At Mirestynor, we are committed to handling personal data responsibly throughout your shopping experience. This Policy explains how we collect, use, retain, and protect personal data when you browse our website, place a furniture order, arrange delivery, or contact our customer service team.
1. Purpose and Scope
This Policy applies to personal data collected through our online store and related customer communications. We use such information to manage orders, coordinate delivery, handle returns and refunds, respond to inquiries, maintain website security, and fulfill applicable recordkeeping requirements.
We limit personal data collection to information reasonably necessary for these purposes and do not use it for unrelated purposes without an appropriate basis.
2. Types of Personal Data We Collect
Contact and Delivery Information
We may collect your name, email address, telephone number, billing address, shipping address, and delivery instructions to process orders and communicate about delivery.
Order and Payment Information
We may process order numbers, purchased items, transaction references, payment status, and records relating to cancellations, returns, and refunds. Payment details are handled according to the payment method and processing arrangements available at checkout.
Customer Service Records
We may retain messages and information you provide when asking about products, deliveries, damaged items, returns, or refunds. These records help us respond to requests and maintain accurate order-related information.
Technical and Website Information
When you visit our website, we may collect technical information such as your IP address, browser type, device information, pages visited, access times, and website interaction data. This information may be used to maintain website functionality, troubleshoot errors, and support security.
Cookie Preferences
Where cookies or similar technologies are used, we may process information about your preferences and website activity in accordance with applicable consent requirements. Please refer to our Cookie Policy for further details.
3. Lawful Bases for Processing Personal Data
Where the GDPR applies, we process personal data only when an appropriate lawful basis exists.
Contractual Necessity
We process relevant information to confirm orders, arrange delivery, manage payments, respond to order inquiries, and handle returns or refunds.
Legal Obligations
We may retain or process transaction and accounting records when necessary to meet applicable recordkeeping, tax, accounting, or other obligations.
Legitimate Interests
We may process relevant information to maintain website security, prevent fraud, investigate technical issues, manage customer inquiries, and protect our online operations, provided that your rights and interests do not override those interests.
Consent
Where consent is required, we will obtain it before the relevant processing begins. You may withdraw consent at any time. Withdrawal does not affect processing carried out lawfully before withdrawal.
4. Your Data Subject Rights
Where the GDPR applies, you may have the following rights, subject to applicable conditions and exceptions.
Right of Access
You may request confirmation of whether we process your personal data and obtain a copy of the relevant information.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data where the applicable conditions are met. Certain information may need to be retained where a valid exception applies.
Right to Restrict Processing
You may request restriction of processing in circumstances provided for under the GDPR.
Right to Data Portability
Where applicable, you may request personal data you provided to us in a structured, commonly used, machine-readable format and request its transmission to another controller when the relevant conditions are met.
Right to Object
You may object to processing based on legitimate interests where the applicable conditions are met. We will assess your objection accordingly.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
Right to Lodge a Complaint
Where the GDPR applies, you may lodge a complaint with the competent data protection supervisory authority if you believe your personal data has been handled improperly.
To exercise your rights, contact us using the details in Section 9. We may request information reasonably necessary to verify your identity. We will respond within the applicable timeframe and explain any limitations where a valid exception applies.
5. Data Retention
We retain personal data only for as long as reasonably necessary to fulfill the purposes described in this Policy or to meet applicable retention requirements.
Order and transaction records may be retained for order administration, accounting, and dispute resolution. Customer service records may be retained for the time needed to resolve inquiries and maintain relevant service history. Technical records may be retained for a limited period to support website security and troubleshooting.
When information is no longer necessary, we will take reasonable steps to delete it, anonymize it, or securely dispose of it unless continued retention is justified by a valid purpose.
6. Data Disclosure and Sharing
We share personal data only when necessary for order fulfillment, website operations, customer support, or another valid purpose described in this Policy.
Payment Processing
Relevant transaction information may be shared with the payment service responsible for processing your purchase.
Order Fulfillment and Delivery
We may provide necessary recipient details, shipping addresses, telephone numbers, order references, and delivery instructions to the parties responsible for fulfilling and delivering your order.
Website and Customer Support Services
Relevant information may be shared with service providers supporting website hosting, data storage, security, technical maintenance, and customer communications. Appropriate measures should be in place to protect information handled on our behalf.
Professional Advisers and Authorized Authorities
We may disclose relevant information to professional advisers or authorized authorities when necessary for recordkeeping, dispute resolution, protection of rights, or a valid request.
Where the GDPR applies, any transfer of personal data outside the European Economic Area will take place only where an applicable transfer mechanism and required safeguards are in place.
7. Data Security
We use reasonable technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures may include access restrictions, appropriate account permissions, secure data transmission where supported, and procedures for handling information responsibly.
Access to personal data is limited to authorized individuals and service providers who need it for legitimate purposes. Although we take reasonable precautions, no electronic transmission or storage system can be guaranteed to be completely secure.
If you believe your personal data has been compromised, please contact us so we can review the matter and take appropriate action.
8. Changes to This Policy
We may update this Policy to reflect changes in our data handling practices, website functionality, or applicable privacy requirements. The revised version will be published on this page, with the revision date updated where appropriate.
Where a material change requires additional notice or consent, we will take the appropriate steps. We encourage you to review this Policy periodically.
9. Contact Us
For questions about this Policy or requests concerning your personal data, please contact us using the details below.
Address: 10787 Mill Dam Rd, Bentonville, AR 72713, US
Phone: +1 479-226-5814
Email: service@mirestynor.com
Opening hours: Monday to Friday, 9:00 AM to 6:00 PM (EST)