handled by our approved providers, who pass on only the confirmation of the transaction and the last digits of the card.
Customer account: login details, preferences, wishlist, return requests.
Communications: emails and messages exchanged with us, newsletter and back-in-stock alert sign-ups, replies to invitations and events.
Browsing: IP address, device and browser type, pages viewed, products viewed, basket data, through the cookies and trackers described in point 7.
Stores: till receipt, payment method and, if you give them to us, your contact details so we can link a purchase to your account or let you know about a restock.

We collect no sensitive data within the meaning of article 9 GDPR. Any measurements you send us for sizing advice are used for that purpose only.

3. Why we process it, and on what basis

To process and deliver your orders, handle returns, refunds and customer service. Legal basis: performance of the sales contract.
To meet our legal obligations: invoicing, VAT, accounting, the legal guarantee of conformity, consumer law obligations. Legal basis: legal obligation.
To send you our newsletters and invitations. Legal basis: your consent, which you may withdraw at any time. If you are already a customer, we may write to you about similar products on the basis of our legitimate interest, with an unsubscribe link in every message.
To let you know when an item you asked about is back in stock. Legal basis: your consent, limited to that alert.
To improve the site and our collections: traffic and sales statistics, measuring how well our campaigns work, preventing fraud and automated orders. Legal basis: our legitimate interest in running and securing our business, or your consent where non-essential cookies are used.
Online advertising: running our campaigns and building audiences on social media. Legal basis: your consent, collected through the cookie banner.

4. How long we keep it

Order data, invoices and accounting records: 10 years from the close of the financial year, in line with Belgian accounting and tax law.
Customer account: for as long as the account is active, then 3 years after your last purchase or last login.
Newsletter sign-up: until you unsubscribe, then 3 years with no interaction at all (open, click, purchase), after which we delete the profile.
Customer service exchanges: 3 years from the last exchange.
Cookies and trackers: see point 7, with a maximum lifetime of 13 months for cookies set with your consent.

5. Who receives your data

We never sell your data and we rent it to no one. We share it only with the providers that allow us to operate, limited to what they need and under a data processing agreement:

Shopify: e-commerce platform, site hosting, the till system in our stores and customer accounts.
Payment providers: Shopify Payments and the banking institutions handling online payment, as well as the providers of our in-store card terminals.
Sendcloud and our carriers (bpost, DPD and others depending on the destination): label creation, delivery, parcel tracking and returns.
Klaviyo: sending our emails, managing sign-ups and back-in-stock alerts.
Meta (Facebook, Instagram): audience measurement and serving our ads, only if you have accepted the corresponding cookies.
Connected sales channels (Google & YouTube, Pinterest, Shop): publication of our product catalogue. No customer data is passed to them for this.
Our accountants and, where relevant, our legal advisers.
The authorities, where the law requires it.

6. Transfers outside the European Union

Some of our providers are established, or have infrastructure, outside the European Economic Area, notably in Canada and the United States. These transfers are framed by the mechanisms set out in chapter V of the GDPR: an adequacy decision of the European Commission (Canada and, for certified companies, the EU-US Data Privacy Framework) or standard contractual clauses together with additional security measures. A copy of these safeguards can be requested at hello@mardi-editions.com.

7. Cookies and trackers

A cookie is a small file placed on your device when you visit. We use three kinds:

Strictly necessary cookies: they make the site work and remember your basket, your session, your language and your privacy choices. They do not require consent and cannot be switched off.
Audience measurement cookies: they tell us, in aggregate, which pages and products are viewed, so we can improve the site. Set only with your agreement.
Advertising and personalisation cookies: they let us measure how well our campaigns work and show you our pieces on social media. Set only with your agreement.

Your choice is collected on your first visit and you can change it at any time from the cookie management link at the bottom of every page, or by deleting cookies in your browser settings. Refusing non-essential cookies does not prevent you from ordering on the site in any way. Cookies set with your consent have a maximum lifetime of 13 months and your choice is renewed at most every 6 months.

8. Security

The site is fully encrypted (HTTPS). Access to data is limited to the people who need it, protected by individual passwords and two-factor authentication on our main tools. Our providers are selected for their security guarantees. In the event of a data breach likely to result in a high risk to your rights, we will inform you and the Belgian Data Protection Authority within the time limits set by the GDPR.

9. Your rights

You have the following rights at any time:

Access: to know what data we hold about you and obtain a copy of it.
Rectification: to correct inaccurate or incomplete information.
Erasure: to ask for your data to be deleted, except where we are required to keep it (an invoice, for example).
Restriction and objection: to ask for processing to be frozen, or to object to processing based on our legitimate interest, in particular direct marketing.
Portability: to receive the data you have provided to us in a machine-readable format.
Withdrawal of consent at any time, without affecting what was done beforehand.
Post-mortem instructions as to what happens to your data.

Write to us at hello@mardi-editions.com. We reply within one month, extendable by two months for complex requests, and we may ask you for proof of identity in case of reasonable doubt. To unsubscribe from our emails, the link at the bottom of every message is enough.

If our reply does not satisfy you, you may lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, dataprotectionauthority.be, or with the supervisory authority of your country of residence.

10. Minors

Our site is not intended for people under 16 and we do not knowingly collect their data. If you are the parent or guardian of a minor who has sent us data, write to us and we will delete it.

11. Changes

We may update this notice, in particular if we change tools or if the rules change. The version that applies is the one published on this page, with its update date. In the event of a substantial change, we inform the people signed up to our newsletter.