Privacy Policy

Last Updated: August 27, 2026

This Privacy Policy explains how personal information may be collected, used, disclosed, retained and protected when you visit this Website, purchase products, create or use an account, contact us, subscribe to communications or otherwise interact with our services.

The legal business responsible for this Website and its contact details are identified in the Business Information section at the bottom of this page.

By using this Website, you acknowledge the practices described in this Privacy Policy.

1. Personal Information We May Collect

The personal information we collect depends on how you interact with the Website.

We may collect the following categories of information:

Identity and Contact Information

This may include:

• Name;
• Email address;
• Telephone number;
• Billing address;
• Shipping address;
• Other contact details you voluntarily provide.

Order and Transaction Information

This may include:

• Products purchased;
• Order number;
• Order value;
• Currency;
• Shipping information;
• Returns;
• Refunds;
• Transaction status;
• Purchase history.

Payment-Related Information

Payments may be processed by third-party payment service providers.

We may receive information such as payment status, transaction identifiers, payment method type or limited payment-related details.

We do not necessarily receive or store complete payment card information.

Account Information

If customer accounts are available, we may process information associated with your account, including login details, account preferences and order history.

Technical and Device Information

When you use the Website, certain information may be collected automatically, including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Cookie or similar identifiers;
• Referring website or page;
• Date and time of access;
• Website interaction and technical log information.

Website Activity

We may collect information about how users interact with the Website, including:

• Pages viewed;
• Products viewed;
• Shopping-cart activity;
• Checkout interactions;
• Website navigation;
• Links or features used.

Marketing Information

Where applicable, we may process:

• Email subscription status;
• Marketing preferences;
• Communication preferences;
• Engagement with marketing communications.

Customer Support Information

If you contact us, we may collect the information contained in your communication, including:

• Order information;
• Questions or complaints;
• Return or refund requests;
• Photographs you choose to provide;
• Product-safety reports;
• Other information voluntarily submitted.

2. Sensitive Personal Information

We do not intentionally request sensitive personal information that is unnecessary for providing our products or services.

Because we sell skincare and body-care products, a customer may occasionally choose to provide information about a skin reaction or other health-related concern when contacting Customer Support.

Please provide only information reasonably necessary for us to understand and respond to your concern.

Where sensitive information is voluntarily provided, we may use it only as reasonably necessary to:

• Respond to the customer;
• Investigate a product-safety concern;
• Handle a complaint;
• Comply with applicable legal or regulatory obligations;
• Establish, exercise or defend legal rights.

3. How We Collect Personal Information

We may collect personal information in several ways.

Directly From You

For example, when you:

• Place an order;
• Create an account;
• Submit a contact form;
• Request a return or refund;
• Contact Customer Support;
• Subscribe to marketing communications;
• Submit a privacy request.

Automatically Through the Website

Certain technical or usage information may be collected automatically through cookies, pixels, local storage or similar technologies.

From Service Providers

We may receive information from third parties that assist us with functions such as:

• E-commerce services;
• Payment processing;
• Order fulfillment;
• Shipping;
• Fraud prevention;
• Website security;
• Analytics;
• Marketing;
• Customer support.

4. How We Use Personal Information

We may use personal information for legitimate business and legal purposes, including to:

• Process and fulfill orders;
• Process or confirm payments;
• Provide order confirmations;
• Provide shipping and tracking updates;
• Provide Customer Support;
• Process returns and refunds;
• Investigate complaints;
• Respond to product-safety concerns;
• Detect and prevent fraud or misuse;
• Protect the security of the Website;
• Maintain customer accounts;
• Maintain transaction and business records;
• Understand Website performance and usage;
• Improve Website functionality and customer experience;
• Manage marketing preferences;
• Send marketing communications where permitted;
• Comply with tax, accounting, legal and regulatory obligations;
• Establish, exercise or defend legal claims.

We will not use personal information for purposes that are materially incompatible with the purposes for which it was collected unless permitted by applicable law.

5. GDPR and UK GDPR Legal Bases

Where the General Data Protection Regulation or UK GDPR applies, we process personal data only where an appropriate legal basis is available.

