Privacy policy

This Privacy Policy explains how Mashly Lab (“Mashly Lab,” “we,” “us,” or “our”) collects, uses, stores, and shares personal information when you visit mashlylab.com, create an account, place an order, contact us, subscribe to our communications, or otherwise interact with our website and services.

By using the website, you acknowledge that your personal information will be handled as described in this Privacy Policy.

Where required by applicable law, Mashly Lab acts as the controller of the personal information described in this policy.

1.2 Information We Collect

We may collect the following categories of personal information.

Information you provide directly

This may include:

Your name.
Email address.
Telephone number.
Billing address.
Delivery address.
Account login information.
Order details.
Product preferences.
Messages sent to customer support.
Reviews, feedback, or other content you submit.
Marketing preferences.
Information provided when requesting a return, refund, or exchange.

Payment information

Payments are processed through third-party payment providers. We generally do not store complete payment-card numbers or security codes. We may receive limited transaction information, such as payment status, payment method, transaction reference, and billing details.

Information collected automatically

When you use the website, we may automatically collect:

IP address.
Device type.
Browser type.
Operating system.
Language settings.
Approximate location derived from your IP address.
Pages visited.
Products viewed.
Referring website.
Date and time of access.
Interaction and shopping-session information.
Cookie and similar technology identifiers.

Information from service providers

We may receive information from companies that help us operate the website, process payments, prevent fraud, deliver orders, provide analytics, manage advertising, or communicate with customers.

1.3 How We Use Personal Information

We may use personal information to:

Operate and maintain the website.
Process, confirm, fulfill, and deliver orders.
Process payments and refunds.
Create and manage customer accounts.
Communicate about orders, deliveries, returns, and customer-service requests.
Detect and prevent fraud, abuse, security incidents, and unauthorized transactions.
Personalize the website and product recommendations.
Measure website performance and customer engagement.
Improve our products, services, content, and customer experience.
Send marketing communications where permitted.
Comply with legal, tax, accounting, and regulatory obligations.
Establish, exercise, or defend legal claims.
Enforce our Terms of Service and other policies.

1.4 Legal Bases for Processing

Where European Economic Area, United Kingdom, or similar data-protection laws apply, we process personal information under one or more of the following legal bases:

Contract: Processing necessary to provide products or services you requested.
Legal obligation: Processing necessary to comply with applicable law.
Legitimate interests: Processing necessary for operating, securing, improving, or promoting our business, where those interests are not overridden by your rights.
Consent: Processing based on your consent, such as certain marketing or non-essential cookies.
Legal claims: Processing necessary to establish, exercise, or defend legal rights.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing that took place before consent was withdrawn.

1.5 How We Share Information

We may share personal information with:

E-commerce platform and website service providers.
Payment processors.
Delivery companies and logistics providers.
Fraud-prevention and security providers.
Customer-support and communication providers.
Analytics providers.
Advertising and marketing providers, subject to applicable consent requirements.
Professional advisers, such as accountants, lawyers, insurers, and auditors.
Government authorities, courts, regulators, or law-enforcement agencies where required.
A buyer, investor, successor, or adviser in connection with a merger, sale, restructuring, financing, or transfer of the business.

Service providers may only use personal information for the services they provide to us, subject to their agreements and applicable law.

1.6 Cookies and Similar Technologies

We may use cookies, pixels, local storage, and similar technologies to:

Keep the website functioning.
Remember user preferences.
Maintain shopping-cart and account sessions.
Prevent fraud and improve security.
Understand website usage.
Measure marketing performance.
Deliver relevant advertising where permitted.

Where required by law, non-essential cookies will be used only after obtaining consent. More information is available in our Cookie Policy.

1.7 Marketing Communications

We may send promotional emails if you subscribe, request updates, or otherwise consent where required.

You may unsubscribe at any time by:

Clicking the unsubscribe link in a marketing email.
Contacting us at Youssef.aarab@gmail.com.

Transactional messages concerning orders, payments, security, or customer-service requests are not promotional communications and may still be sent when necessary.

1.8 Sale or Sharing of Personal Information

Mashly Lab does not sell personal information for monetary payment.

Certain analytics or advertising activities may be considered “sharing” under some privacy laws. Where applicable, you may opt out through available cookie controls, browser-based privacy signals, or by contacting us.

1.9 Data Retention

We retain personal information only for as long as reasonably necessary to:

Fulfill the purposes described in this policy.
Complete orders and provide customer service.
Maintain business and transaction records.
Meet legal, tax, accounting, and fraud-prevention requirements.
Resolve disputes and enforce agreements.

Retention periods may vary according to the type of information and applicable law.

1.10 Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information.

However, no website, electronic transmission, or storage system is completely secure. We cannot guarantee absolute security, and customers are responsible for protecting their account credentials.

1.11 International Data Transfers

Mashly Lab is based in the United States. Personal information may be processed in the United States or other countries where our service providers operate.

Where required, we use legally recognized safeguards for international transfers, such as contractual protections or other approved transfer mechanisms.

1.12 Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

Request access to personal information.
Request a copy of personal information.
Request correction of inaccurate information.
Request deletion of personal information.
Restrict certain processing.
Object to certain processing.
Request data portability.
Withdraw consent.
Opt out of certain targeted advertising, sale, or sharing.
Limit certain uses of sensitive personal information.
Lodge a complaint with a competent data-protection authority.
Receive equal service and pricing when exercising privacy rights.

These rights may be subject to legal exceptions.

To submit a privacy request, email Youssef.aarab@gmail.com with the subject line “Privacy Request.”

We may need to verify your identity before completing a request.

1.13 California Privacy Notice

If Mashly Lab becomes subject to the California Consumer Privacy Act, California residents may have rights to request information about personal information collected, used, disclosed, sold, or shared; request deletion or correction; opt out of sale or sharing; limit certain uses of sensitive information; and avoid discrimination for exercising those rights.

Requests may be sent to Youssef.aarab@gmail.com.

1.14 Children’s Privacy

The website is not directed to children who are not legally permitted to provide personal information or enter transactions in their jurisdiction.

If we learn that personal information was collected from a child without required authorization, we will take reasonable steps to delete it.

1.15 Third-Party Websites

The website may contain links to third-party websites. Mashly Lab is not responsible for the privacy practices, security, or content of third-party services.

Users should review the privacy policy of each third-party service they use.

1.16 Changes to This Privacy Policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes.

The updated policy will be posted on mashlylab.com with a revised effective date.

1.17 Contact

Questions or privacy requests may be sent to:

operated by Mashly Lab llc
Contact: Youssef Aarab
Email: Youssef.aarab@gmail.com
Address: 30 N Gould St Ste R, Sheridan, WY 82801, United States