MIRELLO PRIVACY POLICY

Last updated: 29 July 2026

This Privacy Policy describes how FHR-Solutions, which trades under the brand Mirello — hereinafter "Mirello", "we", "us" or "our" — collects, uses, stores and shares personal data when you visit mirello.es, make a purchase, use our services or communicate with us.

For the purposes of this Privacy Policy, "you", "user" or "customer" refers to any person who visits our website, places an order, creates an account, contacts us or uses any of our services.

We recommend that you read this Privacy Policy carefully. By using our services, you acknowledge that you have been informed about the processing of your personal data as set out in this document.

1. Data controller

The controller of the personal data collected through this store is:

Trading name: Mirello
Legal owner: FHR-Solutions
Registration number / Tax ID: 87956063
Address: Fascinatio Boulevard 216, 3065 WB Rotterdam
Email: support@mirello.com
Website: mirello.es

2. Changes to this Privacy Policy

Mirello may update this Privacy Policy when necessary to reflect changes in our practices, services or providers, or to comply with legal, regulatory or operational requirements.

When we make changes, we will publish the new version on our website and indicate the date of the last update. Where the law requires it, we will also inform users by additional means.

3. Personal data we collect

The personal data we collect depends on how you interact with our store and our services.

Personal data is any information that identifies you directly or indirectly or that can reasonably be linked to you.

3.1. Data provided directly by the user

We may collect the following data when you provide it directly:

• First and last name.
• Billing address and delivery address.
• Email address.
• Phone number.
• Information related to orders, returns, exchanges and refunds.
• Account information, such as username and password.
• Products viewed, added to the cart or saved as favourites.
• Communication and marketing preferences.
• Content of messages sent to customer support.
• Opinions, reviews, photographs or other content voluntarily submitted.
• Any other information you choose to provide to us.

Some store features require certain personal data. You can choose not to provide it, but this may prevent us from processing your order, delivering the products, responding to your requests or allowing you to use certain features.

3.2. Order and payment information

When you make a purchase, we collect the information needed to process the order, confirm payment, prepare the shipment, carry out the delivery and manage possible returns or complaints.

Payments may be processed by third-party payment service providers. These providers may collect data such as the card number, bank details, billing address and other information needed to authorise and process the transaction.

Mirello does not directly control all the data collected by payment providers. Processing by those providers is subject to their own privacy policies and terms.

3.3. Information collected automatically

When you visit or use our website, we may automatically collect certain technical and usage data through cookies, pixels, tags and similar technologies.

This data may include:

• IP address.
• Device type.
• Operating system.
• Browser type and version.
• Language and regional settings.
• Network connection.
• Pages visited.
• Products viewed.
• Actions taken in the store.
• Products added to the cart.
• Date and time of access.
• Website or ad from which you arrived.
• Interaction with our emails or ads.
• Cookie and device identifiers.

This information helps us operate the store, improve how the site works, analyse the general behaviour of users, prevent fraud and measure the effectiveness of our advertising campaigns.

3.4. Information obtained from third parties

We may also receive personal data from providers and partners that provide services on our behalf, including:

• Shopify, which provides the e-commerce platform.
• Transport and logistics companies.
• Payment processors and payment service providers.
• Advertising and social media platforms.
• Analytics and measurement tools.
• Customer support providers.
• Hosting, storage and security services.
• Email and commercial communications providers.
• Apps installed on or connected to our Shopify store.

Data received from third parties will be processed in accordance with this Privacy Policy and applicable law. However, we are not responsible for the accuracy of information provided by third parties or for their independent privacy practices.

4. Purposes and legal bases for processing

We use personal data for the following purposes:

4.1. Order processing and delivery

We use your data to:

• Process and confirm payment.
• Prepare and manage the order.
• Ship the products.
• Provide delivery tracking.
• Manage returns, exchanges, refunds and warranties.
• Send confirmations and order-related communications.
• Fulfil our contractual obligations to you.

The legal basis for this processing is the performance of the sales contract and the application of measures requested before entering into that contract.

4.2. Customer account management

When you create an account, we use your data to maintain it, authenticate your access, show your orders, save certain preferences and make future purchases easier.

The legal basis is the performance of the services requested by the user and our legitimate interest in providing an efficient shopping experience.

4.3. Customer support

We use the data provided in your communications to answer questions, resolve issues, handle complaints and provide assistance related to our products and services.

The legal basis may be the performance of the contract, compliance with legal obligations or our legitimate interest in maintaining adequate customer support.

4.4. Marketing and commercial communications

Where we have your consent or another valid legal basis exists, we may use your data to send you:

• Offers and promotions.
• Information about new products.
• Product or cart reminders.
• Surveys and feedback requests.
• Communications related to Mirello.

You can unsubscribe at any time using the unsubscribe link included in promotional emails or by writing to support@mirello.com.

Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal.

Even if you unsubscribe from marketing, we may continue to send you necessary communications related to orders, payments, deliveries, security, returns or your account.

4.5. Advertising and personalisation

With your consent, we may use cookies and similar technologies to:

• Show relevant ads.
• Measure campaign performance.
• Create advertising audiences.
• Limit how often you see an ad.
• Understand how users interact with our ads.
• Personalise certain content and recommendations.

This processing may involve the disclosure of digital identifiers or interaction data to advertising platforms.

You can manage or withdraw your consent through the cookie settings panel or banner available on our website.

4.6. Security and fraud prevention

We may use personal data to detect, investigate and prevent:

• Fraudulent transactions.
• Misuse of the store.
• Unauthorised access.
• Illegal or malicious activities.
• Breaches of our terms.
• Threats to the security of users or our systems.

The legal basis is our legitimate interest in protecting our business, our customers and our services, as well as compliance with legal obligations where applicable.

