Privacy policy

This Privacy policy explains what personal information MIRALIVIA collects when you visit or buy from miralivia.com, why we collect it, who we share it with, and the choices you have. We have tried to write it in plain language rather than legal shorthand.

The short version. We collect what we need to take your order, deliver it and answer your questions — nothing more. We never sell your personal information. You can ask us at any time to show you what we hold, correct it or delete it, by writing to contact@miralivia.com.

1. Who is responsible for your information

MIRALIVIA is the party responsible for the personal information described here. Our full identification details are set out in our Legal notice.

For any question about privacy, or to exercise any of the rights in section 9, write to contact@miralivia.com.

2. What we collect

Information you give us

Order information: name, billing and delivery address, email address, telephone number where you provide one, and the contents of your order.
Payment information: processed directly by our payment providers. We receive confirmation that a payment succeeded, the card type and the last four digits — never the full card number, expiry date or security code.
Account information, if you create an account: your login details and saved addresses.
Correspondence: what you write to us by email or through the contact form, and our replies.
Marketing preferences: your email address if you subscribe to our newsletter, and whether you have opted in or out.
Reviews and photographs you choose to submit.

Information collected automatically

Device and browsing information: IP address, browser and version, operating system, time zone, referring site, and the pages and products you view on our site.
Cookies and similar technologies, as described in section 6 — including the cookie that remembers what is in your bag between visits.

We do not knowingly collect information from children, and this store is not directed at them. If you believe a child has given us personal information, write to us and we will delete it.

3. Why we use it, and on what basis

To take, process and deliver your order, including sending confirmation and tracking emails and handling returns and refunds. Basis: performance of our contract with you.
To answer your questions and provide customer support. Basis: performance of our contract, and our legitimate interest in running the store well.
To prevent fraud and abuse, including screening orders for risk. Basis: legitimate interest, and legal obligation.
To meet accounting, tax and legal obligations, including keeping records of sales. Basis: legal obligation.
To improve the site, by understanding in aggregate which pages and products are used. Basis: legitimate interest.
To send you marketing emails, where you have asked to receive them, or where you are an existing customer and we are writing about similar products. Basis: your consent, or legitimate interest. You can unsubscribe from any such message.

We do not make decisions about you by automated means that produce legal effects, beyond routine fraud-risk scoring applied to orders. We do not sell your personal information, and we do not share it with third parties for their own marketing.

4. Who we share it with

We share personal information only with service providers who need it to do work for us, and only for that purpose. They are bound to protect it and may not use it for anything else. They include:

Shopify Inc., which hosts this store and powers our checkout.
Payment providers, which process your payment and carry out fraud checks.
Manufacturing and fulfilment partners, which prepare and dispatch orders on our behalf and need the delivery name and address to do so.
Carriers, which deliver your parcel and provide tracking.
Judge.me, which collects and displays product reviews.
ParcelPanel, which powers order tracking on our site.
Email and analytics providers, which send our transactional and marketing emails and give us aggregate statistics about site use.

We may also disclose information where we are legally required to do so, to respond to a lawful request from an authority, or to protect our rights, and — if our business is ever sold or reorganised — to the acquiring party, subject to this policy.

5. International transfers

Our service providers, including Shopify, operate internationally, and your information may be stored or processed outside Canada, including in the United States and the European Economic Area. When that happens, the information is subject to the laws of the country where it is held, and may be accessible to courts and authorities there.

Where transfers are made from the European Economic Area, we rely on the European Commission's adequacy decisions or on standard contractual clauses. You may ask us for details of the safeguards applied.

6. Cookies

Cookies are small files placed on your device. We use:

Strictly necessary cookies, which make the site work — keeping you signed in, remembering your bag, and securing the checkout. These cannot be switched off.
Analytics cookies, which tell us in aggregate how the site is used so we can improve it.
Marketing cookies, where applicable, which help measure the effectiveness of our advertising.

Non-essential cookies are used only where the law requires your consent and you have given it. You can withdraw that consent at any time, and you can block or delete cookies through your browser settings — though blocking strictly necessary cookies will stop parts of the site working, including the bag and the checkout.

We also honour browser signals such as Global Privacy Control where the law requires it.

7. How long we keep it

Order records: for as long as required by tax and accounting law, which is generally between six and ten years depending on the applicable rules.
Customer accounts: until you ask us to close the account.
Marketing lists: until you unsubscribe, and for a short period afterwards to make sure we do not write to you again.
Correspondence: generally for up to three years after the matter is closed.

When information is no longer needed, we delete it or anonymise it so it can no longer be linked to you.

8. Security

Payments are encrypted in transit, and the whole site is served over an encrypted connection. Access to customer information is limited to the people who need it to do their work. Our store runs on Shopify's infrastructure, which maintains PCI DSS compliance for payment handling.

No system connected to the internet is completely secure, and we cannot guarantee absolute security. If you have an account, keep your password confidential and tell us at once if you believe it has been compromised. We will notify you and the relevant authority of a personal data breach where the law requires it.

9. Your rights

Subject to the law that applies to you, you may:

Access the personal information we hold about you and ask how it has been used.
Correct information that is inaccurate or incomplete.
Delete your information, where we are not required to keep it.
Restrict or object to certain processing, including direct marketing.
Receive a copy of information you gave us, in a portable format.
Withdraw consent at any time, without affecting processing carried out before you withdrew it.

Write to contact@miralivia.com, telling us what you want and from which email address you ordered. We respond within 30 days. We may need to verify your identity before acting on a request, and we will ask only for what is necessary to do so — please do not send us a copy of an identity document unless we specifically ask for one.

10. Complaints

If you are not satisfied with how we have handled your information, please tell us first — we would rather fix it. You also have the right to complain to a supervisory authority:

In Canada: the Office of the Privacy Commissioner of Canada, or the privacy commissioner of your province.
In the European Economic Area: the data protection authority of the country where you live or work, or where you believe the issue arose.

11. Third-party sites

Our site may link to sites we do not control. This policy does not apply to them, and we are not responsible for their privacy practices. Please read their policies before giving them your information.

12. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The version in force is the one published on this page. Where a change is material, we will make it clear on the site.

13. Contact

For any question about this policy or about your personal information: contact@miralivia.com.