Last updated: 15 August 2026
This Privacy Policy explains how EBC Commerce, trading under the commercial name mellowsheets, collects, uses, discloses and protects personal information when you visit, use our services or make a purchase from mellowsheets.com (the “Site”).
For the purposes of applicable data protection law, including the General Data Protection Regulation (“GDPR”), EBC Commerce is the Data Controller responsible for the processing described in this Privacy Policy.
ARTICLE 1 – IDENTITY OF THE DATA CONTROLLER
The Data Controller is:
EBC Commerce
Trading as: mellowsheets
Flight Forum 40
5657 DB Eindhoven
The Netherlands
Chamber of Commerce (KvK): 42080863
VAT ID: NL005479844B60
Email: mellowsheetseurope@gmail.com
ARTICLE 2 – PERSONAL DATA WE COLLECT
Depending on how you interact with mellowsheets, we may collect the following categories of personal information.
2.1 Order and Customer Information
When you place an order or otherwise interact with our store, we may collect information including:
-
your first and last name;
-
billing address;
-
shipping address;
-
email address;
-
telephone number;
-
order details;
-
purchased products;
-
delivery information; and
-
information necessary to process returns, refunds or warranty requests.
2.2 Payment Information
Payments are processed through third-party payment providers and payment services used by our Shopify store.
mellowsheets does not ordinarily receive or store your complete payment card number.
We may receive limited information relating to your payment, such as:
-
payment status;
-
transaction identifier;
-
payment method;
-
billing information; and
-
information required to prevent or investigate fraud.
Payment providers process payment information according to their own privacy and security obligations.
2.3 Device and Usage Information
When you visit our Site, certain information may be collected automatically, including:
-
IP address;
-
browser type;
-
device type;
-
operating system;
-
approximate location derived from your IP address;
-
time zone;
-
pages viewed;
-
referring website or source;
-
interactions with the Site;
-
cookie identifiers; and
-
similar technical information.
2.4 Customer Service Information
When you contact us by email, chat, contact form or another customer service channel, we process the information you provide in connection with your enquiry.
This may include correspondence, order information and photographs or videos voluntarily submitted in connection with a product complaint.
2.5 Marketing Information
Where permitted by applicable law, we may process information concerning:
-
newsletter subscriptions;
-
marketing preferences;
-
interactions with marketing emails;
-
advertising interactions;
-
browsing behaviour; and
-
consent or opt-out status.
ARTICLE 3 – HOW AND WHY WE USE PERSONAL DATA
We process personal information only where we have an appropriate legal basis under applicable data protection law.
3.1 Performance of a Contract
We process personal information where necessary to:
-
accept and process your order;
-
process payments;
-
deliver products;
-
provide order updates;
-
handle returns and refunds;
-
provide customer service; and
-
fulfil our contractual obligations to you.
3.2 Legal Obligations
We may process and retain personal information where necessary to comply with legal obligations, including:
-
tax requirements;
-
accounting requirements;
-
record-keeping obligations;
-
fraud prevention obligations; and
-
lawful requests from authorities.
3.3 Legitimate Interests
Where permitted by law, we may process information based on our legitimate interests, including:
-
securing our website and systems;
-
detecting and preventing fraud;
-
protecting our legal rights;
-
improving our store and services;
-
analysing the performance of our website; and
-
maintaining efficient business operations.
Where we rely on legitimate interests, we consider whether those interests are overridden by your rights and freedoms.
3.4 Consent
Where legally required, we rely on your consent for activities including:
-
email marketing;
-
SMS marketing;
-
non-essential cookies;
-
advertising cookies;
-
tracking technologies; and
-
certain forms of personalised advertising.
You may withdraw your consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
ARTICLE 4 – HOW WE SHARE PERSONAL DATA
We may share personal information with third parties where necessary to operate mellowsheets and provide our services.
4.1 Shopify
Our online store is hosted and supported by Shopify.
Shopify processes personal information on our behalf and, in certain circumstances, may process information for its own purposes in accordance with its applicable terms and privacy documentation.
Personal information processed through Shopify may be transferred and processed internationally.
4.2 Payment Providers
We share information required to process transactions with payment providers available through our store.
The specific payment provider used may depend on your location and chosen payment method.
4.3 Shipping, Fulfilment and Logistics Providers
We may share information including your:
-
name;
-
address;
-
telephone number;
-
email address;
-
order contents; and
-
other necessary delivery information
with warehouses, fulfilment providers, shipping companies, customs service providers and international logistics partners.
Our logistics and fulfilment partners may be located outside the European Economic Area, including in Asia.
We only provide information reasonably necessary to fulfil and deliver your order.
4.4 Marketing and Advertising Providers
Depending on which services are enabled on our Site, we may use third-party marketing, analytics and advertising platforms such as:
-
Meta;
-
Google;
-
TikTok;
-
Klaviyo; and
-
similar service providers.
These providers may receive or collect information through cookies, pixels and similar technologies where permitted by applicable law.
4.5 Professional and Legal Service Providers
Where necessary, personal information may also be disclosed to parties such as:
-
accountants;
-
legal advisers;
-
insurers;
-
fraud prevention providers;
-
IT and security providers; and
-
government or law enforcement authorities where legally required.
ARTICLE 5 – INTERNATIONAL DATA TRANSFERS
Because mellowsheets uses international service providers, fulfilment partners and technology platforms, personal information may be transferred outside the Netherlands and the European Economic Area.
Where personal information protected by the GDPR is transferred to a country outside the EEA, we use or rely upon an appropriate transfer mechanism where required.
Depending on the circumstances, these mechanisms may include:
-
an adequacy decision issued by the European Commission;
-
Standard Contractual Clauses approved by the European Commission;
-
contractual safeguards;
-
other recognised transfer mechanisms; or
-
another lawful basis permitted under applicable data protection legislation.
