Date of the most recent update: July 1, 2023.

In compliance with the Laws of Personal Data Protection Held by Individuals, we provide you with this comprehensive privacy notice, and we inform you that this Policy applies to Users who access the Website, regardless of whether they are nationals of the European Union (EU) or not. The rights and obligations of Users residing in the EU shall be governed in accordance with the General Data Protection Regulation of the European Union (EU GDPR), and Users residing in countries outside the EU will obtain the rights provided by the legislation of their country.

If you have any questions or concerns regarding this Policy, you can contact us at info@miraboutique.com.

This notice explains the types of information we may collect from you when you access or use the website www.miraboutique.com ("Website") and our practices for collecting, using, maintaining, protecting, and disclosing information.

This Policy, together with the Terms and Conditions, constitutes and serves as an agreement between you and us.

The Policy applies only to information collected by us during your use of the website, in emails, and other electronic communications sent through the website. This Policy does not apply to information you provide or that is collected by a third party, such as a logistics service provider or social networks that you may use. We encourage you to directly consult such third parties regarding their privacy practices. Your personal information will be processed and stored subject to your explicit consent, which will be obtained at the time of registration on the website and/or at any other time we collect your personal information (defined below).

By accessing or using the website and/or registering for an account on the website, you agree to this Policy and consent to our collection, use, disclosure, retention, and protection of your personal information as described herein.

In the event that you do not provide the information required by us, we may not be able to provide you with full use/access of the website, including processing orders for clothing accessories ("Products") displayed on the website.

1. INFORMATION COLLECTION

We respect your privacy and are committed to protecting it in all aspects of any unlawful disclosure. In order to offer the most enriching and holistic experience to facilitate your use of the website, we collect various types of information from and about you, including:

a. Information about your internet connection, the equipment you use to access the website, and your usage details.

b. Personal information: Personal information is information, including an opinion, that is part of a database, which can be associated with a specific person and could be used to identify that specific person, either from that data or from data and other information we have. We collect personal information about our users to provide our products, services, and customer care. Our products, services, and customer care are provided through many platforms, including, among others: Website, email, and mobile phone number. Personal information does not include information that has been made anonymous or aggregated so that it can no longer be used to identify a specific person, either in combination with other information or otherwise, and is not covered by this privacy policy. However, such non-personal information may be used in conjunction or linked to existing personal information; when used in this form, it will be treated as personal information. As such, this privacy policy will list both types of information for the sake of transparency.

No information that is freely available and accessible in the public domain or provided to any authority, organization, department, or the public in general without our act or breach under any applicable law at that time will be considered 'sensitive'.

2. INFORMATION COLLECTED BY US FROM YOU:

a. Directly from you when you provide it to us; and/or

b. Automatically as you browse our Services (automatically collected information may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies).

c. Information you provide to us: We use the information you provide to us to improve the functionality and quality of the website and services, and to personalize your experience when using our website. We also use this information to display relevant advertising, provide assistance, communicate with you, and fulfill our legal obligations.

. Account information: Your full name, email address, zip code, password, and any other information you may provide when creating an account, such as your mobile phone number. Optionally, you may provide us with this information through third-party login services such as Facebook and Google Connect/Login ("Third-Party Service Provider"). In such cases, we obtain and store any information you provide through such Third-Party Service Provider.

  Your preferences: Your preferences and settings, such as time zone and language.

. Your searches and other activities: The search terms you searched for and the results you selected.

. Your browsing information: How long you used the website and which features you used.

To avoid any doubt, it is clarified that we do not store any financial or transactional information. In case you make payments through any of the payment options we provide on the website, you will be redirected to the online payment gateway service provider, which will collect, store, and process your information according to the payment option you have chosen. This will be governed by the privacy practices of that online payment gateway service provider. We encourage you to follow the privacy practices of that payment service provider.

d. Information we collect through data collection technologies: We may automatically collect certain information about the computer or devices (including mobile devices) you use to access the website and your use of the website, even if you use the website without registering or logging in.

. Usage information: Details of your use of the website, including traffic data, location data, logs, and other communication data and the resources you access and use on or through the website.

. Computer and device information: Information about your computer, internet connection, and mobile device, including your IP address, operating systems, platforms, browser type, other browsing information (connection, speed, connection type, etc.), device type, unique device identifier, mobile network information, and device phone number.

