MIRA (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit or make a purchase from our website.

MIRA HANDMADE LTD (company number 17233516, registered office Silverstream House, 45 Fitzroy Street, London, W1T 6EB) is the controller of the personal data described in this policy. You can contact us about it at mira.h.fragrance@gmail.com.

1. Information We Collect

• Order details: your name, email address, phone number where given, billing address and delivery address, and what you ordered
• Payment information: payments are taken by Stripe. We receive confirmation of payment and limited details such as the card type and last four digits. We never see or store your full card details
• Messages: anything you send us by email or through the contact form
• Newsletter: your email address, if you ask to receive Letters from MIRA
• Technical information: our hosting provider records basic technical data such as IP address, browser type and the pages requested, to deliver the site and keep it secure

2. How We Use Your Information and Our Lawful Bases

• To process, deliver and support your order: necessary for our contract with you
• To keep business and tax records, and to meet consumer and product safety law: necessary for our legal obligations
• To answer enquiries, prevent fraud and keep the website secure: our legitimate interests in running the business safely
• To send you Letters from MIRA: your consent, which you can withdraw at any time by using the unsubscribe link or emailing us

We only collect information that is necessary for these purposes. We do not use your data for automated decision-making or profiling.

3. Sharing Your Information

We do not sell or trade your personal data.

Your information is shared only with services needed to operate our business:

• Stripe, which processes payments and handles your payment details under its own privacy policy
• Courier and postal services, which receive your name, address and contact details to deliver your order
• Vercel, which hosts our website
• Google, which provides our email and the fonts used on the site
• Resend, which sends our order confirmation emails

We may also share information where the law requires it.

4. Transfers Outside the UK

Some of these providers store or process data outside the UK, including in the United States. Where this happens, the transfer is protected by safeguards recognised under UK data protection law, such as the UK–US data bridge or approved contractual clauses.

5. Cookies and Similar Technologies

We do not use advertising or analytics cookies.

• Your cart is saved in your browser's local storage so that it is still there when you move between pages. This is essential to the service you ask for and stays on your device
• When you go to checkout you are taken to Stripe's secure payment page, where Stripe sets its own cookies to process the payment and prevent fraud
• The fonts on this site are loaded from Google Fonts, which means your browser sends your IP address to Google when a page loads

You can clear or block browser storage and cookies in your browser settings. The cart will not work if storage is blocked.

6. Data Retention

• Order and payment records: 6 years after the end of the tax year of your order, to meet tax and accounting rules
• Enquiries: up to 2 years after our last message
• Newsletter details: until you unsubscribe

After these periods we delete or anonymise the data.

7. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your data
• Object to or restrict processing
• Receive your data in a portable format
• Withdraw consent at any time, where we rely on consent

To exercise any of these rights, please contact us using the details below. There is no charge, and we will respond within one month.

8. Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. We will acknowledge your complaint within 30 days and respond without undue delay.

You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or 0303 123 1113.

9. Data Security

We take reasonable measures to protect your personal data. Our website is served over an encrypted connection and hosted on Vercel, and payments are handled by Stripe, both of which provide secure infrastructure.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page.

11. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us at:

mira.h.fragrance@gmail.com