Privacy Policy

Medellin Mafia Design
Last Updated: October 27, 2026

Medellin Mafia Design (“Medellin Mafia Design,” “MMD,” “we,” “our,” or “us”) respects your privacy and is committed to providing clear information about how personal information is collected, used, disclosed, and protected.

This Privacy Policy applies to https://medellinmafiadesign.com and the related online storefront, customer communications, and services operated by Medellin Mafia Design (collectively, the “Services”).

Medellin Mafia Design is a Wisconsin-based online retailer offering made-to-order clothing, footwear, accessories, custom products, and lifestyle merchandise.

Our storefront operates using Fourthwall, an e-commerce and merchandising partner. Fourthwall acts as Merchant of Record for orders processed through its checkout, as disclosed during checkout. Fourthwall and other service providers may process customer information in connection with orders, payments, fulfillment, and related services.

This Privacy Policy explains our practices. Additional privacy policies may apply when customers interact directly with Fourthwall or other independent third-party services.

1. Personal Information We Collect

We may collect personal information that you provide directly, information collected automatically when you use our Services, and information received from service providers or other authorized sources.

1.1 Information You Provide

Depending on how you interact with our website, we may collect:

Contact information: Name, email address, telephone number, billing address, and shipping address.
Order information: Products ordered, purchase details, customization requests, transaction dates, order status, and fulfillment information.
Account information: Information associated with customer accounts or membership features, where available.
Customer communications: Messages, inquiries, complaints, product requests, and other information you choose to provide.
Marketing preferences: Newsletter subscriptions, promotional preferences, and related communications.
Custom design information: Artwork, specifications, measurements, customization instructions, and other materials submitted for made-to-order products.

You are not required to provide every type of information described above. However, certain information may be necessary to process orders, deliver products, respond to requests, or provide particular services.

1.2 Payment Information

Payments made through our storefront are processed through Fourthwall and its payment-processing partners.

Payment providers may collect payment card details, billing information, transaction information, and information necessary for fraud prevention and legal compliance.

Medellin Mafia Design may receive transaction confirmations, payment status, order totals, and other information necessary to manage orders and provide customer support.

We do not represent that Medellin Mafia Design independently stores customers' complete payment card numbers.

1.3 Information Collected Automatically

When you visit or interact with our website, we and our service providers may collect:

IP address and approximate geographic location.
Browser type, operating system, and device information.
Pages viewed, referral sources, and interactions with the website.
Dates, times, and duration of visits.
Cookies and similar tracking identifiers.
Website performance and analytics information.

This information may be collected through cookies, analytics services, website hosting systems, and other technologies.

1.4 Information From Third Parties

We may receive information from Fourthwall, fulfillment providers, shipping carriers, payment processors, analytics providers, and other services used to operate our business.

This information may be combined with information you provide directly when reasonably necessary to operate our Services.

2. How We Use Personal Information

We may use personal information to:

Process, fulfill, and manage customer orders.
Coordinate made-to-order manufacturing and product customization.
Arrange shipping, tracking, delivery, and fulfillment.
Provide customer service and respond to inquiries.
Communicate about orders, cancellations, refunds, replacements, and product issues.
Operate and improve our website and shopping experience.
Maintain customer accounts and membership features, where offered.
Send promotional communications where permitted by law and consistent with customer preferences.
Analyze website performance, traffic, and customer interactions.
Detect, investigate, and prevent fraud, unauthorized activity, and security threats.
Maintain business, accounting, and transaction records.
Comply with applicable legal obligations and enforce our policies.
Protect the rights, property, and safety of customers, service providers, and our business.

We may also use aggregated or de-identified information for business analytics, service improvements, and other lawful purposes.

3. E-Commerce, Fourthwall, and Order Processing

Medellin Mafia Design uses Fourthwall to support its online storefront and merchandise operations.

Fourthwall acts as Merchant of Record for transactions processed through its checkout. This means Fourthwall is responsible for certain payment, transaction, and order-related functions as described in its terms and checkout disclosures.

Depending on the transaction and fulfillment arrangements, Fourthwall and its service providers may process information to:

Accept and process payments.
Calculate applicable taxes.
Verify transactions and prevent fraud.
Coordinate order production and fulfillment.
Arrange shipping and delivery.
Process eligible refunds and other order-related requests.
Maintain legally required transaction records.

Medellin Mafia Design may access customer and order information necessary to support its products, respond to inquiries, and coordinate order-related services.

Fourthwall's independent privacy practices are described in its Privacy Policy:

https://fourthwall.com/privacy-policy

Fourthwall's Terms of Service are available at:

https://fourthwall.com/terms-of-service

Customers may also see Fourthwall's legal disclosures directly during checkout.

4. Sharing and Disclosure of Personal Information

We may disclose personal information to the following categories of recipients when necessary for the purposes described in this policy.

