Privacy policy
Privacy policy
Last updated: October 2026
MIUUR operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”).
MIUUR is operated by Ignacio Cristofori, trading as MIUUR, and is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, disclose and otherwise process your personal information when you visit, use or make a purchase or other transaction using the Services, create or use a customer account, communicate with us or otherwise interact with MIUUR.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.
Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read and understood this Privacy Policy.
Data Controller
For the purposes of applicable data protection laws, including the General Data Protection Regulation (“GDPR”), the data controller is:
Ignacio Cristofori, trading as MIUUR
NIF: Y8130709Q
Calle Larrein 6
01170 Legutiano, Álava
Spain
Email: care@miuur.com
Telephone: +34 677 30 45 75
Personal Information We Collect or Process
When we use the term “personal information,” we mean information that identifies you or can reasonably be linked to you or another identifiable individual.
Personal information does not include information that has been anonymised or de-identified so that it can no longer reasonably identify or be linked to an individual.
Depending on how you interact with the Services, where you live and what products or features you use, we may collect or process the following categories of personal information:
- Contact details, including your name, billing address, shipping address, telephone number and email address.
- Financial and payment information, including payment card information, transaction details, payment method and payment confirmation information. Payment information may be processed directly by Shopify or other authorised payment providers.
- Account information, including your account identifiers, preferences and settings.
- Transaction information, including products you view, place in your cart, add to your wishlist, purchase, return, exchange or request information about, as well as your transaction history.
- Communications with us, including information contained in customer service enquiries, emails, messages, return requests, reviews or other communications.
- Device information, including information about your device, browser, network connection, IP address and other online identifiers.
- Usage information, including information about how and when you interact with or navigate the Services.
- Marketing and preference information, including your communication preferences, marketing consent and interactions with promotional communications where applicable.
- Fraud and security information, including signals or information used to detect, investigate or prevent potentially fraudulent or unauthorised activity.
Personal Information Sources
We may collect personal information from the following sources:
- Directly from you, including when you create an account, place an order, browse or use the Services, request a return, contact customer service, subscribe to marketing communications or otherwise provide information to us.
- Automatically through the Services, including from your device, browser and use of cookies and similar technologies.
- From Shopify and our service providers, where they provide technology, payment, fraud prevention, analytics, fulfilment, shipping, communications, hosting or other services on our behalf.
- From business, advertising or marketing partners, where permitted by applicable law.
- From other third parties, where you have directed or authorised them to provide information to us or where permitted by law.
How We Use Your Personal Information
Depending on how you interact with us and which Services you use, we may use personal information for the following purposes:
Provide, Tailor and Improve the Services
We use personal information to:
- process and fulfil orders;
- process payments;
- arrange shipping and delivery;
- provide order confirmations and shipping notifications;
- manage customer accounts;
- process returns, exchanges and refunds;
- provide customer support;
- remember preferences and wishlist activity;
- improve the functionality and experience of the Services;
- personalise aspects of the shopping experience;
- respond to questions, requests and complaints.
Marketing and Advertising
Where permitted by applicable law, we may use personal information to:
- send promotional and marketing communications;
- provide information about products, launches, collections and offers;
- measure marketing effectiveness;
- show advertising based on your interactions with the Services or, where permitted, interactions with other websites or merchants.
Where consent is required, we will only send marketing communications or use certain advertising technologies after obtaining the necessary consent.
You may withdraw or change your marketing preferences at any time.
Security and Fraud Prevention
We may use personal information to:
- authenticate accounts;
- provide a secure shopping and payment environment;
- detect and prevent fraud;
- investigate suspicious or unlawful activity;
- protect MIUUR, our customers, our service providers and third parties;
- secure our systems and Services.
Communicating with You
We use personal information to:
- answer customer service enquiries;
- provide information about orders;
- communicate about shipping, returns or refunds;
- send transactional communications;
- respond to complaints or legal requests;
- maintain our business relationship with you.
