Privacy policy

Privacy Policy

Last updated: 4 November 2026

This Privacy Policy explains how MIAVKA S.à r.l. (“MIAVKA”, “we”, “us”) processes personal data when you visit miavka.com (the “Site”), place an order, create a customer account, subscribe to our newsletter or contact us. It applies to all customers, including customers in Norway, the United Kingdom and Switzerland, and should be read together with our Terms of service. Information about cookies and similar technologies is included in section 5.

1. Who is responsible

The controller is MIAVKA S.à r.l., 13, rue Annette Schwall-Lacroix, L-2568 Luxembourg, RCS Luxembourg B287819, VAT LU35904014. Contact: hello@miavka.com, +352 270 234.

2. What we process, why and for how long

Purpose	Data	Legal basis	Retention
Orders, payment and delivery	Name, delivery and billing address, email, phone number, order details, payment status, information needed for customs clearance. We do not receive your full card number; payments are handled by the payment providers.	Performance of the contract (Art. 6(1)(b) GDPR)	Until the order is completed, then see accounting below
Accounting, tax and legal obligations	Invoices, order and payment records	Legal obligation (Art. 6(1)(c) GDPR)	For the period required by Luxembourg accounting and tax law (currently ten years)
Customer service, withdrawals, returns and complaints	Contact details, order details, your messages and our replies	Performance of the contract and our legitimate interest in handling your requests (Art. 6(1)(b) and (f) GDPR)	As long as needed to handle the request, then for the applicable limitation period
Customer account	Name, email, addresses, order history	Performance of the contract (Art. 6(1)(b) GDPR)	Until you delete your account or ask us to delete it, unless we must keep data by law
Fraud prevention and security	Order data, IP address, device and browser data	Our legitimate interest in protecting the shop and our customers (Art. 6(1)(f) GDPR)	As long as needed for this purpose
Operating the Site	IP address, device and browser data, pages viewed, server logs	Our legitimate interest in running and securing the Site (Art. 6(1)(f) GDPR)	As long as needed for this purpose
Marketing emails from MIAVKA (news and offers), sent through Shopify	Email address, name and country if you give them, date and source of your subscription, and how you interact with our emails (for example whether you open or click them)	Your consent (Art. 6(1)(a) GDPR), given by ticking the box at checkout or in a sign-up form	Until you unsubscribe
Substack newsletter	Email address and the data you give Substack when you subscribe there	Your consent (Art. 6(1)(a) GDPR)	Until you unsubscribe
Advertising and measurement with the Meta Pixel (Facebook and Instagram)	Pages and products viewed, items added to the cart, purchases, IP address, browser and device data, cookie identifiers. See section 6.	Your consent (Art. 6(1)(a) GDPR)	Until you withdraw your consent; the cookie lifetimes are described in section 5
Analytics and measurement with Google Analytics and the Google tag (Google & YouTube)	Pages and products viewed, how you reached the Site, items added to the cart, purchases, IP address, browser and device data, cookie identifiers. See section 6.	Your consent (Art. 6(1)(a) GDPR)	Until you withdraw your consent; the cookie lifetimes are described in section 5
Showing our products in Google Shopping and other Google services	Product, price, shipping and return information of our shop. No personal data of our customers. See section 6.	Not personal data of visitors; for our business contact data, our legitimate interest in presenting our products (Art. 6(1)(f) GDPR)	As long as the products are listed
Other cookies that are not strictly necessary	See section 5	Your consent (Art. 6(1)(a) GDPR)	See section 5

If you do not give us the data we need for an order (for example your delivery address), we cannot deliver it. Acceptance of our Terms of service is not consent to marketing or to non-essential cookies.

3. Who receives your data

• Shopify hosts the shop and processes orders, checkout and customer accounts for us, and sends our marketing emails to customers who agreed to receive them. For some purposes, such as its own fraud analysis, Shopify acts as an independent controller. Shopify also uses customer data together with data from other Shopify stores to improve its products, ad targeting and personalization (Shopify Network Intelligence), as described in Shopify's Additional Services Terms. No other merchant can see your data. You can read more in the Shopify Consumer Privacy Policy.
• Payment providers: Shopify Payments and the payment methods offered at checkout (see Article 7 of our Terms of service). They process your payment under their own terms and privacy policies.
• Carriers: InFlow (POST Group) for deliveries in Luxembourg and FedEx for the other countries we serve. They receive your name, delivery address, phone number and email address. For deliveries outside the EU, data is also passed to customs authorities as needed for clearance.
• Meta Platforms Ireland Limited (Facebook and Instagram), if you consent to advertising cookies. See section 6.
• Google Ireland Limited (Google Merchant Center, Google Shopping, Google Analytics and the Google tag), which receives the product and shop information described in section 6 and, if you consent to the corresponding cookies, data about your visit. See section 6.
• Substack, if you subscribe to our newsletter on Substack. Substack processes your data under its own privacy policy.
• Providers that show content from our public Instagram account on the Site.
• IT, email, accounting, legal and tax advisers who support our business and are bound by confidentiality.
• Authorities and courts where the law requires it.

