Privacy policy
Last updated: 24 October 2026.
This policy explains how MJ Nutrition uses personal information when you visit our online shop, buy products, contact us or interact with our marketing.
1. Who is responsible and how to contact us
MJ Nutrition is operated by HW GAMING SOLUTIONS LTD, the controller of personal information used for our retail business.
28 Oktovriou 261, View Point Tower3035 Limassol, Cyprus
Company registration: HE436806
VAT number: CY10436806Q
Email: support@mjnutritioncy.com
Telephone: +357 96 298994
2. Information we use
- Purchase and account information: your name, contact details, billing and delivery addresses, selected products, order history, payment and refund status, delivery information, and account sign-in information.
- Communications: enquiries, messages, return or withdrawal requests, complaints and information you provide to help us resolve them.
- Technical and usage information: IP address, device/browser information, pages and products viewed, shopping-cart activity, referring links and cookie or similar identifiers, subject to the choices and purposes explained below.
- Marketing choices and interactions: your subscription and consent choices, responses to communications, and interactions you choose to have with our social pages or advertisements.
We receive information from you, from your device through the shop, and from service providers involved in payments, delivery and the operation of the shop. Information necessary to process, pay for or deliver an order is required for that service; without it we may be unable to complete your purchase. Optional marketing consent is not a condition of buying.
3. Purposes and legal bases
- Orders and customer service: to handle enquiries before a purchase, process orders and payments, deliver products, manage returns and refunds, and communicate about your purchase. We rely on taking steps at your request or performing our contract with you.
- Legal obligations: to maintain required accounting/tax records, meet consumer and product-safety duties, and respond to legally binding requests.
- Security, administration and claims: to protect the shop and customers, investigate fraud or misuse, keep business records, manage ordinary correspondence, and establish or defend legal claims. We rely on our legitimate interests in operating a secure, reliable business and protecting rights, balanced against your rights.
- Optional marketing and tracking: to send marketing you subscribe to, or use optional analytics, advertising and personalisation technologies where you consent. You can withdraw consent at any time. Withdrawing it does not make earlier lawful processing unlawful.
Payment and platform providers may use automated tools for security, fraud detection or personalisation under their own notices. If you have concerns about an order or payment decision, contact us. Where the law gives you rights concerning solely automated decisions with legal or similarly significant effects, you can request the applicable safeguards, including human intervention and the opportunity to contest the decision.
4. Shopify, payments and other recipients
Our shop runs on Shopify. Shopify supplies the store platform, checkout, account and related services. Payments are processed through Shopify Payments and the payment method you select at checkout. Relevant providers process the information needed for payment, fraud prevention and their legal obligations.
For fulfilment, delivery and returns, we share the necessary recipient, contact, address and order information with Cyprus Global Logistic and the couriers handling your parcel.
Access may also be provided, as necessary for their work, to authorised personnel and service providers supporting store administration, communications, technical maintenance, accounting or professional advice. We may disclose information to competent authorities or other parties when required by law or necessary to establish, exercise or defend legal claims. Providers may act on our instructions or, for their own regulated services, as independent controllers.
Shopify Network Intelligence is enabled for our shop. Shopify collects and processes information from visits and purchases and combines it with information from interactions with other merchants and Shopify to provide Enhanced Services, including product improvement, personalisation, analytics and advertising targeting. Shopify also uses this information for its own purposes described in its Consumer Privacy Policy, rather than acting only on our instructions. Information is shared with Shopify and the service providers involved in these services, which may operate in other countries.
Our Shopify cookie banner is enabled for Cyprus. You can use the banner and available privacy preferences to give, refuse or withdraw consent for optional tracking and related advertising. Shopify explains how these choices apply to Network Intelligence. You can also use Shopify's privacy portal to exercise applicable rights, withdraw consent or object to its processing for Enhanced Services, and request deletion. Contact us about information handled for your MJ Nutrition purchase.
