Withdraw from contract

MasterMind Shop Privacy

mastermind-shop-privacy-public-proposed-20261014-v4

Controller and Shop scope

LEV ZIMBITSKIY, trading as MasterMind, Calle Carmelo Roda, 6, 46025 Valencia, Spain, is controller for the MasterMind Shop processing described here. Contact info@mmindtech.com; telephone +34 962 197 076. Order complaints and device support: support@mmindtech.com. This notice concerns buyer enquiries, orders, payments, shipping, accounting, customer documents, Shop support and selected device-protection administration. It does not cover StayAssist, guest communications, monitoring content or other authenticated-platform processing.

Information processed and its sources

We process necessary buyer name, contact/business details, billing/delivery addresses, buyer status and supplied tax identifiers; product/quantity and selected order-unit coverage choices, retained enquiries, language and exact document/acceptance records; prices, discounts, tax, freight and totals; payment, invoice/refund references and statuses; shipment batches, confirmed actual unit delivery dates and relevant correspondence. Selected protection records include only the unit association, applicable base evidence, coverage dates, individual anniversaries, payment/grace/suspension state, notices, cases and cancellation information needed to administer the purchase. A physical serial is not required before same-order new-hardware purchase. Device-service or ownership claims may require device identity, original purchase/ownership-chain evidence, reported problem and reasonable diagnostics. Most information comes from you or your authorized representative. Stripe supplies relevant payment, tax, Billing and refund results. Necessary tax verification uses positive VIES or equivalent authoritative evidence where applicable. Delivery/service correspondence and manual verification supply actual shipment or case evidence. Necessary access/security records may include connection, request and security-event information. Commerce does not create a second master device registry, import historical platform devices or collect unrelated guest/platform content.

Required information and purchase choices

Fields needed for the relevant purchase or enquiry step are identified when information is collected. Without the details needed to identify the buyer, calculate the applicable amount, process payment, deliver goods or prepare legally required documents, that step cannot be completed. Tax identifiers are needed only where the relevant tax treatment requires them; an identifier alone does not establish an exemption. Optional protection purchases are separate choices. Supplying an order or contact address is not permission for advertising, and this notice does not require a privacy-consent checkbox to buy.

Purchase, fulfilment and selected services: purposes and bases

We use necessary buyer and transaction data to respond to requested enquiries, prepare and perform purchases, verify payment, confirm orders, arrange delivery, provide the applicable documents, administer selected Warranty Extension or StayProtect, handle support and exercise withdrawal, cancellation or refund rights. Where you are the contracting individual, these activities rely on contract performance or requested pre-contract steps under GDPR Article 6(1)(b). Accounting, tax reporting and legally required invoice, credit-note and transaction records rely on the applicable legal obligations under Article 6(1)(c). Only the information relevant to those duties is used. Recurring billing applies only to an expressly selected recurring service; this notice is not acceptance of that service or authority to charge another person.

Business contacts, claims and security: legitimate interests

Where you act for a business rather than contract personally, we use necessary representative contact details under Article 6(1)(f) to communicate with that business and administer its enquiry or order. Necessary security and abuse prevention protect the Shop, payments and records. Relevant claim records support the establishment, exercise or defence of legal claims. These are the legitimate interests relied on; processing must remain necessary and balanced against the person's rights. You may object as explained below. A document-version or acceptance record evidences the actual contract information presented; it is not general data-processing or marketing consent.

Recipients and access

Arsys provides the hosting and mail infrastructure used for the Website and Commerce. Authorised MasterMind personnel handle orders, fulfilment coordination, administration, accounting and support using only records needed for their tasks. Stripe handles payment, transaction tax, refunds and, for selected StayProtect, recurring Billing. Canva is used for the manual accounting-document preparation described below. Zoho Desk handles support email as described below. Necessary records may be disclosed to competent authorities where legally required or to professional advisers for a relevant accounting or legal matter. Commerce has no Zoho CRM relay; this is separate from the support mailbox's Zoho Desk handling. No additional Shop analytics or advertising processing is included.

Stripe payments, tax and recurring Billing

Payment information is entered through Stripe. MasterMind receives transaction references, statuses and related order information needed to reconcile payment, tax, invoices and refunds; do not send card details by email. For selected StayProtect, Stripe processes necessary customer, subscription, first annual payment, per-unit renewal and Billing information. New-hardware payment precedes delivery-based protection; actual unit delivery evidence and anniversaries are used to administer the agreed billing, notifications, cancellation and lawful refunds. These purposes do not prove that an individual subscription has been activated or a charge/refund executed. Depending on the activity, Stripe acts as a processor or independent controller, including processing involving payment partners. Its Privacy Policy at https://stripe.com/privacy and terms at https://stripe.com/legal/dpa describe its processing. Payment validation/provider checks can prevent or delay payment. Contact info@mmindtech.com for review of an outcome. Applicable information, review and challenge rights concerning solely automated decisions with legal or similarly significant effects remain. Necessary VAT verification records are used only for the relevant tax treatment, not advertising.

Email and durable customer documents

MasterMind uses existing mailboxes including info@mmindtech.com and support@mmindtech.com and hosted email infrastructure for purchase correspondence and durable customer documents. Necessary recipient/order details, full applicable terms and invoice/credit-note information support those communications. StayProtect communications include activation, one reminder 30 days before annual renewal, charge/failure/grace/suspension/cancellation notices and any required additional notice. Support mailbox handling involves Zoho Desk as described below; these are not advertising communications. Exact document versions, acceptance, generation/delivery records and selected-unit/date associations support proof of information supplied, contract administration and relevant claims. Withdrawal/cancellation declarations receive timestamped acknowledgements through existing channels. Original contract copies remain immutable; later notices do not replace them. Documents contain only personal information necessary for their purpose and are not public records. Other recipient addresses are limited to a necessary transaction recipient or an instruction you are authorized to give.