We do not sell your personal data.

4. Transfers outside the European Economic Area

Some of our providers, including Shopify, Substack, Meta and Google, are located or process data outside the EEA, in particular in the United States. For deliveries and customs, data also goes to the United Kingdom and Switzerland. Where this happens we rely on an adequacy decision (including the EU-US Data Privacy Framework for certified providers) or on the European Commission's Standard Contractual Clauses, or on the equivalent UK and Swiss mechanisms.

5. Cookies and similar technologies

We use cookies and similar technologies on the Site.

• Strictly necessary cookies, for example for the shopping cart, checkout, security, your chosen country or currency and your cookie choice. We use them without consent because the Site cannot work without them.
• Analytics cookies, which help us understand how the Site is used, in particular through Google Analytics. We set them only after you have given your consent. Google Analytics and the Google tag use cookies whose names and lifetimes are described in Google's cookie documentation.
• Marketing cookies and pixels, in particular the Meta Pixel and the Google tag, which are used to measure the results of our advertising and sales channels and, where we use them, to show our ads to people who visited the Site. We set them only after you have given your consent. The Meta Pixel uses cookies such as _fbp, which according to Meta lasts for up to 90 days.

You can accept or refuse non-essential cookies in the cookie banner. You can withdraw or change your choice at any time, as easily as you gave it, in the cookie preferences of the Site. If you refuse, the Meta Pixel, Google Analytics and the Google tag do not collect data from your visit and you can still use the Site and place orders. Details about the cookies set by Shopify are available in Shopify's cookie documentation.

6. Meta Pixel and Google

Meta Pixel (Facebook and Instagram)

With your consent, we use the Meta Pixel, a tool provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, and integrated into our shop through Shopify's Facebook and Instagram channel. The Meta Pixel sends Meta information about your visit, such as the pages and products you view, items you add to your cart, purchases you make, your IP address and browser and device data. Meta can link this information to your Facebook or Instagram account if you have one.

We use it to measure the results of our advertising, to improve our ads, and to show our ads on Facebook and Instagram to people who visited the Site (so-called retargeting). Where you give consent, we and Meta are jointly responsible for the collection and transmission of this data to Meta. Meta is responsible for its own further use of the data, for example for its own purposes, and processes it according to its own privacy policy, available on facebook.com. You can manage the ads you see in your Facebook and Instagram account settings.

Google (Google & YouTube channel, Merchant Center, Google Analytics and Google tag)

We use the Google & YouTube channel of Shopify to connect our shop to Google Merchant Center, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Through it we transmit product, price, availability, shipping and return information of our shop so that our products can be shown in Google Shopping and other Google services. This information does not contain personal data of our customers.

With your consent, Google Analytics and the Google tag installed through this channel measure how visitors use the Site and which purchases follow a visit from a Google service. They send Google information about your visit, such as the pages and products you view, how you reached the Site, items you add to your cart, purchases you make, your IP address, browser and device data and cookie identifiers. Google processes this data on our behalf to provide us with measurement and, for its own purposes such as improving its services, as an independent controller, under its own privacy policy, available at policies.google.com. You can manage the ads you see in your Google account settings.

You can refuse or withdraw your consent to the Meta Pixel, Google Analytics and the Google tag at any time in the cookie preferences of the Site. A withdrawal does not affect processing that took place before it.

7. Your rights

Under the GDPR (and the UK GDPR and Swiss data protection law where they apply) you have the right to:

• access your personal data and receive a copy;
• have inaccurate data corrected;
• have your data erased where the law allows;
• restrict the processing of your data;
• receive your data in a portable format;
• object to processing based on our legitimate interests;
• withdraw your consent at any time, without affecting processing that took place before.

To exercise your rights, write to hello@miavka.com or to MIAVKA S.à r.l., 13, rue Annette Schwall-Lacroix, L-2568 Luxembourg. We may ask you to confirm your identity. You also have the right to lodge a complaint with a supervisory authority. In Luxembourg this is the Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, cnpd.lu. You can also contact the authority in the country where you live; in Norway this is the Norwegian Data Protection Authority (Datatilsynet), in the United Kingdom the Information Commissioner's Office (ICO) and in Switzerland the Federal Data Protection and Information Commissioner (FDPIC).

8. Automated decisions

We do not take decisions based solely on automated processing that have legal effects for you. Shopify and our payment providers may use automated tools to detect fraud.

9. Security

We use appropriate technical and organisational measures to protect your data. No transmission over the internet is completely secure, so please do not send us sensitive information such as full card numbers by email.

10. Children

The Site is not intended for children, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy, for example when our services or the law change. The current version is always on the Site with its date. Changes apply from the date they are published.

12. Contact

Questions about this Privacy Policy: hello@miavka.com or MIAVKA S.à r.l., 13, rue Annette Schwall-Lacroix, L-2568 Luxembourg. This is our postal address for letters only; we do not receive visitors there.