Draft pending legal review. This policy is generated to accurately describe QuazaPacks’ actual technical integrations (listed below) at the time of writing. It is not a substitute for review by qualified legal counsel before being relied on as MAC ENTERPRISE S.R.L.S.’s final, binding privacy notice.
This Privacy Policy explains how MAC ENTERPRISE S.R.L.S. (Via Gaetano Filangieri 48, 80121 Napoli (NA), Italy, VAT 11029991210), operator of QuazaPacks (the “Platform”, “we”, “us”), processes personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian law (D.Lgs. 196/2003 as amended). It should be read together with our Terms of Sale and Cookie Policy.
Data we process
Account data: email address, first name, and password (stored hashed by our authentication provider) when you create an account.
Purchase & balance data: Credits purchases, Pack openings, card pulls, and your resulting Credit and Dashboard balances.
Payment data: processed directly by Stripe, our payment provider; we never receive or store your full card number. We retain transaction references, amounts, and status for accounting and dispute-handling.
Shipping data: postal address and, where relevant, import/customs information, collected only when you request shipment of a physical Item.
Payout data: if you cash out card sell-back value, bank or payout-account details (via Stripe Connect, Airwallex, or PayPal, depending on your country) are collected by that processor to send you funds.
Support communications: anything you send us via the contact form or by email, including your address and message content.
Technical data: see our Cookie Policy for the limited technical/session data collected automatically.
Why we process it
Performing the contract (Art. 6(1)(b) GDPR): creating your account, processing Credits purchases, recording Pack openings and Odds, shipping Items, and handling withdrawals, refunds, and the legal guarantee of conformity.
Legal obligations (Art. 6(1)(c) GDPR): invoicing, tax and accounting records, and responding to lawful requests from authorities.
Legitimate interests (Art. 6(1)(f) GDPR): fraud and abuse prevention (Section 14.3 of our Terms of Sale), securing the Platform, and improving reliability.
Consent (Art. 6(1)(a) GDPR): where we ask for it explicitly, such as marketing emails, which you can withdraw at any time.
Who we share it with
We share personal data only with the service providers necessary to run the Platform, each acting as our processor or as an independent controller for their own service:
Stripe: payment processing and, for sellers, payout via Stripe Connect.
Supabase: account authentication and database hosting for your Credits, Dashboard, and order records.
Vercel: hosting and content delivery for the Platform itself.
Airwallex / PayPal: only if you request a cash payout of sell-back value, and only for that transaction.
Google Fonts: typefaces are currently loaded from Google’s font CDN, which involves your browser making a direct request to Google and transmitting your IP address in the process.
Carriers and logistics partners, solely to ship physical Items to you.
We do not sell personal data, and we do not use third-party advertising trackers.
International transfers
Some of the providers listed above may process data on servers located outside the European Economic Area. Where this occurs, we rely on the safeguards those providers implement (such as the European Commission’s Standard Contractual Clauses or an applicable adequacy decision) to ensure your data continues to receive GDPR-level protection.
How long we keep it
Account and order data is kept for as long as your account is active, plus the period required by Italian tax and accounting law (generally up to 10 years for invoicing records). Support correspondence is kept for as long as reasonably necessary to resolve your request and defend against related claims. You can request earlier deletion under “Your rights” below, subject to our legal retention obligations.
Your rights
Under the GDPR, you can ask us to:
Access the personal data we hold about you;
Rectify inaccurate or incomplete data;
Erase your data, where we are not required to keep it (Art. 17 GDPR);
Restrict or object to certain processing;
Port your data to another provider in a structured, machine-readable format;
Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email quazacards0@gmail.com. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la Protezione dei Dati Personali, garanteprivacy.it), or with the supervisory authority in your own EU/EEA country of residence.
Contact
MAC ENTERPRISE S.R.L.S., Via Gaetano Filangieri 48, 80121 Napoli (NA), Italy Email: quazacards0@gmail.com · PEC: macenterprisesrls@legalmail.it