Depending on the circumstances, the legal basis may include:

Performance of a Contract

We may process personal data where necessary to:

• Process your order;
• Arrange delivery;
• Process payment;
• Handle returns or refunds;
• Provide services you request.

Legal Obligation

We may process personal data where necessary to comply with legal obligations relating to matters such as:

• Tax;
• Accounting;
• Consumer protection;
• Fraud prevention;
• Product safety;
• Regulatory requirements.

Legitimate Interests

We may process personal data where necessary for legitimate business interests, including:

• Securing the Website;
• Detecting fraud;
• Providing Customer Support;
• Improving Website functionality;
• Managing business operations;
• Protecting legal rights.

Where we rely on legitimate interests, we consider whether those interests are overridden by your applicable rights and freedoms.

Consent

Where legally required, we may rely on your consent for activities such as:

• Certain marketing communications;
• Certain non-essential cookies;
• Certain analytics or advertising technologies.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Cookies and Similar Technologies

The Website may use cookies, pixels, local storage and similar technologies.

Depending on the technologies actually enabled on the Website, these technologies may be used to:

• Operate essential Website functions;
• Maintain shopping-cart functionality;
• Remember preferences;
• Support account or login functionality;
• Protect Website security;
• Prevent fraud;
• Measure Website performance;
• Understand Website usage;
• Support analytics;
• Support advertising or marketing where permitted.

Some cookies may be necessary for the Website to function properly.

Other cookies may be optional and may be used only where permitted by applicable law.

Where applicable law requires consent before non-essential cookies or similar technologies are used, appropriate choices will be made available through the Website.

Where a cookie or privacy preference tool is available, you may use it to manage eligible preferences.

Your browser may also allow you to block or delete cookies. Disabling certain cookies may affect Website functionality.

7. Analytics and Advertising Technologies

We may use analytics, advertising or measurement technologies where they are enabled on the Website.

These technologies may help us understand Website usage, measure marketing performance or provide advertising.

The specific technologies used may change as our Website and service providers change.

Where required by applicable law, non-essential advertising or analytics technologies will be subject to the appropriate consent or opt-out mechanisms.

We do not intend this Privacy Policy to state that a particular advertising or analytics technology is active unless it is actually enabled on the Website.

8. How We Share Personal Information

We may disclose personal information to service providers that assist with operating the Website and fulfilling customer requests.

These may include providers involved in:

• Website hosting;
• E-commerce functionality;
• Payment processing;
• Order fulfillment;
• Shipping and delivery;
• Customer support;
• Information technology;
• Cybersecurity;
• Fraud prevention;
• Analytics;
• Email communications;
• Marketing;
• Accounting;
• Legal or professional services.

We may also disclose information where reasonably necessary to:

• Comply with applicable law;
• Respond to lawful regulatory or governmental requests;
• Comply with court orders or legal processes;
• Investigate fraud or unlawful activity;
• Protect customers, the public or our legal rights.

Personal information may also be transferred as part of a lawful merger, acquisition, financing, restructuring, sale or transfer of relevant business assets, subject to applicable law.

9. Sale or Sharing of Personal Information

We do not sell personal information for money as part of our ordinary retail business model.

However, some privacy laws use broader definitions of terms such as “sale” or “sharing.”

For example, certain disclosures involving advertising, analytics or cross-context behavioral advertising technologies may be treated as a sale or sharing under applicable law even where no money is exchanged.

Where such laws apply to us and an opt-out right is required, eligible users may exercise that right through any privacy controls made available on the Website or by contacting us at:support@miorabeauty.shop

We will provide any additional opt-out mechanism required by applicable law where applicable to our Website and processing activities.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy and to comply with applicable legal obligations.

Retention periods may depend on factors including:

• The type of information;
• Whether an active customer relationship exists;
• Accounting or tax requirements;
• Fraud-prevention requirements;
• Product-safety obligations;
• Consumer disputes;
• Legal or regulatory requirements;
• Potential legal claims.