. Mobile device ID: Unique mobile device identifier (e.g., IDFA or other device IDs on Apple devices like iPhone and iPad), if you are using the website on a mobile device, we may use a mobile device ID (the unique identifier assigned to a device by the manufacturer), instead of cookies, to recognize you. We may do this to store your preferences and track your use of the website. Unlike cookies, mobile device IDs cannot be deleted. Advertising companies may use device IDs to track your use of the website, track the number of ads displayed, and measure the performance of advertising and display ads that are more relevant to you. Analytics companies may use mobile device IDs to track your use of our applications.

. Your preferences: Your preferences and settings, such as time zone and language.

. Your activity on the website: Information about your activity on the website, such as your search queries, domain names, selected search results, number of clicks, pages visited, and the order of those pages, how long you visited the website, the date and time you used the website, error logs, and similar information.

Cookies

As a general rule, we use cookies, pixel tags, web beacons, mobile device IDs, flash cookies, and similar files or technologies to collect and store information regarding your use of the website. A cookie is a small text file stored on your computer that allows us to recognize you (e.g., as a registered user) when you visit our website.

Most browsers are configured to automatically allow cookies. Please note that it is possible to disable some (but not all) cookies through your device or browser settings, but doing so may interfere with certain functions on the website. The major browsers provide users with several options regarding cookies. Typically, users can configure their browsers to block all third-party cookies (which are set by third-party companies that collect information on websites operated by other companies), block all cookies (including first-party cookies, such as those we use to collect search information on user activity), or block specific cookies. You will need to opt-out on each browser and each device you use to access the website. By using the website with your browser set to accept cookies, you agree to our use of cookies as described in this section.

Third parties whose products or services are accessible or advertised through the website, including social media services, may also use cookies or similar tools, and we recommend that you review their privacy policies for information about their cookies and other practices. We do not control the practices of such partners, and their privacy policies govern their interactions with you.

■ By default, cookies are not automatically installed (except for those cookies necessary for the operation of the website and its services, and you will be informed of their installation through a notification). To avoid being bothered by these routine authorization requests and to enjoy uninterrupted browsing, you can configure your device to automatically accept our cookies.

3. STORAGE, PROCESSING, AND EXCHANGE OF INFORMATION

We collect the above information from you solely to provide better and more efficient services through the website. The information provided by you enables us to improve our website and provide you with the easiest-to-use experience while transacting with us to obtain recently developed and/or customized written content according to your specifications and requirements. The service and the website rely on the information sought, and we may use such information to maintain, protect, and improve the services (including advertising services). However, the website will retain the data uploaded by you on the website for our record-keeping purposes.

The information thus collected may vary from individual to individual and may, therefore, be stored with different controllers and processors associated with us, as per the processing requirement.

We take appropriate security measures to protect against any unauthorized access, alteration, modification, disclosure, or destruction of the data uploaded and stored by you. These include internal reviews of our data collection, storage, and processing practices and security measures, including appropriate encryption and physical security measures to guard against unauthorized access to systems where we store personal data. We have implemented appropriate physical, electronic, and administrative procedures to safeguard and help prevent unauthorized access to your information and maintain data security. These security measures take into account the sensitivity of the information we collect, process, and store, and the current state of technology. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it.

All information collected on the website is securely stored in a database controlled by us and the data controller and processors. The database is stored on servers protected by a firewall; access to the servers is password-protected and strictly limited. However, effective as our security measures may be, no security system is impenetrable. We cannot guarantee the security of our database, nor can we guarantee that the information you supply will not be intercepted while being transmitted to us over the Internet. Internet is an ever-evolving medium. We may change our Privacy Policy from time to time to incorporate necessary future changes. Of course, our use of any information we gather will always be consistent with the policy under which the information was collected, regardless of what the new policy may be.

We do not assume any responsibility for the disclosure of your information due to errors in transmission, unauthorized third-party access, or other causes beyond our control. You play an important role in keeping your personal information secure. You should not share your username, password, or other security information for your user account with anyone. If we receive instructions using your username and password, we will consider that you have authorized the instructions.

Hereby, we explicitly inform you that any information you upload, share, or place on the website will be visible and accessible for record-keeping, analysis, and verification by an authorized third party appointed by us for the purpose of providing services, including the use of the website. We take all reasonable measures to protect all information collected by us, and the same is shared with third-party subcontractors only to complete the contractual transaction between you and us.

