Last updated: 1 July 2025
1. Who we are
Soapstoris Maldives (“Soapstoris,” “we,” “us,” “our”) is a small, home-grown soap and skincare venture run as an Authorized Distributor for Soapstoris Sri Lanka in the Republic of Maldives.
-
Website: www.soapstorismv.com
-
Email: hello@soapstorismv.com
-
Phone / WhatsApp: +9607215799
2. Why this policy matters
Let’s keep it real: if you place an order, we have to know where to ship and how to reach you. That’s personal data. This Policy explains exactly what we collect, why, and how you can say “delete it.”
3. Data we collect & how
| Category | Examples | How we get it |
|---|---|---|
| Identity Data | name, optional date of birth | checkout form |
| Contact Data | delivery address, email, phone | checkout; account sign-up |
| Transaction Data | order history, payment status | our store backend |
| Technical Data | IP address, browser type, device ID | cookies, server logs |
| Marketing Data | newsletter opt-in, review photos | explicit consent boxes |
| Support Content | emails, WhatsApp chats | when you contact us |
We do NOT see full card numbers. Payments go through [BML Payment Gateway / Bank Transfer]—they give us only a token and “pass/fail” status.
4. Why we use your data (legal bases)
| Purpose | Legal basis (Maldives + best-practice) |
|---|---|
| Process & deliver your order | Contract – you asked us to ship soap |
| Customer service & returns | Contract / Legitimate Interest |
| Marketing emails & SMS | Consent (you tick a box) |
| Analytics & site improvement | Legitimate Interest (under 1st-party cookies) |
| Compliance with tax & consumer rules | Legal Obligation (Consumer Protection Act 12/2020) |
When the new Maldivian PDPA takes effect, we’ll map these purposes to its specific bases and update this page.
5. Cookies & similar tech
We use:
-
Essential cookies – cart, login session (can’t opt out)
-
Analytics cookies – Google Analytics (IP anonymised)
-
Marketing pixels – Facebook/Meta only if you accept Marketing cookies
Set your preferences anytime via the Cookie Settings link in our footer or through your browser’s controls.
6. Who we share data with
| Recipient | Why | Location |
|---|---|---|
| Payment processors (BML Gateway) | card transactions | Maldives / EU-based |
| Delivery partners (In house) | get parcels to you | Maldives |
| Cloud hosting (Hostinger / AWS) | run our website | Servers in [Singapore] |
| Professional advisers | accounting, legal | Maldives |
| Regulators & law enforcement | if legally required | Maldives |
We do not sell or rent your details—ever.
7. Security
-
Always-on HTTPS
-
Off-site, encrypted backups
-
Quarterly vulnerability scans
No security is perfect, but we patch fast and log every access attempt.
8. Data retention
| Data | How long we keep it |
|---|---|
| Order records & invoices | 6 years (tax law) |
| Marketing consent logs | until you unsubscribe + 2 years |
| Support emails | 2 years after last interaction |
| Analytics data | 14 months (Google Analytics default) |
We nuke or anonymise data once the clock runs out.
9. Your rights (effective now)
Even before the draft PDPA becomes law, we voluntarily honour these GDPR-style rights:
-
Access – get a copy of the data we hold.
-
Correction – fix inaccurate info.
-
Erasure – “forget me” unless we must keep it for tax/legal reasons.
-
Withdraw consent – marketing opt-out links in every email.
-
Portability – CSV export of your order history.
-
Complain – email us first; if we blow you off, escalate to the Consumer Ombudsman’s Office.
10. Children
We don’t market to children. If you’re under 18, please have a parent order for you. If we learn we’ve collected data from a minor, we’ll erase it.
11. Links to other sites
Clicking outbound links (e.g., Instagram) may send you to sites with their own privacy rules. We’re not responsible once you leave Soapstoris.
12. Changes to this Policy
We’ll post any change here and update the “Last updated” date. If changes are material, we do not send emails out to users.
13. Contact us
Questions or data-rights requests?
-
Email: hello@soapstorismv.com
-
Subject line: “Privacy Request – [Your Name]”
-
We aim to reply within 5 working days.