Privacy policy

Effective Date: January 3, 2026

Last Updated: January 3, 2026

Thank you for choosing Mivael. We are committed to protecting the privacy and security of your personal information. This Privacy Policy outlines how we collect, use, store, disclose, and protect your personal data when you visit or make purchases on mivael.com (operated via Shopify) or interact with our services. By using our website, you acknowledge and consent to the practices described herein, in compliance with applicable data protection laws including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA/CPRA).

  1. Information We Collect

    We only collect personal information necessary to fulfill the purposes stated below ("Data Minimization Principle"). The information we gather includes:

1.1 Personal Identifiable Information (PII)

Provided Voluntarily: Name, email address, phone number, shipping/billing address, and payment details (e.g., credit card information) when you place an order or create an account.

Order-Related Data: Purchase history, product selections (e.g., LayFlat Vanity Bags, Train Cases), and order fulfillment details.

1.2 Non-Identifiable Information

Technical Data: IP address, device type, operating system, browser information, and website usage data (e.g., pages visited, browsing duration) collected via Shopify’s analytics tools and cookies.

Anonymous Data: Aggregated information (e.g., popular product categories) that cannot be linked to any individual.

1.3 Sensitive Personal Information

We do not intentionally collect sensitive personal information (e.g., biometric data, health information, financial account details unrelated to payment processing) as defined by GDPR and CCPA.

  1. How We Use Your Information

    Your personal data is used solely for the following legitimate purposes:

    Process and fulfill your orders (e.g., ship products, send delivery confirmations).

    Provide customer support (e.g., respond to inquiries about your purchase or our leather cosmetic bags).

    Improve our website and products (e.g., analyze usage patterns to enhance user experience).

    Send marketing communications (with your explicit consent) about new collections, exclusive offers, or updates—you can unsubscribe at any time.

    Prevent fraud and ensure website security (e.g., detect unauthorized transactions).

    Comply with legal obligations (e.g., tax reporting, responding to valid legal requests).

We will not use your information for purposes unrelated to those stated without notifying you and obtaining necessary consent.

  1. Information Sharing and Disclosure

    We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your data only in the following circumstances:

3.1 Service Providers

Shopify: Our e-commerce platform provider, which processes your orders, payments, and stores data in compliance with its own privacy policy.

Payment Processors: Third-party payment gateways (e.g., Shopify Payments, PayPal) to securely process transactions—they do not store your full payment details.

Logistics Partners: Shipping carriers (e.g., USPS, DHL) to deliver your orders and provide tracking information.

All service providers act as "data processors" and are contractually obligated to protect your data and use it only as instructed by Mivael.

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our legal rights, property, or the safety of our customers and staff.

3.3 Business Transitions

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, with prior notice and continued protection.

  1. Data Retention and Security

    4.1 Retention Period

    We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. After this period, your data will be anonymized or securely deleted.

4.2 Security Measures

We implement technical and organizational security measures to protect your data from unauthorized access, disclosure, alteration, or destruction, including:

Encryption of sensitive data (e.g., payment information) via Shopify’s secure servers.

Access controls limiting data access to authorized personnel only.

Regular security audits and updates to prevent vulnerabilities.

Despite these measures, no online data transmission is 100% secure—we cannot guarantee absolute security, but we strive to mitigate risks.

  1. Your Data Rights

    Under GDPR (for EEA/UK residents) and CCPA (for California residents), you have the following rights regarding your personal information:

    Access: Request a copy of the personal data we hold about you.

    Correction: Request correction of inaccurate or incomplete data.

    Erasure: Request deletion of your data (subject to legal obligations).

    Data Portability: Request transfer of your data to another service provider.

    Opt-Out: Opt out of marketing communications or (under CCPA) the "sale" of your data (we do not sell data, but you may still exercise this right).

    Withdraw Consent: Withdraw consent for non-essential data uses (e.g., marketing) at any time.

To exercise these rights, please contact our privacy team at support@mivael.com. We may request verification of your identity to process your request, and will respond within 30 days (or as required by law).

  1. Cookies and Tracking Technologies

    We use cookies (small text files stored on your device) and similar tracking technologies to enhance your website experience, such as remembering your preferences and analyzing usage. You can manage or disable cookies via your browser settings, but some website features may not function properly if cookies are disabled.

  2. International Data Transfers

    Mivael is based in the U.S., and your data may be transferred to and stored in countries outside your jurisdiction (e.g., Canada via Shopify). We ensure all international transfers comply with data protection laws, including using Shopify’s standard contractual clauses (SCCs) for GDPR compliance and ensuring adequate protection in recipient countries.

  3. Children’s Privacy

    We do not intentionally collect personal information from children under the age of 13. If we become aware of having collected data from a minor without parental consent, we will promptly delete the data. Parents/guardians may contact us to request removal of their child’s information.

  4. Policy Updates

    We may update this Privacy Policy from time to time to reflect legal changes or business practices. We will notify you of material changes via email or a prominent notice on our website, with an updated effective date. Your continued use of the website after updates constitutes acceptance of the revised policy.

  5. Contact Us

    For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

    Email: support@mivael.com

    Mailing Address: 32 N Gould St, Ste 100, Sheridan WY 82801, US

    Response Time: We will respond to your inquiry within 2 business days (Monday–Friday, excluding U.S. national holidays)


Mivael – Protecting Your Privacy as Carefully as We Craft Our Leather Bags.