4. USE OF INFORMATION

We use the information we collect from you and about you for a variety of purposes, including:

a. Processing, fulfilling, and delivering orders;

b. Sharing order updates, shipping status;

c. Processing and responding to your inquiries;

d. Providing customer support;

e. Understanding your usage (how you use the website, what features you like, etc.), improving the content and features of the website;

f. Diagnosing technical problems;

g. Sending you communications you have requested or that may be of interest to you via emails, messaging, certified mail, phone calls, or any other mode of communication;

h. Generating and reviewing reports and data about our user base and patterns of use of the Service, and conducting research in this regard;

i. Fulfilling our obligations and enforcing our rights arising from contracts between you and us, including billing and collection purposes;

j. Assisting you with password recovery and policy changes;

k. Preserving the history as governed by existing laws or policies;

l. Sending information including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages; communicating about promotions, upcoming events, and other news about products and services we offer;

m. Complying with any applicable laws, regulations, and legal processes;

n. In response to a law enforcement authority or other governmental official's official request;

o. Enforcing applicable Terms of Service, including investigating potential violations;

p. Detecting, preventing, or addressing fraud, security, or technical issues;

q. Protecting against harm to our rights, property, or safety, to our users, or the public as required or permitted by law;

r. Disclosure may also be necessary for our audit or to investigate a complaint or threat to security.

5. INFORMATION EXCHANGE

a. General Disclosures

We may disclose the information we collect or that you provide, as described in this Policy, in the following ways:

1. To our contractors, service providers, and other third parties we use to support our business (e.g., logistics service providers, online payment gateway service providers) who are bound by contractual obligations to maintain the confidentiality of personal information and use it only for the purposes we disclose it for.

2. To third parties to market their products or services if you have consented to receive promotional updates.

We require these third parties, by contract, to maintain the confidentiality of personal information and to use it only for the purposes for which we disclose it.

3. To fulfill the purpose for which you provide it.

4. For any other purpose disclosed by us when you provide the information.

b. Legal Purposes

We may share your information when we believe in good faith that such sharing is reasonably necessary to:

1. Investigate, prevent, or take action regarding potential illegal activities.

2. Comply with legal process.

3. Investigate and address threats or potential threats to the physical safety of any person.

4. Investigate and address violations of this Privacy Policy or the Terms and Conditions.

5. Investigate and address violations of the rights of third parties and/or protect the rights, property, and safety of the Company, its employees, users, or the public. This may involve sharing your information with law enforcement agencies, government agencies, courts, and/or other organizations due to a lawful request, such as a subpoena, court order, or government demand to comply with the law.

c. To enforce or apply our Terms and Conditions and other agreements.

d. Consent

We may share your information in any other circumstance when we have your consent.

Advertisers, Co-sponsors, and Links to Others

We use third-party advertising companies to serve ads when you visit our website. These companies may use information (excluding your name, address, email address, or telephone number) about your visits to this and other websites to provide advertisements about goods and services of interest to you. The website may contain or display information from sponsors, co-sponsors, advertisers, operational service providers, or others who offer information, products, and/or services available and/or provide opportunities to participate in promotions or engage in activities or who link or redirect the User's browser to other websites, web pages, materials, or organizations. We encourage you to exercise caution when leaving the website or taking advantage of advertised offers, links, or other references, many of which may direct you to their websites or third-party web pages. You should read their privacy statements and the terms and conditions that apply because we are not responsible for any of the terms and conditions, privacy practices, content, features, activities, and/or transactions in which you may engage when not using the website.

6. RIGHTS UNDER THE EU GDPR

The European Union General Data Protection Regulation (EU GDPR) has provided the following rights to EU residents. You may exercise the rights mentioned below when we obtain or hold personal information about you, access the personal information we have about you, and obtain its correction, updating, modification, or deletion under appropriate circumstances. Some of these rights may be subject to certain exceptions or limitations:

a. RIGHT TO ACCESS OR RECTIFY YOUR INFORMATION:

You have the right to request that we access, rectify, or delete your information stored with us. You can ask us to verify whether we are processing personal information about you. You can ask us to rectify our records if you believe they contain incorrect or incomplete information about you.

The right to access or rectify your information can be requested by contacting info@miraboutique.com (hereinafter, the "Designated Email ID").

b. RIGHT TO LIMIT PROCESSING:

You have the right to restrict the processing of your personal information in circumstances where:

- You question the accuracy of the personal information.

- You prefer to restrict its use instead of having it deleted.

- You believe that we no longer need the personal information for processing, but you may need it for the establishment, exercise, or defense of legal claims.

- You have objected to the processing, pending verification of that objection.