4.1 E-Commerce and Payment Providers

We may share or make information available to Fourthwall, payment processors, fraud prevention providers, and other transaction service providers.

4.2 Manufacturers and Fulfillment Partners

Because Medellin Mafia Design offers made-to-order and custom merchandise, information necessary to manufacture, customize, package, and fulfill products may be provided to approved production and fulfillment partners.

This may include order specifications, customization details, shipping information, and relevant customer instructions.

4.3 Shipping and Delivery Providers

We may disclose recipient names, delivery addresses, contact details, and shipment information to carriers and logistics providers as necessary to deliver orders.

4.4 Website, Analytics, and Technology Providers

We may use service providers for website hosting, security, analytics, communications, technical support, and related operations.

4.5 Marketing and Advertising Partners

Where applicable, information collected through cookies or similar technologies may be disclosed to analytics or advertising providers to measure website performance or support marketing activities.

Certain disclosures for targeted advertising may qualify as “sharing” or “sales” under particular state privacy laws, even when no money is exchanged for personal information.

Applicable opt-out rights are described below.

4.6 Legal and Safety Requirements

We may disclose information when reasonably necessary to comply with applicable laws, respond to lawful requests, investigate suspected fraud, enforce agreements, or protect rights and safety.

4.7 Business Transactions

If our business undergoes a merger, acquisition, restructuring, sale, or similar transaction, relevant information may be disclosed as permitted by applicable law.

4.8 With Your Consent

We may disclose personal information for other purposes when you authorize or direct us to do so.

5. Cookies, Analytics, and Tracking Technologies

Our website and service providers may use cookies, pixels, tags, and similar technologies to operate the storefront, remember preferences, analyze website usage, and support applicable marketing activities.

These technologies may help us understand:

Which pages visitors view.
How visitors navigate the website.
How the website performs.
Which products attract customer interest.
Whether technical problems occur.
How visitors interact with marketing content.

We may use Google Analytics and other analytics services in connection with website measurement.

Where advertising technologies are enabled, third parties may use cookies or similar identifiers to measure advertising performance or provide personalized advertising.

You can manage certain cookies through your browser settings and any consent controls made available on the website.

Disabling some cookies may affect website functionality.

For information about Google's privacy practices and controls, visit:

https://policies.google.com/privacy

Google Analytics opt-out information is available at:

https://tools.google.com/dlpage/gaoptout

You may also learn about advertising choices through:

https://optout.aboutads.info

6. Marketing Communications

If you subscribe to our newsletter or otherwise agree to receive promotional communications, we may send information about new products, collections, discounts, and store updates.

You may unsubscribe from promotional emails using the unsubscribe instructions included in those messages or by contacting us.

Unsubscribing from marketing does not prevent necessary transactional communications concerning existing orders, customer support, security, or legal matters.

7. Your Privacy Rights

Depending on your location and applicable law, you may have rights concerning your personal information.

These may include the right to:

Request access to personal information.
Request correction of inaccurate information.
Request deletion of eligible personal information.
Request a portable copy of certain information.
Object to or restrict certain processing.
Withdraw consent where processing relies on consent.
Opt out of certain targeted advertising, sales, or sharing of personal information.
Appeal certain privacy request decisions where required by law.
Submit a complaint to an applicable data protection authority.

These rights are subject to applicable legal requirements, limitations, and exceptions.

To submit a privacy request, contact:

Email: contact@support.medellinmafiadesign.com
Phone: +1 (920) 327-2815

We may request information reasonably necessary to verify your identity or the authority of an authorized representative before responding.

8. European Economic Area and United Kingdom

Where applicable European Economic Area or United Kingdom privacy laws apply, Medellin Mafia Design may act as a data controller for personal information it determines how and why to process.

Fourthwall and other providers may act in separate or additional privacy roles for information they process in connection with their own services.

Depending on the processing activity, our legal grounds may include:

Contractual necessity: Processing information to provide requested products, complete orders, and fulfill contractual obligations.

Legitimate interests: Operating our business, providing support, improving our Services, preventing fraud, and maintaining security, where those interests are not overridden by applicable individual rights.

Legal obligations: Maintaining required records, complying with applicable laws, and responding to lawful requests.

Consent: Processing information for activities requiring consent under applicable law, such as certain marketing or tracking activities.

Where consent is required, you may withdraw it, subject to applicable law.

Eligible individuals may have rights to access, correct, erase, restrict, transfer, or object to the processing of their personal information.

They may also have the right to complain to the relevant supervisory authority.

9. California Privacy Information

This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to our processing activities.

