Help & legal
Privacy policy
What personal data we collect when you shop with us, why, and your rights under the UK GDPR and EU GDPR.
Last updated: 28 September 2026
Controller
ROBERT ANTHONY OF SUFFOLK LIMITED (trading as MIRAVEELLE), 38 Mayfly Way, Evolve, Ardleigh, Essex, CO7 7WX, United Kingdom, company number 07962442. E-mail: support@miraveelle.shop, telephone +44 7703 863220. We have not appointed a data protection officer; please send privacy questions to the e-mail address above.
What we collect and why
| Situation | Data | Purpose and legal basis | How long |
|---|---|---|---|
| Placing an order | Name, billing and delivery address, e-mail, phone (optional), items ordered, order notes | Processing and delivering your order, customer service (contract, Art. 6(1)(b) GDPR); accounting and tax records (legal obligation, Art. 6(1)(c)) | 6 years after the end of the financial year (UK tax law), 10 years where EU tax law requires it |
| Payment | Payment method, transaction ID, amount; card details are entered directly with the payment provider | Taking payment and preventing fraud (contract; legitimate interest in fraud prevention, Art. 6(1)(f)) | As for orders |
| Customer account (optional) | E-mail, password (encrypted), addresses, order history | Giving you access to your account (contract) | Until you ask us to delete the account |
| Contact form, e-mail, withdrawal form | Name, e-mail, order number, your message | Answering you and handling withdrawals and returns (contract; legal obligation for withdrawals) | Up to 3 years after the matter is closed |
| Visiting the website | IP address, browser type, time of the request (server logs) | Running and securing the website (legitimate interest) | Up to 30 days |
We don’t use analytics, advertising or social media tracking, and we don’t sell personal data. We don’t make automated decisions that have legal effects on you.
Who we share data with
- Payment providers: Stripe Payments Europe Ltd. / Stripe, Inc. for card, Apple Pay and Google Pay payments; PayPal (Europe) S.à r.l. et Cie, S.C.A. for PayPal payments. They act as independent controllers for parts of the payment process (for example fraud checks) under their own privacy policies.
- Carriers: the delivery company we use for your parcel receives your name, delivery address and, where needed for delivery notifications, your e-mail or phone number.
- Hosting: Hostinger International Ltd. (Cyprus) hosts this website and our e-mail as our processor.
- Authorities and advisers: where the law requires it, for example tax authorities, and our accountants.
International transfers
We are based in the United Kingdom. For customers in the EU, transfers to the UK are covered by the European Commission’s adequacy decision for the UK. Where a provider processes data in the United States (for example Stripe or PayPal), transfers are based on the EU–US Data Privacy Framework, the UK extension to it, or standard contractual clauses.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to processing based on legitimate interests, and to data portability. Where processing is based on consent, you can withdraw it at any time. To use any of these rights, e-mail support@miraveelle.shop; we reply within one month.
You can also complain to a supervisory authority: in the UK the Information Commissioner’s Office (ico.org.uk); in the EU the data protection authority of the country where you live or work — for example Datatilsynet in Denmark or the authority of your German federal state.
Cookies
We only use cookies that are necessary to run the shop. See our cookie policy.
Security
The whole website uses an encrypted connection (HTTPS). Card details are entered in the payment provider’s secure fields and never reach our servers.
Children
Our shop is for adults. We don’t knowingly collect data from anyone under 16.
Changes
We update this policy when our processing changes. The date at the top shows the latest version.