PRIVACY POLICY

This Privacy Policy explains how MIRAFELINE LIMITED (“MIRAFELINE”, “we”, “us” or “our”) collects, uses, stores, shares and protects your personal information when you visit our website, place an order, contact us or otherwise interact with us.

This Privacy Policy is intended to provide information in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (“PECR”) and other applicable UK data protection and privacy laws.

1. Who we are

MIRAFELINE LIMITED is the controller of your personal information. This means that we decide how and why your personal information is used.

• Company name: MIRAFELINE LIMITED

• Company registration number: 17248119

• Registered office: Centurion House, London Road, Staines-Upon-Thames, England, TW18 4AX

• Email: info@mirafeline.ltd

We have not appointed a Data Protection Officer. If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at info@mirafeline.ltd.

2. What personal information we collect

We may collect and use the following types of personal information.

2.1 Information you provide to us

When you place or attempt to place an order, contact us or otherwise interact with our website, we may collect:

• full name;

• billing address;

• shipping address;

• email address;

• telephone number;

• order details, including products purchased, quantity, price and order history;

• payment and transaction information, such as payment status and transaction reference;

• customer service messages, enquiries, complaints and related correspondence;

• any other information you choose to provide to us.

2.2 Payment information

Payments on our website are processed through Shopify Payments and its payment processing partners.

We do not intentionally collect or store full payment card numbers, CVV codes or complete bank card details on our own systems. We may receive limited payment-related information, such as payment status, transaction reference, card type, last four digits of the payment card, billing details, fraud screening or risk indicators, and confirmation that payment has been made.

2.3 Information collected automatically

When you visit our website, certain technical information may be collected automatically by Shopify and our website systems, including:

• IP address, browser type and version, device type and operating system;

• Approximate location, pages viewed, products viewed;

• Shopping cart activity, checkout activity, referral information, date and time of visits;

• Cookie identifiers and similar technical information.

Note: We do not currently use Google Analytics, Meta Pixel, TikTok Pixel, Google Ads tracking, advertising pixels or third-party analytics tools.

2.4 Customer messages

Our store uses a messaging application to allow customers to contact us. We may collect your name, email address, message content, and order number to respond to your enquiry, provide customer support, and keep records of communications.

3. How we use your personal information and our lawful basis

We only use your personal information where we have a lawful basis to do so.

Purpose	Personal information used	Lawful basis
To process and fulfil your order	Name, addresses, email, phone, order details, payment confirmation	Performance of a contract
To arrange delivery	Name, shipping address, phone, product/order details	Performance of a contract; legitimate interests
To process payments and refunds	Payment status, transaction reference, billing/card details	Performance of a contract; legitimate interests; legal obligation
To communicate about your order	Name, contact details, order details, messages	Performance of a contract; legitimate interests
To provide customer support	Contact details, order details, message content, complaints	Performance of a contract; legitimate interests
To handle returns/complaints	Contact, order, delivery details, correspondence	Performance of a contract; legitimate interests; legal obligation
To screen for fraud/security	Order/contact details, IP, device, payment data, fraud indicators	Legitimate interests
To maintain records	Order details, invoices, payment/transaction records	Legal obligation
To operate/secure website	Technical/device data, IP, cookie identifiers	Legitimate interests; strictly necessary cookies
Legal compliance	Relevant records	Legal obligation; legitimate interests
Legal claims	Relevant records	Legitimate interests; legal obligation

4. Dropshipping, supplier and fulfilment

MIRAFELINE operates an e-commerce business that may use a private dropshipping supplier located in the United Kingdom. When you place an order, we may share the information necessary to fulfil your order (name, shipping address, telephone number, product ordered, order number) with them. We do not share your full payment card details with our supplier.

5. Sharing your personal information

We may share your personal information with:

• Shopify (e-commerce platform) and Shopify Payments;

• Our private UK dropshipping supplier;

• Postal services, couriers and logistics providers;

• Customer messaging/support tools;

• IT, hosting, website and security service providers;

• Fraud prevention and risk management providers;

• Professional advisers (accountants, lawyers, tax advisers);

• Regulators, government authorities, or law enforcement where required by law;

• Potential buyers or investors in the event of a business sale/merger.

We do not sell your personal information.

6. Shopify and Shopify Payments

Our online store is operated through Shopify. They help us host our website, process orders, and manage store operations. Shopify and Shopify Payments may process personal information on our behalf and, in some cases, for their own legal, security, fraud prevention, or compliance purposes.

7. Cookies and similar technologies

Our website uses cookies and similar technologies to help the website function and provide a secure shopping experience.

• Strictly necessary cookies: Required for the website to work (shopping cart, checkout, security).

• Functional cookies: Help remember choices or provide support.

• Security technologies: Help protect the website from fraud and unauthorised activity.

We do not currently use advertising cookies, behavioural targeting cookies, or third-party analytics cookies. You can manage your preferences through our cookie banner or browser settings.

8. Marketing communications

We do not currently use email marketing platforms and we do not currently send marketing newsletters, promotional emails or SMS marketing campaigns. We only send service-related communications (order/payment confirmations, shipping updates, support replies, etc.) which are necessary for the performance of our contract with you.

9. Fraud prevention and security

We may use personal information to detect, prevent and investigate fraud. We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you.

10. How long we keep your personal information

We keep personal information only for as long as necessary.

• Order/Invoice/Transaction records: Up to 6 years after the accounting period.

• Customer support/Complaints: Usually up to 3 years after the matter is closed.

• Fraud/Security/Legal records: As long as necessary for the specific purpose.

11. International transfers

While our supplier is in the UK, some service providers (like Shopify) may process data outside the UK. Where this occurs, we take steps to ensure an appropriate level of protection (such as UK adequacy regulations or the UK International Data Transfer Agreement).

12. Your rights

Depending on applicable law, you may have the following rights:

• Right of access, rectification, erasure, and restriction.

• Right to data portability.

• Right to object to processing based on legitimate interests or direct marketing.

• Right to withdraw consent (where applicable).

• Rights relating to automated decision-making.

• Right to complain to us or the Information Commissioner’s Office (ICO).

To exercise your rights, please contact info@mirafeline.ltd.

13. Data protection complaints

If you are unhappy with how we use your personal information, please contact us first at info@mirafeline.ltd. Please include your name, contact details, description of the complaint, and any relevant order number.

If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO):

• Website: https://ico.org.uk

• Telephone: 0303 123 1113

• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

14. Security

We take appropriate technical and organisational measures to protect your personal information, including encrypted checkout, access controls, and secure hosting. You are responsible for keeping your account login details confidential.

15. Children’s privacy

Our website and products are not intended for children. We do not knowingly collect personal information from children under the age of 13.

16. Links to other websites

We are not responsible for the privacy practices, content or security of third-party websites linked from our site.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date.

18. Contact us

If you have questions about this Privacy Policy, please contact:

• MIRAFELINE LIMITED

• Company registration number: 17248119

• Registered office: Centurion House, London Road, Staines-Upon-Thames, England, TW18 4AX

• Email: info@mirafeline.ltd