PRIVACY POLICY

This Privacy Policy explains how Mia Outlet collects, uses, and protects your personal information when you visit our online store or make a purchase.

We are committed to protecting your privacy and being transparent about how your data is handled.

DATA CONTROLLER

Mia Outlet is the data controller responsible for your personal information.

Contact: support@mia-outlet.com

INFORMATION WE COLLECT

When you shop with us or contact us, we may collect the following types of information:

Information You Provide Directly
- Full name
- Shipping address and billing address
- Email address
- Phone number
- Order history and purchase details
- Payment information (processed securely by our payment providers — we never store your full card details on our servers)
- Any messages or information you send us through customer service

Information Collected Automatically
- Device information (browser type, operating system, IP address)
- Site usage data (pages viewed, time spent, click behavior)
- Location information (approximate, based on IP address)
- Cookie and tracking data (see our Cookie Policy for details)

HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

- To process and deliver your orders
- To provide customer service and communicate about your orders
- To send marketing emails and newsletters, if you've opted in
- To improve our website, products, and shopping experience
- To detect and prevent fraud, abuse, or security threats
- To comply with legal obligations such as tax and accounting requirements
- To personalize your experience and show relevant product recommendations
- To measure the performance of our marketing campaigns

LEGAL BASIS FOR PROCESSING (For EU and UK Customers)

Under GDPR and UK-GDPR, we process your data based on:

- Contract: To fulfill our purchase agreement with you
- Consent: For marketing communications and non-essential cookies (you can withdraw consent at any time)
- Legitimate Interest: For operating and improving our store, fraud prevention, and analytics
- Legal Obligation: For accounting, tax, and other regulatory requirements

WHO WE SHARE YOUR INFORMATION WITH

We only share your information with trusted partners who help us operate our store. These include:

- Shopify (our e-commerce platform)
- Payment processors (Stripe, PayPal, Shop Pay, or similar)
- Shipping and logistics providers (for order fulfillment and delivery)
- Email marketing platforms (for newsletters and order notifications)
- Analytics providers (Google Analytics, Meta Pixel, TikTok Pixel, and similar)
- Customer service tools (for handling your inquiries)
- Fraud prevention services

Some of these providers may process your data outside of the European Economic Area, the United Kingdom, or your country of residence. When this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent legal mechanisms.

We do not sell your personal information to third parties for their own marketing purposes.

DATA RETENTION

We keep your personal information only as long as necessary for the purposes described in this policy, or as required by law. Typical retention periods:

- Order and transaction records: 7 years (for accounting and tax compliance)
- Customer account data: as long as your account is active, plus a reasonable period after
- Marketing preferences: until you unsubscribe
- Analytics data: typically 14–26 months, in anonymized form
- Support communications: 2 years after the last interaction

YOUR RIGHTS

Depending on where you live, you have specific rights regarding your personal information.

For All Customers
- Right to access the personal data we hold about you
- Right to correct inaccurate information
- Right to request deletion of your data (subject to legal retention requirements)
- Right to withdraw consent for marketing communications at any time

For Customers in the EU and United Kingdom (Under GDPR / UK-GDPR)
- Right to data portability (receive your data in a machine-readable format)
- Right to restrict or object to processing
- Right to lodge a complaint with your local data protection authority

For Customers in California (Under CCPA/CPRA)
- Right to know what personal information we collect and how it's used
- Right to opt out of the sale or sharing of your personal information
- Right to non-discrimination for exercising your privacy rights
- Right to correct inaccurate personal information
- Right to limit the use of sensitive personal information

For Customers in Canada (Under PIPEDA)
- Right to access your personal information
- Right to correct inaccurate information
- Right to challenge our compliance with privacy law

To exercise any of these rights, please email us at support@mia-outlet.com. We'll respond to verified requests within 30 days.

MARKETING COMMUNICATIONS

If you've subscribed to our newsletter or marketing emails, you can unsubscribe at any time by clicking the "unsubscribe" link at the bottom of any marketing email, or by contacting us directly.

Unsubscribing from marketing does not affect emails related to your orders, such as shipping confirmations and delivery updates.

DATA SECURITY

We take reasonable measures to protect your personal information from unauthorized access, loss, or misuse. This includes SSL encryption on our website, secure payment processing, and limited access to personal data within our organization.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

CHILDREN'S PRIVACY

Our store is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

INTERNATIONAL DATA TRANSFERS

If you are accessing our site from outside the country where our servers are located, please note that your information may be transferred to, stored, and processed in other jurisdictions. By using our site, you consent to this transfer.

For EU and UK customers, we ensure that appropriate safeguards are in place for international transfers, in compliance with GDPR and UK-GDPR requirements.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Any significant changes will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

FILING A COMPLAINT

If you believe we are processing your personal information in violation of applicable law, you have the right to file a complaint with your local data protection authority:

- EU: Your national Data Protection Authority
- United Kingdom: Information Commissioner's Office (ICO) at ico.org.uk
- United States (California): California Attorney General at oag.ca.gov/privacy
- Canada: Office of the Privacy Commissioner at priv.gc.ca

We encourage you to contact us first at support@mia-outlet.com so we can try to resolve any concerns directly.

CONTACT

For any questions about this Privacy Policy or how we handle your data, please email us at support@mia-outlet.com.