5. Cookies, analytics and advertising choices
The shop uses cookies and similar technologies for functions such as security, shopping carts, checkout, sign-in and remembering your choices. Technologies strictly necessary for a service you request do not require optional-cookie consent.
Optional analytics can help measure how the shop is used; optional marketing and personalisation can help assess campaigns and present relevant content or advertising. Where consent is required, these purposes require your choice, rather than being authorised merely by visiting the shop or accepting our terms. Use the shop's cookie banner or privacy preferences, where displayed, to make or change your choices. You can also control cookies in your browser; blocking necessary cookies may affect shopping or sign-in. For Shopify technologies and their purposes, see Shopify's Cookie Policy.
Meta website advertising and purchase measurement. With your consent to optional analytics and marketing, we use the Meta Pixel and Conversions API through Shopify's official Facebook & Instagram integration. These tools help measure advertising performance, understand which campaigns lead to purchases, and provide relevant advertising on Facebook and Instagram. The Pixel sends information from your browser; Conversions API sends purchase-event information directly from Shopify's servers to Meta.
The information shared can include pages and products viewed, searches, cart and checkout activity, completed purchases and order values, and related technical or cookie identifiers. When available, your name, location, email address and telephone number can also be shared for advanced matching, which helps Meta associate store activity with accounts on its services. Meta explains its processing in its Privacy Policy.
You can accept, refuse or withdraw consent for these optional purposes through our cookie banner or available privacy preferences. Server-to-server sharing is also subject to the shop's privacy and consent settings. Buying from us does not require consent to optional marketing tracking. You can also manage advertising preferences in your Meta account; these are separate from your shop cookie choices.
MJ Nutrition also uses Instagram and Meta advertising. If you interact with our pages or advertisements, Meta processes information under its Privacy Policy; we may receive messages, interactions and campaign-performance information. You can manage relevant advertising choices in your Meta account. Interacting with a social service is separate from buying from our shop.
You can unsubscribe from marketing using the link in a marketing email or by contacting us. This does not stop necessary messages about orders, payments, safety, returns or your privacy requests.
6. International processing
Some service providers operate internationally, so information may be processed outside Cyprus or the European Economic Area. Shopify describes its international processing and safeguards in its privacy notice and Data Processing Addendum, including approved binding corporate rules and, where applicable, standard contractual clauses. Where we arrange a restricted transfer, we must use an applicable lawful transfer mechanism, such as an adequacy decision or appropriate safeguards. Contact us for information about safeguards relevant to your data and how to obtain a copy.
7. How long information is kept
We keep information for the purposes described in this policy, taking account of the order or account relationship, delivery and return issues, statutory accounting and tax duties, product-safety responsibilities, applicable claim periods and any unresolved dispute. Support correspondence is retained according to the enquiry and any related obligations or claim. Marketing choices are kept while needed to honour your preferences; after an opt-out, a limited suppression record may be retained to prevent further marketing.
We do not keep identifiable information longer than necessary for those purposes. Information is deleted or anonymised when no longer needed, subject to applicable legal requirements. A request to withdraw marketing consent does not require deletion of records we must retain for another lawful purpose.
8. Your rights
Subject to the conditions in data-protection law, you can request access to your information, correction, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests, and object at any time to direct marketing, including related profiling. You can withdraw consent without affecting earlier lawful processing.
Send requests to support@mjnutritioncy.com. We may request information reasonably necessary to confirm your identity. We respond without undue delay and normally within one month. Where a lawful extension is needed because of complexity or the number of requests, we will explain it within that month. Rights are not absolute; for example, a legal retention duty can limit erasure.
You may complain to the Cyprus Commissioner for Personal Data Protection, or another competent supervisory authority, without first complaining to us.
9. Security and changes
We use appropriate technical and organisational measures to protect information. No internet service can guarantee absolute security. Please do not send payment-card credentials or unnecessary sensitive information in ordinary messages.
We update this policy when our practices or legal requirements change. The date above identifies this version. Where required, we will provide a further notice or obtain a new choice before using information for a materially different purpose.