Please note that we will duly inform you before revoking the processing restriction.

The restriction of processing can be requested at the Designated Email ID.

c. RIGHT TO OBJECT TO PROCESSING:

You have the right to object to us processing your information for reasons related to your particular situation, but only to the extent that the processing is necessary for:

- The performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or

- The purposes of the legitimate interests pursued by us or by a third party.

If you make such an objection, we will cease processing the personal information unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims. You can object to the processing of your personal information by sending your objections to the Designated Email ID.

d. RIGHT TO OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES:

You have the right to object to us processing your personal information for direct marketing purposes, including profiling.

If you make such an objection, we will stop processing your personal information for this purpose. You can object to the processing by sending your objections to the Designated Email ID.

e. RIGHT OF OBJECTION FOR SCIENTIFIC OR HISTORICAL RESEARCH OR STATISTICAL PURPOSES:

You have the right to object to us processing your personal information for scientific or historical research or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest. You can object to the processing by sending your objections to the Designated Email ID.

f. RIGHT TO DATA PORTABILITY:

When you have provided us with personal information, you can ask us to transmit that personal information (in a structured, commonly used, and machine-readable format) directly to another company if technically feasible.

g. RIGHT TO ERASURE:

You have the right to have your personal information erased without undue delay in circumstances where:

- The personal information is no longer necessary in relation to the purposes for which it was collected or processed.

- You withdraw the consent on which the processing is based.

- You object to the processing under certain data protection rules.

- The personal information has been unlawfully processed.

- The personal information has to be erased for compliance with a legal obligation.

Please note that there are certain exclusions from the right to erasure. Such exclusions include when the processing is necessary:

- For exercising the right of freedom of expression and information.

- For compliance with a legal obligation.

- For the establishment, exercise, or defense of legal claims.

You can request the erasure of your information by contacting the Designated Email ID.

h. RIGHT TO WITHDRAW CONSENT

Your participation and all survey invitations are always voluntary, and you can withdraw your consent at any time. The withdrawal will not affect the legality of any processing carried out before you withdraw your consent. You can withdraw your consent/cancel your membership in the following ways:

- Sending your request to the designated email address.

- Selecting the unsubscribe link provided in each email invitation.

i. RETENTION AND DELETION OF YOUR PERSONAL INFORMATION

We do not delete your personal information at our own discretion. You are responsible for controlling the periods of time during which you wish to retain this information. There are controls in your account where you can delete all personal information in your account. You can delete your personal information by sending your request to the designated email address. Please note that your personal information will not be retained by us for a longer period. However, we may retain your information to comply with a legal obligation to which we are subject or to protect your vital interests or the vital interests of another natural person.

7. DATA ENCRYPTION

All personal information transmitted and stored on our server is fully encrypted.

8. ACCOUNT TERMINATION

You can close/cancel your account by visiting the profile settings page on the website. We may retain information about you for purposes authorized under this Policy, unless prohibited by law. From then on, we will either delete your personal information or de-identify it so that it becomes anonymous and cannot be attributed to your identity. For example, we may retain information to prevent, investigate, or identify potential irregularities related to the website or to comply with legal obligations.

9. TO CONTACT OUR PRIVACY OFFICER

If you have an inquiry or complaint about the way we handle your Personal Information, or if you wish to exercise your privacy rights regarding the personal information we have about you, you can contact our Privacy Officer in the following way:

By email: info@miraboutique.com

For the purposes of GDPR, our Privacy Officer is also our Data Protection Officer (DPO).

While we strive to resolve complaints quickly and informally, if you wish to proceed with a formal privacy complaint, we request that you submit your complaint in writing to our Privacy Officer, via mail or email as indicated above. We will acknowledge receipt of your formal complaint within 10 business days of receiving it.

If we do not resolve your privacy complaint to your satisfaction, you may proceed with the legal remedy in accordance with the Jurisdiction and Applicable Law Clause provided in the Website's Terms and Conditions.

10. MODIFICATIONS

We reserve the right to modify this Privacy Policy from time to time to reflect changes in the law, our data collection and usage practices, the features of our services, or technological advancements. The use of the information we collect is subject to this Privacy Policy in effect at the time such information is used. If we make significant changes to this Privacy Policy, we will notify you of the changes. Please review the latest updated date mentioned at the beginning. Please review the changes carefully. Your continued use of the Services after the posting of changes to this Privacy Policy will constitute your consent and acceptance of such changes.