Legal and Regulatory Purposes
We may use personal information to:
- comply with tax, accounting, consumer protection, data protection and other legal obligations;
- respond to lawful requests from public authorities;
- establish, exercise or defend legal claims;
- enforce our Terms of Service and policies;
- investigate suspected violations of our terms or applicable law.
Legal Bases for Processing
Where the GDPR or other applicable European data protection laws apply, we process personal information on one or more of the following legal bases:
- Performance of a contract: where processing is necessary to process and fulfil your order, manage payment, arrange delivery, process a return or refund, provide customer account services or otherwise perform our contract with you.
- Legal obligation: where processing is necessary to comply with tax, accounting, consumer protection, anti-fraud or other legal obligations.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as operating and improving the Services, providing customer support, preventing fraud, securing our systems, understanding business performance and protecting our legal rights, provided those interests are not overridden by your rights and freedoms.
- Consent: where we rely on your consent, including for certain marketing communications, advertising technologies or cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
How We Disclose Personal Information
In certain circumstances, we may disclose personal information to third parties for legitimate business purposes and subject to applicable law.
This may include disclosure:
- to Shopify, which hosts and provides technology for our online store;
- to payment providers that process transactions;
- to shipping, fulfilment and logistics providers in order to deliver orders;
- to technology, hosting, cloud storage and IT service providers;
- to customer service providers;
- to analytics providers;
- to fraud prevention and security providers;
- to marketing and advertising partners, where permitted by law and subject to applicable consent requirements;
- where you instruct or authorise us to disclose information;
- to professional advisers, such as accountants, lawyers or consultants, where necessary;
- in connection with a business sale, restructuring, merger or similar transaction;
- where disclosure is required to comply with a legal obligation or lawful request;
- where necessary to establish, exercise or defend legal claims or protect the rights of MIUUR, our customers or others.
We do not disclose personal information for purposes unrelated to those described in this Privacy Policy unless permitted or required by applicable law.
Relationship with Shopify
The Services are hosted by Shopify.
Shopify collects and processes certain personal information about your access to and use of the Services in order to provide and improve the Shopify platform and related services.
Information submitted through the Services may be transmitted to and processed by Shopify and other third parties that may be located in countries other than the country in which you reside.
Shopify may also process information in connection with certain enhanced platform features, fraud prevention, analytics, payments, personalisation or advertising technologies.
To learn more about Shopify's processing of personal information, please review the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users
You may also access Shopify's privacy portal at:
Third-Party Websites and Links
The Services may contain links to websites or online platforms operated by third parties.
If you follow a link to a website or service that is not operated or controlled by MIUUR, you should review that third party's privacy policy, security practices and terms.
We are not responsible for the privacy, security, content or accuracy of third-party websites or platforms.
Information you publish in public or semi-public environments, including social media platforms, may be visible to other users and may be used by third parties outside our control.
Cookies and Similar Technologies
We and our service providers may use cookies, pixels, local storage and similar technologies to:
- operate the website;
- remember preferences;
- maintain shopping cart and account functionality;
- analyse website traffic and performance;
- detect fraud or security issues;
- measure marketing performance;
- provide personalised content or advertising where permitted.
Where required by applicable law, non-essential cookies or similar technologies will only be used after you have provided the necessary consent.
You may be able to manage your cookie preferences through the cookie controls made available on the Services.
Children's Data
The Services are not directed to children.
We do not knowingly collect personal information from children who are below the minimum age required to consent to the processing of their personal information under applicable law.
If you are a parent or legal guardian and believe that a child has provided personal information to us improperly, please contact us using the details set out below.
We will take reasonable steps to delete such information where required by law.
Security of Your Information
We take reasonable administrative, technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
We recommend that you do not send sensitive or confidential information through insecure communication channels.
Retention of Your Information
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:
- maintaining and servicing customer accounts;
- fulfilling orders and providing customer service;
- complying with tax, accounting and other legal obligations;
- resolving disputes;
- preventing fraud;
- enforcing agreements and policies;
- establishing, exercising or defending legal claims.