9.1 Categories of Personal Information

Depending on customer interactions and our actual operations, we may collect the following categories:

Category	Examples
Identifiers	Names, email addresses, phone numbers, shipping addresses, IP addresses
Commercial information	Purchases, order history, product preferences, transaction details
Internet and network activity	Website usage, browsing interactions, device and analytics information
Financial information	Payment and transaction information processed through payment providers
Audio, electronic, or visual information	Customer communications, submitted artwork, and related materials
Other information	Information voluntarily provided through inquiries or custom product requests
Sensitive personal information, where applicable	Account credentials or other information qualifying as sensitive under applicable law

Not every category is necessarily collected from every customer.

9.2 Sources of Information

Personal information may be obtained directly from customers, through website interactions, from Fourthwall and other service providers, or from authorized third parties.

9.3 Business and Commercial Purposes

We may use personal information for order processing, customer communications, fulfillment, analytics, marketing, fraud prevention, security, legal compliance, and other purposes described in this Privacy Policy.

9.4 Categories of Recipients

Depending on the information and business purpose, recipients may include:

Fourthwall and payment-processing partners.
Manufacturing and fulfillment providers.
Shipping and logistics providers.
Website hosting and technology providers.
Analytics and advertising providers.
Legal, compliance, and security service providers.
Other recipients authorized by the customer or permitted by law.

9.5 California Privacy Rights

Where applicable, California residents may have the right to:

Know what personal information has been collected.
Request access to eligible personal information.
Request deletion of eligible personal information.
Request correction of inaccurate information.
Obtain information about categories of disclosures.
Opt out of qualifying sales or sharing of personal information.
Limit certain uses or disclosures of sensitive personal information where the law provides that right.
Exercise applicable privacy rights without unlawful discrimination or retaliation.

Some requests may be subject to verification and legal exceptions.

9.6 Sale and Sharing of Personal Information

Certain disclosures to analytics and advertising partners may constitute a “sale” or “sharing” under California law, depending on the technologies used and the circumstances.

We do not describe ordinary order fulfillment disclosures as sales of customer information merely because customer data is transferred to a service provider to complete an order.

If you wish to request an opt-out of activities qualifying as sales or sharing, contact:

contact@support.medellinmafiadesign.com

We will process applicable requests in accordance with relevant legal requirements.

Where legally required and technically supported, applicable opt-out preference signals, including Global Privacy Control, will be honored.

For more information about Global Privacy Control:

https://globalprivacycontrol.org

9.7 Sensitive Personal Information

Sensitive personal information, where collected, may be used for permitted business purposes such as account access, security, fraud prevention, transactions, and legal compliance.

Additional rights may apply if sensitive personal information is used or disclosed for purposes subject to restrictions under applicable law.

9.8 Authorized Agents

Where permitted by law, you may designate an authorized agent to submit certain requests on your behalf.

We may require appropriate documentation or verification before processing such requests.

9.9 Financial Incentives

We may occasionally offer optional promotions, discounts, or referral incentives.

Any program involving personal information will be subject to its disclosed terms and applicable legal requirements.

Participation in eligible programs is voluntary.

10. Other U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state laws.

These rights may include access, correction, deletion, portability, and opt-out rights relating to targeted advertising or certain disclosures.

Where required, we will provide available mechanisms for exercising these rights and applicable appeals.

For inquiries, contact:

contact@support.medellinmafiadesign.com

11. Children's Privacy

Our Services are not directed toward children under 13 years of age.

We do not knowingly collect personal information directly from children under 13 in violation of applicable law.

If you believe a child has provided personal information inappropriately, contact us so that we can review the matter and take appropriate action.

We do not knowingly sell or share the personal information of children under 16 in violation of applicable law.

12. Data Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information and services involved.

We also rely on service providers, including Fourthwall and payment-processing partners, to maintain safeguards for information handled within their systems.

No method of electronic transmission or storage can be guaranteed completely secure.

Customers should protect account credentials and contact us if they suspect unauthorized account activity.

13. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including:

Providing products and services.
Completing and documenting orders.
Handling refunds, disputes, and customer support.
Maintaining accounting and tax records.
Meeting legal obligations.
Preventing fraud and maintaining security.
Enforcing agreements and resolving disputes.

Retention periods depend on the type of information, the reason it was collected, applicable legal obligations, and operational requirements.

When information is no longer required, it may be deleted, anonymized, or otherwise handled in accordance with applicable requirements.

14. International Data Transfers

Personal information may be processed or stored in the United States or other countries where our service providers operate.

Privacy and data protection laws may differ between jurisdictions.

Where required by applicable law, appropriate safeguards will be used for international transfers of personal information.

15. Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms, payment services, shipping providers, or other independent services.

This Privacy Policy does not govern the independent privacy practices of third parties.

We encourage customers to review the privacy policies and terms of any third-party service they use.

16. Do Not Track and Privacy Preference Signals

Some browsers transmit “Do Not Track” signals. There is no universally applied standard governing responses to all such signals.

Where required by applicable law, we will recognize qualifying opt-out preference signals, including Global Privacy Control, for covered processing activities.

Other browser privacy settings may affect cookies and tracking technologies.