Transaction information may need to be retained longer than ordinary customer-service communications.

When personal information is no longer reasonably required, we may delete, anonymize or otherwise securely dispose of it, subject to applicable law.

11. International Data Transfers

Our Website, service providers or business operations may involve processing personal information in countries other than the country where you live.

Where applicable privacy law requires safeguards for international transfers, appropriate lawful safeguards will be used where required.

Depending on the circumstances, these may include:

• Adequacy decisions;
• Standard Contractual Clauses;
• Other legally recognized transfer mechanisms.

12. Data Security

We use reasonable administrative, organizational and technical measures designed to protect personal information against:

• Unauthorized access;
• Loss;
• Misuse;
• Alteration;
• Destruction;
• Unauthorized disclosure.

However, no method of transmission over the Internet or electronic storage system can be guaranteed to be completely secure.

Customers are responsible for protecting their account credentials and should contact us if they believe their account or personal information may have been compromised.

13. Children's Privacy

This Website is not directed at children for the purpose of collecting personal information.

We do not knowingly collect personal information from children where such collection would be prohibited by applicable law without the legally required authorization.

If you believe that a child has provided personal information to us unlawfully, please contact:support@miorabeauty.shop

We will review the matter and take appropriate action where required.

14. Your GDPR and UK GDPR Rights

Where the GDPR or UK GDPR applies to you, you may have rights including the following.

Right of Access

You may request information about whether we process your personal data and request access to eligible personal data.

Right to Correction

You may request correction of inaccurate personal data and completion of incomplete information where applicable.

Right to Deletion

You may request deletion of personal data in circumstances where applicable law provides this right.

This right may be subject to exceptions, including where information must be retained for legal, contractual or regulatory reasons.

Right to Restrict Processing

You may request restriction of certain processing in circumstances provided by applicable law.

Right to Object

You may object to certain processing based on legitimate interests where applicable.

You may also object to the use of your personal data for direct marketing.

Right to Data Portability

Where applicable, you may request eligible personal data in a structured, commonly used and machine-readable format or request transmission to another controller where legally available.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Rights Relating to Certain Automated Decisions

Where applicable law provides rights relating to decisions based solely on automated processing that produce legal or similarly significant effects, you may exercise those rights where relevant to our processing.

We do not claim to conduct such processing unless it is actually used in connection with our services.

15. How to Exercise GDPR or UK GDPR Rights

To submit a privacy request, contact:

Email:support@miorabeauty.shop

Please use the subject line:

Privacy Request

Explain the right you wish to exercise and provide sufficient information for us to identify the relevant records.

We may request reasonable information to verify your identity before completing certain requests.

We will respond within the period required by applicable law.

Where GDPR or UK GDPR applies, eligible requests are generally handled without undue delay and ordinarily within one month, subject to extensions permitted by law.

16. GDPR and UK GDPR Complaints

If you believe your personal information has been handled in violation of applicable data protection law, you may first contact us at:

Email: support@miorabeauty.shop

Subject: Privacy Complaint

Please describe your concern so that we can investigate it.

Where GDPR applies, you may also have the right to lodge a complaint with a competent data protection supervisory authority, including an authority in:

• Your country of habitual residence;
• Your place of work;
• The place of the alleged infringement,

where applicable.

UK residents may have the right to complain to the competent UK data protection supervisory authority.

Submitting a complaint to us does not remove any right you may have to contact an applicable regulator directly.

17. California Privacy Rights — CCPA / CPRA

Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to our processing of your personal information, eligible California residents may have rights including the following.

Right to Know

You may have the right to request information regarding categories of personal information we have collected, sources of that information, purposes for collection or use and categories of recipients.

Right to Access

You may have the right to request access to eligible personal information maintained about you.

Right to Delete

You may have the right to request deletion of eligible personal information, subject to exceptions permitted by law.

Right to Correct

You may have the right to request correction of inaccurate personal information.

Right to Opt Out of Sale or Sharing

Where our processing constitutes the sale or sharing of personal information under California law and the right applies, you may request to opt out.

