Privacy Policy

Last updated: 22 September 2026

Your trust matters to us as much as the quality of our products. This Privacy Policy explains what personal data we collect when you visit monsera.eu or shop with us, why we collect it, how we protect it and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The controller of your personal data is Monsera, registered with the Netherlands Chamber of Commerce (KvK) under number 97175625, De groene voorwaarts 377, 7325 AT Apeldoorn, the Netherlands.

For any privacy question or request, contact us at infomonsera@gmail.com.

2. What we collect and why

When you place an order

Name, shipping and billing address, email address, phone number (optional), order details and payment status. We use this to process, ship and support your order, to send order and shipping updates, and to meet our legal accounting obligations.
Legal basis: performance of a contract and legal obligation.

When you create an account

Your contact details, addresses and order history, so you can manage your orders and check out faster.
Legal basis: performance of a contract.

When you join our newsletter or waitlist

Your email address and your preferences, so we can send you news about launches, rituals and offers. You can unsubscribe at any time via the link in every email.
Legal basis: consent.

When you contact us

Your name, email address and the content of your message, so we can help you.
Legal basis: legitimate interest in providing good customer service, or performance of a contract.

When you browse our website

Technical data such as your IP address, device and browser type, pages viewed and interactions, collected through cookies and similar technologies. Strictly necessary cookies keep the shop working (for example your cart). Analytics and marketing cookies are only placed with your consent.
Legal basis: legitimate interest (necessary cookies, security and fraud prevention) and consent (analytics and marketing).

We never sell your personal data.

3. Who we share your data with

We only share data with trusted partners who need it to provide their service to us, under agreements that oblige them to protect it:

  • Shopify — our e-commerce platform, which hosts our shop and processes order data;
  • Payment providers — to process your payment securely (we never see your full card details);
  • Fulfilment partners — including CJ Dropshipping, which prepares and ships your order;
  • Carriers and postal services — to deliver your parcel and provide tracking;
  • Email and marketing tools — only if you subscribed to our newsletter;
  • Analytics and advertising partners — only if you consented to the relevant cookies;
  • Our accountant and authorities — where required by law.

4. International transfers

Some of our partners process data outside the European Economic Area — for example Shopify (Canada and the United States) and our fulfilment partner (China). Where this happens, we make sure appropriate safeguards are in place, such as an adequacy decision of the European Commission or the European Commission's Standard Contractual Clauses.

5. How long we keep your data

  • Order and invoice data: 7 years, as required by Dutch tax law.
  • Account data: until you delete your account or ask us to.
  • Newsletter data: until you unsubscribe.
  • Customer service messages: up to 2 years after your last contact.
  • Cookies: as described in the cookie banner, and never longer than necessary.

6. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased (“right to be forgotten”), unless we are legally required to keep it;
  • restrict or object to certain processing, including direct marketing;
  • receive your data in a portable, machine-readable format;
  • withdraw your consent at any time, without affecting processing carried out before.

To exercise any of these rights, email infomonsera@gmail.com. We will respond within one month. We may ask you to confirm your identity before we act on a request.

You also have the right to lodge a complaint with a supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the authority in your country of residence.

7. Security

We use appropriate technical and organisational measures to protect your data, including encrypted (HTTPS) connections, secure payment processing and restricted access to customer data.

8. Children

Our shop is not intended for children under 16. We do not knowingly collect personal data from children under 16 without the consent of a parent or guardian. If you believe we have, please contact us and we will delete it.

9. Automated decision-making

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our payment providers may use automated fraud checks to protect you and us.

10. Changes to this policy

We may update this policy from time to time. The latest version is always published on this page, with the date of the last update at the top.

11. Contact

Questions about your privacy? Write to infomonsera@gmail.com — we're happy to help.