Manual Canva invoices and credit notes

The authorised MasterMind administrative team prepares one-time invoices and credit notes manually using Canva and the existing templates, series and numbering. The operator uses the identification, contact, address, tax and transaction details needed for those documents. Card information is not supplied to Canva for this purpose. This process does not create a new accounting system or marketing use. Canva's Privacy Policy at https://www.canva.com/policies/privacy-policy/ describes its provider processing. Request information about the arrangements relevant to your documents from info@mmindtech.com. Stripe Billing documents for selected StayProtect are reconciled with one-time documents so that the same supply is not documented twice as a separate charge.

Shipping, returns and support boundaries

Physical fulfilment uses the recipient's name, delivery address and necessary contact/shipment details. Authorized MasterMind personnel coordinate actual shipment with the carrier and record partial batches and confirmed per-unit delivery dates manually; no carrier API, inventory or ERP is created. Ask info@mmindtech.com which recipient is involved in your shipment. Email to support@mmindtech.com is also handled through Zoho Desk in the configured European data centre. Sender contact details, message, attachments and necessary order/device information can therefore enter a ticket for Shop complaints, Warranty, withdrawal/returns or StayProtect. This is separate from a Commerce-to-Zoho-CRM relay, which does not exist. Supply only issue/return correspondence and reasonable evidence needed to resolve the case; avoid unrelated guest information, unnecessary identity documents and card data. Included Warranty and Extension ownership claims use necessary device identity, original purchase/ownership-chain evidence and original expiry. StayProtect does not automatically transfer: the original payer cancels and the new owner contracts separately after manual eligibility review. Payment methods and personal data are not transferred to the new owner; an email/account change is not another person's recurring-payment authority. Existing-hardware coverage enquiries use contact/manual records rather than a second platform device database.

International processing and safeguards

Use of Arsys hosting and the configured European Zoho Desk data centre does not mean that all processing by the involved providers stays in Spain or the EEA. The linked Stripe and Canva information describes international processing and transfer arrangements. Any transfer to a country outside the EEA must have a lawful basis under the applicable data-protection rules, such as a relevant adequacy decision or appropriate safeguards where required. The fact that a provider publishes transfer terms does not establish which mechanism covers every Shop or support transaction. Contact info@mmindtech.com for the recipient and location information relevant to your order, support case or documents, the applicable transfer mechanism and a copy of the relevant safeguards, with unrelated confidential details protected where necessary. This notice does not promise EU-only storage or identify an additional provider country, certification or executed safeguard that has not been established for your processing.

Retention criteria and security

Enquiry information is retained for the requested enquiry and necessary follow-up. Order, payment, delivery, document-version and acceptance records are retained for performance and verification of the purchase and the applicable legal or claim-related needs. Invoice, credit-note and tax records follow the retention duties applicable to their category and transaction. Selected protection, cancellation and case records are retained for administration of the applicable benefit and relevant claims; a coverage end does not automatically erase records required for a legal duty. Security records are limited to the period justified by protecting systems and payments and investigating relevant incidents. Data no longer needed for a stated purpose is deleted or anonymised, subject to a justified retention duty or claim need. Backup retention and deletion must follow those purposes; deletion of an active record does not imply immediate erasure from every backup. Access is limited according to the relevant task. No universal fixed retention period, lifetime record or absolute security guarantee is created by this notice.

Your rights and complaints

Subject to the applicable conditions, you may request access, correction, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your situation. Where separate consent is used for another activity, you may withdraw it without affecting earlier lawful processing; the necessary Shop activities described here do not rely on a purchase privacy-consent checkbox. Legal retention duties or justified claims may prevent immediate deletion of particular records. Contact info@mmindtech.com or the controller's postal address. MasterMind may request information reasonably needed to verify the requester's identity; do not send unnecessary identification or card data. You may complain to the Spanish Agencia Española de Protección de Datos at https://www.aepd.es/ or another competent supervisory authority, including where you habitually reside or work or where an alleged infringement occurred.

Website policies and notice versions

The Website Privacy Policy at https://mmindtech.com/privacy-policy/, Cookies Policy at https://mmindtech.com/cookies-policy/ and Legal Notice at https://mmindtech.com/legal-notice/ continue to cover their respective Website matters. Website external-service choices are separate from necessary Shop contract and accounting processing and do not authorise guest or platform processing. This notice is supplied at Shop data collection as information, not contractual or marketing consent. Your order records the notice version supplied. A later notice cannot change historical acceptance records or authorise a new processing purpose without the information and legal basis required for that purpose.

Withdrawal and cancellation declarations

The separate withdrawal and cancellation functions do not require login. We record the submitted name, contract or contract-part reference, confirmation email, language and declaration, including cancellation type, reason and requested termination time where supplied, together with the server receipt timestamp and notice versions. These records support exercising your rights, immediate durable acknowledgement and necessary administrative verification under the applicable contract and legal-obligation bases described above. No privacy-consent checkbox is required. Necessary identity details are compared privately with canonical purchase records. Where a match is verified, the original contract's document versions and acceptance evidence are associated with the declaration; the current notices do not replace that contract. Unmatched declarations are retained for manual review and acknowledged without inventing a contract association. The anonymous function does not disclose another person's order, payment or subscription information. Acknowledgements use the existing hosted email channel; relevant declaration records go to authorised MasterMind staff for processing. Retention follows the purpose-specific legal and claim-related criteria above. A receipt is not permission for an automatic refund or subscription change.

Schedule a MasterMind · Tech demo