Privacy policy

At Mia Rose, we take the protection of your personal information seriously. This policy explains what information we collect, what we use it for and what rights you have.

1. Data controller

Contact email: contact@miarosefashion.com

We process your personal information in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and applicable data protection laws.

2. What information we collect

Information you give us when you make a purchase: first name, surname, email, phone number, and delivery and billing address.
Payment information: processed directly by the payment gateway. We do not store your full card details.
Browsing information: IP address, browser type, device, pages visited, date and time of access, and referring page.
Information you send us when you contact us: the content of your messages and any details you include.
Subscription information: your email (and mobile number, if you sign up for SMS) when you subscribe to our communications.

3. How we use your information and the legal basis

To manage your order (processing, shipping, invoicing and handling returns). Legal basis: performance of a contract (Art. 6.1.b GDPR).
To respond to your enquiries by email or chat. Legal basis: legitimate interest and, where applicable, performance of a contract (Art. 6.1.f and 6.1.b GDPR).
To send you marketing communications if you have subscribed. Legal basis: your consent (Art. 6.1.a GDPR).
To send you offers on products similar to those you have purchased. Legal basis: legitimate interest in direct marketing (Art. 6.1.f GDPR). You can object at any time.
To improve our website, measure results and show relevant advertising through cookies. Legal basis: your consent, given through the cookie banner (Art. 6.1.a GDPR).
To meet our legal obligations (tax and accounting). Legal basis: legal obligation (Art. 6.1.c GDPR).

4. How long we keep your information

Order and billing information: for the period required by tax and commercial law (in Spain, up to 6 years).
Subscription information: until you unsubscribe.
Enquiry information: for as long as needed to resolve your enquiry.
Cookies: for the periods set out in our Cookie Policy.

5. Who we share your information with

We never sell your information. We only share it with the service providers we need to run our store:

Shopify (our store platform).
Payment gateways (Shopify Payments, Stripe, PayPal).
Logistics providers and couriers (to prepare and deliver your order).
Our email marketing tool.
Advertising and analytics platforms (Meta/Facebook and Instagram, Google, TikTok), only if you have accepted the relevant cookies.

Some of these providers are located outside the European Economic Area (for example, in the United States, Canada or New Zealand). In these cases, transfers are carried out with appropriate safeguards, such as European Commission adequacy decisions (including the EU–US Data Privacy Framework) or standard contractual clauses.

6. Your rights

You can exercise the following rights at any time:

Access: find out what information we hold about you.
Rectification: correct inaccurate information.
Erasure: ask us to delete your information.
Objection and restriction of processing.
Portability: receive your information in a structured format.
Withdraw your consent at any time.

To exercise these rights, email us at contact@miarosefashion.com stating which right you wish to exercise. We will respond within one month at the latest.

If you believe we have not handled your request properly, you can lodge a complaint with the data protection authority in your country (in Spain, the Spanish Data Protection Agency, www.aepd.es).

7. Newsletter and marketing communications

If you subscribe to our newsletter, we will send you offers and news. You can unsubscribe at any time using the link at the bottom of each email or by emailing us at contact@miarosefashion.com.

8. Security

Our website uses SSL/TLS encryption (you can recognise it by the "https://" and the padlock in your browser), and we apply technical and organisational measures to protect your information.