The specific retention period may vary depending on the category of information and applicable legal requirements.
When personal information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.
Your Rights and Choices
Depending on where you live and the applicable law, you may have some or all of the following rights in relation to your personal information.
These rights are not absolute and may be subject to legal limitations or exceptions.
Right of Access
You may have the right to request confirmation as to whether we process your personal information and to obtain access to that information.
Right to Correction
You may have the right to request correction of inaccurate or incomplete personal information.
Right to Deletion
You may have the right to request deletion of personal information in certain circumstances.
Right to Portability
You may have the right to receive certain personal information in a structured, commonly used and machine-readable format and, where applicable, request its transmission to another organisation.
Right to Object
You may have the right to object to certain processing based on legitimate interests, including certain forms of direct marketing.
Right to Restrict Processing
You may have the right to request restriction of certain processing activities.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Right to Opt Out of Certain Advertising Uses
Depending on where you reside, you may have rights to opt out of certain forms of targeted advertising, sharing or similar processing.
Where available, Shopify may provide mechanisms to exercise certain privacy choices.
Managing Communication Preferences
You may unsubscribe from promotional emails at any time by using the unsubscribe link included in those emails.
Even if you unsubscribe from marketing communications, we may continue to send non-promotional communications relating to orders, accounts, legal notices, security or customer service.
Rights of Individuals in the European Economic Area and United Kingdom
If you reside in the European Economic Area or United Kingdom, you may have additional rights under applicable data protection legislation, including the rights to:
- access your personal information;
- correct inaccurate information;
- request deletion where applicable;
- restrict processing;
- object to processing based on legitimate interests;
- object to direct marketing;
- receive certain information in portable form;
- withdraw consent where processing is based on consent;
- lodge a complaint with a competent supervisory authority.
You may exercise your rights by contacting us using the details provided below.
We may need to verify your identity before processing certain requests.
We will respond within the time periods required by applicable law.
Automated Decision-Making
Where we or our service providers use automated systems for purposes such as fraud prevention, risk assessment or security, such processing may involve automated evaluation of transaction or account information.
Where applicable law grants you rights in relation to solely automated decisions that produce legal or similarly significant effects, those rights will apply.
Complaints
If you have concerns or complaints regarding our processing of personal information, please contact us first using the contact details set out below.
We will make reasonable efforts to address your concerns.
If you are located in Spain or the European Economic Area, you also have the right to lodge a complaint with the competent data protection authority.
In Spain, the supervisory authority is:
Agencia Española de Protección de Datos (AEPD)
You may also contact the supervisory authority applicable to your country of residence.
International Transfers
Because MIUUR uses Shopify and other international service providers, personal information may be transferred to, stored in or processed in countries outside the country in which you reside.
Where personal information is transferred outside the European Economic Area or United Kingdom to a country that has not been recognised as providing an adequate level of protection, we will rely on an appropriate transfer mechanism where required by applicable law.
Such mechanisms may include:
- European Commission Standard Contractual Clauses;
- equivalent UK transfer mechanisms;
- adequacy decisions;
- other recognised legal safeguards.
Additional information regarding Shopify's international data processing practices is available in Shopify's privacy documentation.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect:
- changes to our Services;
- changes to our business practices;
- changes to service providers;
- legal or regulatory requirements.
When we update this Privacy Policy, we will revise the “Last updated” date shown at the top of the policy.
Where required by applicable law, we will provide additional notice of material changes.
Contact
For questions about this Privacy Policy, our privacy practices or the exercise of your data protection rights, please contact:
Data Controller:
Ignacio Cristofori, trading as MIUUR
NIF: Y8130709Q
Address: Calle Larrein 6, 01170 Legutiano, Álava, Spain
Email: care@miuur.com
Telephone: +34 677 30 45 75
For the purposes of applicable data protection laws, Ignacio Cristofori, trading as MIUUR, is the controller of the personal information processed by MIUUR, except where another organisation, such as Shopify, acts as an independent controller for specific processing activities as described in its own privacy documentation.