Where Standard Contractual Clauses are used, they are intended to provide contractual safeguards for personal information transferred internationally.
ARTICLE 6 – COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar technologies to operate and improve our Site.
Cookies may be used for purposes including:
-
keeping the shopping cart functional;
-
remembering preferences;
-
maintaining website security;
-
measuring website performance;
-
analytics;
-
marketing attribution; and
-
personalised advertising.
6.1 Essential Cookies
Some cookies are necessary for the Site to function and may be used without consent where permitted by law.
6.2 Analytics and Marketing Cookies
Where consent is legally required, analytics, advertising and other non-essential tracking technologies will only be activated after you have provided the required consent.
You can change or withdraw your cookie choices through the cookie settings made available on our Site.
You may also control certain cookies through your browser, although disabling essential cookies may affect Site functionality.
ARTICLE 7 – MARKETING COMMUNICATIONS
7.1 Email Marketing
Where you have subscribed to marketing communications or where another lawful basis applies, we may send emails concerning products, promotions, offers and mellowsheets updates.
You can unsubscribe at any time by using the unsubscribe option in our marketing emails.
7.2 SMS Marketing
Where mellowsheets offers SMS marketing, promotional SMS messages will only be sent where we have the necessary permission under applicable law.
You can withdraw your consent using the unsubscribe method provided in the relevant messages.
Transactional messages relating to your order may still be sent where necessary to perform our contract with you.
ARTICLE 8 – PERSONALISED ADVERTISING AND PROFILING
Where enabled and legally permitted, mellowsheets and its advertising partners may use information about your interactions with our Site to personalise marketing.
For example, advertising platforms may use information concerning products viewed, pages visited or actions taken on the Site to determine advertisements that may be more relevant to you.
Where applicable law requires consent for this processing, personalised advertising will only take place after the necessary consent has been obtained.
We do not use automated decision-making that produces legal effects or similarly significant effects on you unless permitted under applicable law and appropriate safeguards are provided.
ARTICLE 9 – DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable legal obligations.
Retention periods may vary depending on the category of information.
9.1 Order and Transaction Records
Order, invoice and transaction records may be retained for the period required by applicable tax, accounting and record-keeping laws.
Certain information may also be retained where necessary for:
-
warranty claims;
-
disputes;
-
chargebacks;
-
fraud prevention; or
-
establishment, exercise or defence of legal claims.
9.2 Customer Service Information
Customer service correspondence is retained only for as long as reasonably necessary to resolve the enquiry and protect legitimate business or legal interests.
9.3 Marketing Information
Marketing information may be retained until:
-
you unsubscribe;
-
you withdraw your consent;
-
you object to relevant processing; or
-
the information is no longer necessary for the marketing purpose,
subject to limited records we may retain to ensure that your opt-out preference continues to be respected.
ARTICLE 10 – YOUR PRIVACY RIGHTS
Depending on where you live and the law applicable to you, you may have certain rights relating to your personal information.
10.1 European Union and EEA
Under the GDPR, qualifying individuals may have the right to:
-
request access to their personal information;
-
correct inaccurate personal information;
-
request deletion of personal information;
-
request restriction of processing;
-
object to certain processing;
-
receive certain personal information in a portable format;
-
withdraw consent at any time where processing is based on consent; and
-
lodge a complaint with a competent data protection authority.
These rights may be subject to statutory requirements and exceptions.
10.2 Netherlands
Because EBC Commerce is established in the Netherlands, you may lodge a complaint concerning our processing of personal information with the Autoriteit Persoonsgegevens, where applicable.
We encourage you to contact us first so that we have an opportunity to address your concern.
10.3 United Kingdom
Individuals in the United Kingdom retain the applicable privacy rights available under UK data protection legislation.
10.4 Other Jurisdictions
Consumers in other jurisdictions may have additional rights under applicable privacy legislation.
Where such laws apply to mellowsheets, we will process qualifying requests in accordance with those requirements.
ARTICLE 11 – PRIVACY REQUESTS
To exercise an applicable privacy right, please contact:
[SUPPORT EMAIL]
Please clearly explain your request.
We may request information reasonably necessary to confirm your identity before fulfilling a request where required or permitted by law.
We will respond within the timeframe required by applicable legislation.
ARTICLE 12 – CHILDREN'S PRIVACY
Our Site and products are not specifically directed at children.
We do not knowingly seek to collect personal information from children in circumstances where parental consent or another legal basis would be required.
If you believe a child has provided personal information to us unlawfully, please contact us so that we can investigate the matter.
ARTICLE 13 – SECURITY
We use reasonable technical and organisational measures designed to protect personal information against:
-
unauthorised access;
-
disclosure;
-
alteration;
-
accidental loss; and
-
unlawful destruction.
However, no online transmission or storage system can be guaranteed to be completely secure.
ARTICLE 14 – THIRD-PARTY WEBSITES
Our Site may contain links to websites or services operated by third parties.
mellowsheets is not responsible for the privacy practices of independent third parties.
We encourage you to review the privacy policies of external websites before providing personal information to them.
ARTICLE 15 – CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in:
-
our business practices;
-
technologies;
-
service providers;
-
legal requirements; or
-
regulatory requirements.
The latest version will be published on the Site together with the applicable “Last updated” date.
Where required by law, we will provide additional notice of material changes.
ARTICLE 16 – CONTACT
For privacy questions, requests or complaints, please contact:
EBC Commerce
Trading as: mellowsheets
Flight Forum 40
5657 DB Eindhoven
The Netherlands
Chamber of Commerce (KvK): 42080863
VAT ID: NL005479844B60
Email: mellowsheetseurope@gmail.com