01 — Introduction & Identity of Data Controller
This Privacy Policy describes how Mirra LTD (“we”, “us”, “our”) collects, uses, and shares your personal data when you visit or make a purchase from our website. For the purposes of the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Irish Data Protection Act 2018, Mirra LTD is the Data Controller responsible for your personal data.
02 — Lawful Bases for Processing
We only process your personal data when we have a valid legal basis under Article 6 of the GDPR. These include: (a) your explicit consent, which you can withdraw at any time; (b) contractual necessity to perform our services or process your orders; (c) compliance with our legal obligations; and (d) our legitimate interests, provided these do not override your fundamental rights and freedoms.
03 — Categories of Personal Data Collected
We collect several types of personal data to provide and improve our services, including: (a) Identity and Contact Data, such as your name, billing address, shipping address, email address, and phone number; (b) Transaction and Payment Data, including details about payments to and from you and details of products you have purchased (processed securely via our third-party payment processors); and (c) Technical and Usage Data, such as your IP address, browser type, device information, and how you interact with our website.
04 — Purposes of Data Processing
We process your personal data for the following specific purposes: (a) to fulfil and manage your orders, payments, and deliveries; (b) to provide customer support and respond to your inquiries; (c) to monitor, analyse, and optimise website performance, security, and user experience; and (d) where you have provided your explicit consent, to send you marketing communications and promotional offers.
05 — Data Retention & Security
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We implement robust, industry-standard technical and organizational security measures—including encryption, firewalls, and secure access controls—to protect your personal data from unauthorized access, loss, alteration, or disclosure.
06 — Data Sharing & International Transfers
We do not sell your personal data. We only share your data with trusted third-party service providers (such as payment processors, shipping carriers, and IT hosts) who act as data processors on our behalf. When we transfer your personal data outside the European Economic Area (EEA), we ensure a similar degree of protection by implementing Standard Contractual Clauses (SCCs) approved by the European Commission, or relying on adequacy decisions.
07 — Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data: (a) the right to access the data we hold about you; (b) the right to rectify inaccurate or incomplete data; (c) the right to erase your data (“right to be forgotten”); (d) the right to restrict or object to our processing of your data; (e) the right to data portability; and (f) the right to withdraw your consent at any time. To exercise any of these rights, please contact us at help@mirra.ie.
08 — Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyse site traffic. In compliance with the ePrivacy Directive and GDPR, we obtain your explicit consent before setting any non-essential cookies (such as analytics or marketing cookies) on your device. You can manage or disable your cookie preferences at any time through your browser settings or our on-site cookie manager.
09 — Right to Lodge a Complaint
If you have any concerns about how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. In Ireland, the lead supervisory authority is the Data Protection Commission (DPC). You can contact them at: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, or online at dataprotection.ie.
10 — Contact Information
For any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our support team at help@mirra.ie.