Privacy Policy

Last updated: 4 June 2026

This privacy policy describes how TYKA LIMITED (“we”, “us”, “our”), operating the brand Style Maha, collects, uses, and protects your personal data when you visit or place an order on stylemaha.com. It complies with the EU General Data Protection Regulation (GDPR) for customers in the European Union and with the applicable data protection law.

1. Data Controller

The controller of the data collected via the site is:

2. Personal Data Collected

We collect the following categories of data:

2.1 Data you provide directly

•     Identity and contact: title, first and last name, email address, phone number;

•     Delivery and billing address: address, postal code, city, country;

•     Order data: items, amount, order history;

•     Payment data: handled directly by our payment provider (Shopify Payments / Stripe) — we never store your full card number;

•     Correspondence: messages exchanged with customer service.

2.2 Data collected automatically

•     Browsing data: IP address, browser type and version, operating system, pages viewed, visit duration, referring source;

•     Cookies and trackers: see our Cookie Policy for details.

3. Purposes and Legal Bases of Processing

Purpose	Legal basis	Retention period
Processing your order (payment, delivery, after-sales)	Performance of the contract	3 years after the end of the commercial relationship
Accounting and tax obligations (invoicing)	Legal obligation	As required by applicable law
Management of the customer account	Performance of the contract	Until deletion of the account by the customer
Sending marketing emails (newsletter, offers)	Consent (opt-in)	Until withdrawal of consent
Anonymised audience measurement and statistics	Legitimate interest / Consent	13 months maximum
Fraud prevention	Legitimate interest	Period necessary for the purpose
Responding to contact requests	Legitimate interest	3 years from the last contact

4. Recipients of the Data

Your data is never sold. It may be communicated to:

•     our sub-processors necessary for the provision of the service: Shopify Inc. (store hosting), Stripe / Shopify Payments (payment processing), our carriers (delivery), and email service providers;

•     administrative or judicial authorities where required by law.

5. Transfers of Data Outside the EU

Some of our sub-processors (in particular Shopify Inc.) may process your data outside the European Union, notably in the United States, Canada, Australia, or Hong Kong. These transfers are governed by the European Commission’s Standard Contractual Clauses or other appropriate safeguards ensuring a level of protection essentially equivalent to that provided by the GDPR.

6. Security

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure, or modification: TLS / HTTPS encryption across the site, secure Shopify hosting, access limited to authorised personnel, regular backups, and access logging.

7. Your Rights

In accordance with Articles 15 to 22 of the GDPR and the applicable data protection law, you have the following rights over your data at any time:

•     right of access to your data;

•     right to rectification of inaccurate or incomplete data;

•     right to erasure under the conditions provided by law;

•     right to restriction of processing;

•     right to portability of your data in a structured, readable format;

•     right to object, in particular to prospecting based on legitimate interest;

•     right to withdraw your consent at any time for processing that depends on it;

•     right to define directives concerning the fate of your data after your death.

To exercise your rights, contact us at info@stylemaha.com, attaching proof of identity if necessary. We will respond within the time limit provided by law.

8. Complaint to a Supervisory Authority

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the competent data protection supervisory authority in your country of residence. For customers in the European Union, this is the data protection authority of your member state.

9. Cookies

The use of cookies and trackers is detailed in our Cookie Policy. You can change your preferences at any time via the consent banner present on the site.

10. Minors

The site is intended for adult customers. We do not knowingly collect personal data from minors under 16 years of age. If such data comes to our attention, it will be deleted without delay.

11. Changes to This Policy

We may amend this policy to adapt it to legal, technical, or commercial developments. The date of the last update appears at the top of this page. In the event of a substantial change, we will inform you by email or by a notice visible on the site.

12. Contact