Privacy Policy

Last updated: 16 days ago

This policy explains what personal information we collect when you visit or buy from https://officialmiso.com, why we collect it, who we share it with, how long we keep it and what rights you have over it.

1. Who we are

Miso is the data controller for the information described here.

Website: https://officialmiso.com
Email: info@officialmiso.com

If you have any question about how we handle your information, email us and we will answer it directly.

2. What we collect

Information you give us:

  • Name, email address, delivery address, billing address and phone number when you place an order
  • Email address when you subscribe to marketing or enter a giveaway
  • The content of any message you send us, including photos you send with a return request
  • Any review or photo you choose to submit

Information we collect automatically:

  • Device and browser type, operating system, screen size and language
  • IP address and approximate location derived from it
  • Pages you viewed, what you clicked, how long you stayed and which site or advert referred you
  • Cookie identifiers and similar technologies, described in our Cookie Policy

Payment information: we never see or store your full card number. Card details are entered directly into Shopify Payments and processed by them. We only receive confirmation of payment, the last four digits and the card type.

Health related information: if you tell us about a skin reaction or a skin condition as part of a return or a support request, that is special category data. We only use it to handle your specific query and any product safety follow up, and we keep it no longer than we need to.

3. Why we use it, and our legal basis

  • To fulfil your order, take payment, deliver it and provide support. Legal basis: performance of a contract with you.
  • To prevent fraud and screen orders for risk. Legal basis: legitimate interests, protecting our business from fraudulent transactions.
  • To send marketing emails about products and offers. Legal basis: your consent, or soft opt in where you have bought from us and we are telling you about similar products. You can unsubscribe at any time from the link in every email.
  • To improve our website and measure our advertising, using analytics and advertising cookies. Legal basis: your consent, given through our cookie banner.
  • To meet legal obligations, such as keeping accounting records. Legal basis: legal obligation.
  • To investigate product safety issues where you report a reaction. Legal basis: legal obligation under cosmetic product safety rules, and substantial public interest in public health.

4. Who we share it with

We do not sell your personal information. We share it only with the providers we need to run the shop:

  • Shopify, which hosts our online store and processes orders. Shopify's privacy policy is at https://www.shopify.com/legal/privacy
  • Shopify Payments, which takes your payment and screens the transaction for fraud
  • Our fulfilment partner and delivery carriers, who receive your name, address and phone number in order to pack and deliver your parcel
  • Klaviyo, our email marketing platform, which stores your email address, order history and how you interact with our emails
  • Meta Platforms, which we use to advertise. Where you have accepted advertising cookies, Meta receives event data about your visit so we can measure whether an advert led to a purchase
  • Judge.me, our reviews platform, if you submit a review or photo
  • Professional advisers and authorities, where we are legally required to disclose information

5. International transfers

Some of these providers are based outside the UK, including in the United States, and our fulfilment partner is based in Asia. Where information is transferred outside the UK we rely on approved safeguards such as the UK International Data Transfer Addendum or an adequacy decision, so your information keeps an equivalent level of protection.

6. How long we keep it

  • Order and transaction records: 7 years, to meet accounting requirements
  • Customer service emails: 3 years from the last contact
  • Marketing contact details: until you unsubscribe, then on a suppression list so we do not email you again by mistake
  • Analytics and advertising data: as set out in our Cookie Policy, typically up to 26 months
  • Skin reaction reports: 5 years, as part of our product safety records

7. Your rights

Under UK GDPR you have the right to:

  • Ask what we hold about you and receive a copy
  • Have inaccurate information corrected
  • Ask us to delete your information, where we have no ongoing lawful reason to keep it
  • Object to processing based on legitimate interests, and to direct marketing at any time
  • Ask us to restrict processing while a dispute is resolved
  • Receive your information in a portable format
  • Withdraw consent at any time, without affecting anything done before you withdrew it

To exercise any of these, email info@officialmiso.com. We respond within one month. We may ask you to confirm your identity first, so we do not hand your information to someone else.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

8. Children

Our store is not intended for children. We do not knowingly collect information from anyone under 16. If you believe a child has given us their information, email us and we will delete it.

9. Security

Our site runs over encrypted connections, payment data is handled by PCI compliant providers, and access to customer data is limited to people who need it. No system is perfectly secure, but we take these obligations seriously and will notify you and the ICO where required if a breach puts your rights at risk.

10. Changes

If we change this policy we will update the date at the top. Where changes are significant we will tell you by email or a notice on the site.