Last updated: 12 September 2026
Data controller
The data controller is CAPITAL SMART INVESTMENTS - FZCO, operator of the MAYA Active brand, with registered address at DSO – IFZA, IFZA Property, Dubai Silicon Oasis, Dubai, United Arab Emirates.
Email for privacy matters and exercising rights: support@mayaactiveofficial.com
Representative in the European Union: [PENDING CONFIRMATION WITH THE ADVISER UNDER ARTICLE 27 GDPR]
Data processed
Depending on your relationship with the store, we may process identification and contact data, billing and shipping addresses, account information, orders, returns, communications, preferences, marketing consent, technical device data, IP address, browsing data, cookies and information needed to prevent fraud. Full payment details are normally processed by the payment provider and should not be accessible to MAYA Active.
Purposes and legal bases
- Managing accounts, carts, orders, payments, deliveries, returns and after-sales support: performance of the contract and pre-contractual steps.
- Complying with accounting, tax, consumer, security and authority requirements: legal obligation.
- Protecting the store, preventing fraud, keeping minimum records and improving the service: legitimate interests balanced against users' rights.
- Sending marketing communications and using non-essential cookies: consent, which may be withdrawn at any time.
Failure to provide the data needed to process an order may prevent us from managing and delivering it.
Recipients
We may disclose data, or allow access to it, to Shopify as the commerce platform, the payment provider that is activated, transport and logistics companies, authorised technology, hosting, security, customer-service, marketing and analytics providers, and professional advisers. Data may also be disclosed when required by law or by a competent authority.
Each provider will process only the data needed for its role and under the applicable contractual or legal obligations. Shopify may perform certain processing as an independent controller under its own consumer privacy policy.
International transfers
The controller is established in the United Arab Emirates and some providers may operate outside the European Economic Area. Where required, transfers will be based on adequacy decisions, standard contractual clauses or other safeguards recognised by applicable law. You may request information about these safeguards through the privacy channel.
Retention
Data will be kept for as long as necessary to provide the service, maintain the account, handle returns, guarantees and complaints, and comply with statutory retention and limitation periods. When processing is based on consent, data will be kept until consent is withdrawn, without prejudice to retaining evidence of consent or opt-out for the period needed to address potential liabilities.
Rights
Where applicable, you may request access, rectification, erasure, restriction, objection and portability, and withdraw consent without affecting prior processing. You may also lodge a complaint with the competent data-protection authority; in Spain, the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
To exercise your rights, use support@mayaactiveofficial.com or write to the registered office stated above. We may request reasonable information to verify your identity and protect the data.
Children
The store is not specifically directed at children and does not intend knowingly to collect their data without the required authorisation. If you believe a child has improperly provided us with data, please contact us.
Cookies and similar technologies
We use cookies necessary for operation, security, cart, checkout and preferences. Non-essential personalisation, analytics or advertising cookies will be used only in accordance with the choice made in the banner when consent is required.
The banner presents Accept, Reject and Manage preferences at the same level. You can change your choice from the privacy-preferences link available in the store. Blocking necessary cookies may prevent essential functions.
Changes
We may update this policy to reflect operational, technological or legal changes. We will publish the current version and its update date.