MIRASCA
HomeShopAbout UsContact UsCart
Legal

Privacy Policy

How MIRASCA collects, uses and protects your personal data under UK GDPR and the Data Protection Act 2018.

Last updated: 17 February 2026

1. Who we are

This Privacy Policy explains how AESH TRADERS LTD (trading as MIRASCA) processes personal data when you use mirasca.com, place an order, create an account, or contact us.

AESH TRADERS LTD is the data controller for the personal data described in this policy.

2. What personal data we collect

Depending on how you use our site, we may collect:

  • Identity & contact data — name, email address, phone number, billing and delivery addresses
  • Account data — login details and account preferences if you register
  • Order & transaction data — products ordered, order history, payment status (payment card details are processed by our payment providers; we do not store full card numbers)
  • Communications data — messages you send us by email, WhatsApp, contact forms or chat
  • Technical & usage data — IP address, browser type, device information, pages visited, and similar analytics data
  • Marketing preferences — whether you have opted in to receive emails or offers

3. How we collect data

  • Directly from you when you order, register, or contact us
  • Automatically via cookies and similar technologies when you browse our website (see section 8)
  • From payment and delivery partners as needed to complete your order

4. Why we use your data (lawful bases)

Under UK GDPR we only process personal data where we have a lawful basis:

  • Contract — to process and deliver your orders, manage your account, and provide customer support
  • Legitimate interests — to improve our website and products, prevent fraud, and keep our services secure (balanced against your rights)
  • Legal obligation — to meet tax, accounting, and regulatory requirements
  • Consent — for optional marketing emails and non-essential cookies, where required. You may withdraw consent at any time

5. Who we share data with

We do not sell your personal data. We may share it with trusted service providers who help us operate MIRASCA, including:

  • Payment processors and checkout providers
  • Delivery and logistics partners
  • Website hosting and ecommerce platform providers
  • Email, messaging and customer support tools
  • Analytics providers (where enabled)

These parties only process data on our instructions and where appropriate safeguards are in place. We may also disclose data if required by law or to protect our legal rights.

6. International transfers

Some of our service providers may process data outside the UK. Where that happens, we ensure appropriate safeguards are used (such as the UK International Data Transfer Agreement or adequacy decisions) so your data remains protected to UK standards.

7. How long we keep data

We keep personal data only as long as needed for the purposes set out above, including:

  • Order and transaction records — typically up to 6 years for accounting and legal requirements
  • Account data — for as long as your account remains active, and a reasonable period afterwards
  • Support messages — for as long as needed to resolve your query and for related records
  • Marketing data — until you unsubscribe or withdraw consent

When data is no longer required, we delete or anonymise it securely.

8. Cookies

We use cookies and similar technologies to run the website (for example, cart and session cookies), remember preferences, and — where permitted — understand how the site is used.

Essential cookies are required for the site to work. Optional cookies (such as analytics or marketing) are only used where we have a lawful basis, including consent where required. You can control cookies through your browser settings; blocking some cookies may affect site functionality.

9. Your rights under UK GDPR

You have the right to:

  • Access a copy of the personal data we hold about you
  • Rectification — correct inaccurate or incomplete data
  • Erasure — ask us to delete your data in certain circumstances
  • Restriction — ask us to limit how we use your data
  • Data portability — receive certain data in a usable format
  • Object to processing based on legitimate interests, and to direct marketing
  • Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at Support@mirasca.com. We will respond within one month in most cases (or as required by law).

10. Children

Our website and products are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can delete it.

11. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No online transmission is completely secure; please keep your account credentials safe.

12. Complaints

If you are unhappy with how we handle your data, please contact us first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO):

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Please check this page periodically.

14. Contact

For privacy questions or data rights requests:

See also our Terms & Conditions and Returns Policy.