Privacy Policy Last updated: [DATA DE PUBLICAÇÃO] Introduction This Privacy Policy explains how [NOME LEGAL DA EMPRESA] ("we", "us", "our") collects, uses and protects the personal information you provide when using miravilastore.com. We are the "data controller" for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Who we are Data controller: [NOME LEGAL DA EMPRESA] Address: [ENDEREÇO COMPLETO], United Kingdom Email: [EMAIL@MIRAVILASTORE.COM] Company registration number (if applicable): [NÚMERO] Personal information we collect When you interact with our site, we may collect: - Contact details — name, email address, delivery address, phone number (if provided) - Order and transaction details — items purchased, payment method (last 4 digits and card type only; full card data is handled by Stripe and never touches our servers) - Communications — emails and form messages you send us - Technical data — IP address, browser type, device type, pages visited, cookies (see our Cookie Policy) - Marketing preferences — whether you have opted in to our newsletter We do not collect sensitive personal data (race, religion, health, political views, etc.) as this is not required for our service. How we use your information We use your personal information for the following purposes: - To process and fulfil your orders (legal basis: performance of a contract) - To communicate with you about your order (legal basis: performance of a contract) - To respond to your enquiries (legal basis: legitimate interest) - To send marketing emails, if you have opted in (legal basis: consent) - To improve our website and service (legal basis: legitimate interest) - To detect and prevent fraud (legal basis: legitimate interest) - To comply with legal obligations (legal basis: legal obligation) Who we share your information with We share your personal information only with the following categories of third parties, and only to the extent necessary: - Payment processors — Stripe Payments Europe Ltd (payment processing) - Website platform — Wix.com Ltd (site hosting and infrastructure) - Suppliers and fulfilment partners — for the sole purpose of shipping your order (name and delivery address only) - Analytics — Google Analytics (anonymised or pseudonymised data only) - Advertising platforms — Google Ads and Meta (Facebook / Instagram), only if you have consented to marketing cookies - Legal authorities — where we are required by law to disclose We never sell your personal information to any third party. International data transfers Some of our service providers are based outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place (Standard Contractual Clauses approved by the UK Information Commissioner's Office, or transfers to countries with adequate protection recognised by the UK government). How long we keep your information - Order records: 7 years (required for UK tax and accounting purposes) - Marketing subscribers: until you unsubscribe - Enquiry emails: 2 years from last contact - Analytics data: 26 months (Google Analytics default) Your rights under UK GDPR You have the right to: - Access — request a copy of the personal data we hold about you - Rectification — ask us to correct inaccurate data - Erasure — ask us to delete your data (subject to legal obligations) - Restriction — ask us to limit how we use your data - Objection — object to certain uses (e.g. marketing) - Data portability — receive your data in a structured, machine-readable format - Withdraw consent — where processing is based on consent, at any time - Complain to a supervisory authority — the UK Information Commissioner's Office (ICO): ico.org.uk / 0303 123 1113 To exercise any of these rights, email us at [EMAIL@MIRAVILASTORE.COM]. We will respond within one month. Security We take appropriate technical and organisational measures to protect your personal information from loss, misuse and unauthorised access. Our website uses SSL encryption (HTTPS). Payment card data is processed exclusively by Stripe and is not stored on our servers. Children's privacy Our site is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will delete it. Changes to this Privacy Policy We may update this policy from time to time. Material changes will be notified via email (if you are subscribed) or a prominent notice on the site. The current version will always be available on this page. Contact Any questions about this Privacy Policy or how we handle your data: Email: [EMAIL@MIRAVILASTORE.COM] Post: [ENDEREÇO COMPLETO], United Kingdom