Privacy Policy

Last updated: June 2026

At Mysha, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information.

Information We Collect

Personal information you provide when placing an order (name, email, shipping address, phone number)
Payment information processed securely through our payment providers
Communication preferences and marketing consent
Browsing data and cookies to improve your shopping experience

How We Use Your Information

To process and fulfill your orders
To communicate with you about your orders and account
To send promotional emails and updates (with your consent)
To improve our website and services
To prevent fraud and ensure security

How We Protect Your Information

We use SSL encryption to protect your data during transmission
Payment information is processed through secure, PCI-compliant providers
We never store your full credit card details on our servers
Access to personal information is restricted to authorized personnel only

Cookies & Tracking

We use essential cookies to enable basic website functionality
Analytics cookies help us understand how visitors use our site
Marketing cookies may be used to deliver relevant advertisements
You can manage cookie preferences through your browser settings

Where We Process Your Data

Mysha is operated from the United Arab Emirates, but your personal data is processed and stored outside the UAE:

Our application and databases are hosted with Fly.io in the Mumbai region (India).
Managed Postgres is provided by Neon, and email is sent via Resend; payments are handled by Stripe.

This means data such as your profile, orders, loyalty balance, and reviews is transferred to and stored in India. We disclose this transfer transparently as the lawful basis for cross-border processing under Article 22 of the UAE Personal Data Protection Law (PDPL), which permits transfer where the data subject is informed of the transfer and its destination. We currently have no UAE-region hosting option at our scale; should one become available, we will reassess.

Your Rights

You have the right to access, update, or delete your personal information
You can opt out of marketing communications at any time
You can request a copy of all data we hold about you
You can request that we delete your account and associated data

Contact

For privacy-related inquiries, please contact us at hello@trueessentialandwellness.com or visit our Contact Us page.