MAE Drops Privacy Policy
Last updated: 29 October 2026
Papaya Global Ltd. ("Papaya", "we", "us") operates www.maexpapaya.com (the "Website") for the MAE Drops collaboration with MAE. This policy explains how we handle personal information about Website visitors, people enquiring about participation, and individuals featured in the collaboration. Papaya is the controller of the personal information described in this policy. You can contact us at privacy@papayaglobal.com.
Information we collect
Enquiries and communications: When you contact us, we collect your name, company, work email address, phone number if provided, enquiry content and related correspondence. We receive information directly through the Website or other communications. We may also receive your contact details and enquiry from MAE if you contact MAE about the collaboration, including through Instagram, and your enquiry is referred to Papaya for follow-up.
Participation and published content: We may receive information from you or a participating company to coordinate participation and prepare Website content. This may include names, professional roles, photographs, quotes and stories about the people behind a participating brand.
Website usage: We collect technical and usage information, such as IP address, browser and device information, pages viewed and interactions with the Website, through server logs, cookies and similar technologies. Please avoid including sensitive personal information or unnecessary information about others in your enquiry.
Providing information is voluntary
You are not legally required to provide personal information. However, without the required contact details and information about your enquiry, we may be unable to respond or coordinate your company's participation. The phone number and additional comments fields are optional. Submitting an enquiry does not commit you or your company to participating.
How we use information
We use personal information to respond to enquiries, assess and coordinate potential participation, communicate with company representatives, and prepare and publish collaboration content on the Website. We also use technical information to operate, secure and maintain the Website, understand its use and improve its performance. We may process information to meet legal obligations, resolve disputes and protect our rights.
Enquiry contact details are used to respond and coordinate participation in MAE Drops. They are not used for unrelated marketing by Papaya or MAE.
Legal grounds for processing
Where the EU or UK General Data Protection Regulation applies, we rely on our legitimate interests in responding to business enquiries, managing company participation, operating and securing the Website, and protecting our legal rights, provided those interests are not overridden by your rights and interests. Where you personally enter into a contract with us, we may also process information as necessary to perform that contract or take steps at your request before entering into it.
We rely on consent for publishing identifiable photographs, quotes and personal stories, and for non-essential tracking where consent is required. Consent for publication may be obtained directly or through the participating company. We also process information where necessary to comply with legal obligations applicable to us. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Who receives information
Access within Papaya is limited to authorised personnel who need it for these purposes. Service providers supporting Website hosting and maintenance, form delivery, email, IT, security and analytics may process information for us, subject to appropriate obligations. If advertising technologies are enabled, advertising partners may receive device identifiers and Website interaction information as described below. We may also disclose information to professional advisers, authorities or other recipients where required by law or necessary to establish, exercise or defend legal claims.
We do not share personal details submitted through the Website enquiry form with MAE. Information included in published profiles, photographs, quotes or stories is publicly accessible, including to MAE, and may be viewed or copied by others.
Cookies and similar technologies
We use strictly necessary cookies and similar technologies to support Website operation and security, and analytics technologies to understand visits and interactions and improve the Website. Analytics may involve sharing device and usage information with an analytics provider.
If enabled, marketing cookies and advertising pixels help measure campaign effectiveness and display relevant advertisements on other websites or platforms. These technologies may disclose device identifiers, IP addresses and Website interaction information to advertising providers. This is separate from using enquiry contact details for marketing, which we do not do.
Non-essential technologies are subject to your choices through the Website's cookie banner and settings. Where consent is required, they are activated only after you consent. You can change your choices through the cookie settings. You can also manage cookies through your browser; blocking necessary cookies may affect Website functionality.
Storage and international processing
Information may be stored or processed in Israel and other countries where our service providers operate. These countries may have different data protection laws from those in your location. We apply the transfer protections required by the laws applicable to the processing.
Where EU or UK data protection law requires safeguards for an international transfer, we rely on an applicable adequacy decision or appropriate contractual safeguards, including the European Commission's Standard Contractual Clauses and the UK Addendum or International Data Transfer Agreement, as applicable. Transfers from Israel are also subject to applicable Israeli transfer requirements. You can contact privacy@papayaglobal.com for information about relevant destinations and safeguards or to request a copy of applicable contractual safeguards, subject to appropriate redactions.
How long we keep information
We retain enquiry and participation information for as long as reasonably necessary to handle the enquiry, coordinate participation and maintain relevant collaboration records. Published content is retained while relevant to the collaboration. We may retain limited records for longer where necessary to comply with legal obligations, resolve disputes or protect our rights. Information no longer needed is deleted or anonymised, subject to backup deletion cycles.
Security
We use technical and organisational measures appropriate to the information and its risks, including access restrictions, to protect personal information against unauthorised access, loss, misuse or disclosure. No system or transmission method is completely secure.
Your privacy rights
Depending on the law applicable to your information, you may have rights to know about and access your personal information, obtain a copy in a portable format, request correction or deletion, restrict processing, or object to processing based on legitimate interests. You may withdraw consent where we rely on it. These rights are subject to applicable conditions and exceptions.
If EU or UK data protection law applies, you may complain to a supervisory authority, including in the EEA country where you live or work or where an alleged infringement occurred, or to the UK Information Commissioner. Under Israel's Protection of Privacy Law, 1981, you may request access to information about you in our databases and correction or deletion of information that is inaccurate, incomplete, unclear or outdated.
To exercise rights or raise a privacy concern, contact Papaya or our Data Protection Officer at privacy@papayaglobal.com. We will respond within the period required by applicable law. We may request information needed to verify your identity and request. You may use an authorised representative where permitted by law, subject to appropriate verification. You may appeal a refusal by replying to our decision or contacting the same address where applicable law provides an appeal right. We will not unlawfully discriminate against you for exercising your rights.
Additional information for US residents
Where applicable US state privacy laws, including the California Consumer Privacy Act, apply, the information described above includes identifiers and contact details, professional or employment-related information, internet or electronic network activity, and audiovisual information in published content. The sections above describe the sources, purposes, recipients and retention criteria for these categories, including categories collected or disclosed during the preceding 12 months, to the extent this Website was operating during that period.
We do not sell enquiry contact details for money. If advertising technologies are enabled, disclosures of device identifiers and Website activity to advertising partners may constitute a "sale", "sharing" for cross-context behavioural advertising, or targeted advertising under applicable state laws. Where applicable, you may opt out through the privacy choices control available on the Website, which allows you to manage cookie preferences and opt out of applicable sales, sharing or targeted advertising. We honour Global Privacy Control and other legally required opt-out preference signals for this processing. You may also contact privacy@papayaglobal.com about these choices.
In addition to applicable access, correction and deletion rights, you may have rights to opt out of sales, sharing, targeted advertising and certain profiling, and to limit certain uses of sensitive personal information where relevant. We do not request sensitive personal information through the enquiry form or use it to infer characteristics about you. We do not knowingly sell or share personal information of individuals under 16. Contact us if you believe a child has provided personal information through this Website.
External services and policy changes
The Website links to external services, including Instagram and MAE's website. Their own privacy practices apply to information they collect. This policy covers information Papaya receives and handles for the activities described above.
We may update this policy to reflect changes in the collaboration, our practices or legal requirements. The current version will be available on the Website with its update date. We will provide additional notice where required by law.