Right to Limit Certain Uses of Sensitive Personal Information

Where we use or disclose sensitive personal information in a manner that gives rise to this right under California law, eligible consumers may request to limit such use or disclosure.

Right to Non-Discrimination

We will not unlawfully discriminate against an eligible consumer for exercising rights provided by applicable California privacy law.

18. California Categories of Personal Information

Depending on your interaction with the Website, categories of personal information we may collect may include:

Identifiers

Such as name, email address, telephone number, IP address, billing address and shipping address.

Customer Records

Such as contact information and information associated with customer transactions.

Commercial Information

Such as:

• Products purchased;
• Purchase history;
• Returns;
• Refunds;
• Shopping-cart activity.

Internet or Electronic Network Activity

Such as:

• Browser information;
• Device information;
• Website interactions;
• Pages viewed;
• Technical logs.

Approximate Location Information

Approximate location may be inferred from technical information such as an IP address where used by Website or service-provider functionality.

Customer Communications

This may include communications with Customer Support, return requests, complaints and other information voluntarily submitted.

We do not intentionally collect categories of personal information that are unnecessary for operating the Website or providing our products and services.

19. California Privacy Requests

Eligible California consumers may submit applicable privacy requests by contacting:

Email: support@miorabeauty.shop

Please use the subject:

California Privacy Request

Describe the right you wish to exercise.

We may request information reasonably necessary to verify your identity or authority to make the request.

Requests are handled within the time required by applicable California law, subject to legally permitted extensions and exceptions.

20. California Sale or Sharing Opt-Out

If California law applies to our business and our Website uses technologies that legally constitute the sale or sharing of personal information, eligible California consumers will be provided with an appropriate method to exercise the applicable opt-out right.

Depending on the technologies and legal requirements applicable to the Website, this may include an online privacy control or a link such as:

Your Privacy Choices

or

Do Not Sell or Share My Personal Information

The availability of a particular control depends on the actual data-processing activities and technologies used by the Website.

Privacy-related questions may also be sent to:

support@miorabeauty.shop

21. Authorized Agents

Where applicable law permits, an authorized agent may submit an eligible privacy request on behalf of another person.

We may request reasonable evidence of:

• The agent's authority;
• The identity of the person concerned;
• Any additional verification permitted by law.

22. Marketing Communications

Where you have subscribed to promotional communications, you may unsubscribe at any time by:

• Using the unsubscribe link provided in an eligible marketing email; or
• Contacting support@miorabeauty.shop.

Opting out of marketing communications does not prevent us from sending non-promotional communications reasonably necessary to:

• Process an order;
• Confirm payment;
• Provide shipping information;
• Handle returns or refunds;
• Address account security;
• Respond to Customer Support requests.

23. Privacy Requests

For privacy rights involving access, correction, deletion, restriction, objection, portability or another applicable privacy request, contact:

Email: support@miorabeauty.shop

Subject: Privacy Request

Please provide sufficient information for us to understand and process your request.

24. Privacy Complaints

If you have a complaint about how your personal information has been handled, contact:

Email: support@miorabeauty.shop

Subject: Privacy Complaint

Please describe:

• The nature of your concern;
• Any relevant interaction or order;
• The action you would like us to consider.

We will review privacy complaints as soon as reasonably possible.

Nothing in this process limits any right you may have to contact a competent privacy or data protection regulator.

25. Third-Party Websites and Services

The Website may contain links to third-party websites or use independent third-party services.

We are not responsible for the independent privacy practices of third parties outside our control.

When you interact directly with a third party, that third party's own privacy policy may apply.

26. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Website functionality;
• Products or services;
• Service providers;
• Data-processing practices;
• Legal or regulatory requirements.

The current version will be posted on this Website with an updated Last Updated date.

Where applicable law requires additional notice of a material change, appropriate notice will be provided.

27. Contact Us

For questions regarding this Privacy Policy or our handling of personal information, contact:

Email: support@miorabeauty.shop

For a rights request, use:

Subject: Privacy Request

For a privacy-related complaint, use:

Subject: Privacy Complaint