4.7. Compliance with legal obligations

We may also process personal data to comply with tax, accounting, administrative, judicial, regulatory or consumer protection obligations.

The legal basis is compliance with the legal obligations applicable to Mirello.

4.8. Improving our services

We may analyse information about the general use of the store to improve our products, operation, navigation, design, customer service and shopping experience.

Where possible, we will use aggregated or anonymised data that does not directly identify a person.

The legal basis is our legitimate interest in developing and improving our services.

5. Cookies and similar technologies

Mirello uses cookies and similar technologies to operate and improve the website.

Cookies can be classified into the following categories:

Strictly necessary cookies

These are necessary for the store to work properly and allow, among other things:

• Keeping products in the cart.
• Processing payment.
• Remembering privacy choices.
• Maintaining session security.
• Allowing access to an account.

These cookies cannot be disabled through our panel when they are essential to provide the service requested.

Preference cookies

They allow certain choices to be remembered, such as language, region or other browsing preferences.

Analytics cookies

They help us understand how the website is used, which pages are visited and which features could be improved.

Advertising cookies

They are used to measure campaigns, personalise advertising and show ads that may be more relevant.

Cookies that are not strictly necessary will only be installed when you have given your consent, where required by applicable law.

You can accept, reject or change your preferences through the cookie banner or settings panel. You can also configure your browser to block or delete cookies. However, disabling certain cookies may affect how the store works.

For detailed information about each cookie, its provider, purpose and duration, see our Cookie Policy.

6. Disclosure of personal data

We may share personal data only when necessary and a valid legal basis exists.

Recipients may include:

• Shopify and its related companies.
• Payment providers.
• Transport, storage and logistics companies.
• Hosting and IT service providers.
• Customer support services.
• Analytics and measurement providers.
• Advertising platforms, where you have given consent.
• Email and communications providers.
• Professional advisers, accountants, insurers or lawyers.
• Public administrations, courts and competent authorities.
• Potential buyers, investors or successors in a business transaction.

Providers that process data on behalf of Mirello must use it only to provide the contracted services and are subject to the corresponding contractual and legal obligations.

We may also disclose information when:

• You request or expressly authorise it.
• It is necessary to fulfil an order or contract.
• It is required by law.
• It is necessary to respond to legal proceedings.
• It is necessary to protect our rights, users or services.
• A merger, acquisition, reorganisation, sale of assets or insolvency proceeding takes place.

Mirello does not sell personal data in exchange for money.

7. Shopify

Our store is hosted on Shopify. Shopify processes certain personal data when you visit the store, make a purchase or use features provided by its platform.

Shopify may process data such as:

• Device and browser information.
• IP address.
• Activity within the store.
• Purchase and transaction data.
• Information necessary for the security and operation of the platform.

In certain cases, Shopify may process data to provide services related to security, analytics, personalisation or the operation of its network, in accordance with the privacy settings applied by Mirello and the user's consent choices.

Shopify acts as a technology provider and, for certain processing, may act as a processor or independent controller. Its own processing is subject to its privacy policy.

8. User-generated content

Our services may allow customers to post reviews, photographs, comments or other content.

Information posted in public areas of the store may be visible to other users. Do not post personal, confidential or sensitive data that you do not want to make public.

Mirello does not control how third parties may use information that a user has chosen to make public.

We may moderate, reject or remove content that breaches our terms, infringes the rights of third parties or may be illegal, misleading or offensive.

9. Third-party links and services

Our website may contain links to pages, platforms or services operated by third parties.

When you leave mirello.es and visit an external site, that third party's terms and privacy policies will apply.

Mirello does not control and is not responsible for the privacy, security, accuracy, availability or operation of external websites. The inclusion of a link does not necessarily mean that we endorse the third party or its services.

10. Children's data

Mirello's products and services are not specifically aimed at minors.

We do not knowingly collect personal data from minors without the necessary authorisation of their parents or legal representatives.

If you believe a minor has provided us with personal data without the corresponding authorisation, you can write to support@mirello.com to request its deletion.

11. Data retention

We will keep personal data only for as long as necessary to fulfil the purpose for which it was collected.

Retention periods may depend on:

• The duration of the contractual relationship.
• The existence of an active account.
• The management of orders, returns or warranties.
• Legal tax and accounting periods.
• The need to handle claims or disputes.
• Fraud prevention.
• The establishment, exercise or defence of claims.
• Consent for commercial communications.

Marketing data will be kept until you withdraw your consent, unsubscribe or request its deletion, unless another legal basis allows it to be kept.

When data is no longer needed, it will be deleted, anonymised or blocked in accordance with applicable law.

12. Data security

We apply reasonable technical and organisational measures designed to protect personal data against:

• Loss.
• Destruction.
• Alteration.
• Unauthorised access.
• Improper disclosure.
• Fraudulent or unlawful use.

However, no system of transmission or storage of information can guarantee absolute security.

We recommend that you use strong passwords, do not share your credentials and avoid sending us especially sensitive data through unprotected channels.

If you suspect that your account or password has been compromised, contact us immediately.

13. International data transfers

Some of our providers may be established, or use servers, outside the European Economic Area.

Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we will adopt the safeguards required by law, such as:

• Standard contractual clauses approved by the European Commission.
• Adequacy decisions.
• Binding corporate rules.
• Other legally recognised mechanisms.

Where applicable, additional technical, contractual or organisational measures may also apply to protect the transferred information.

14. User rights

Depending on the applicable law, you can exercise the following rights:

Right of access

You can request confirmation of whether we process your personal data and receive a copy of the data and certain information about how it is used.

Right to rectification

You can request the correction of inaccurate or incomplete personal data.

Right to erasure

You can request the deletion of your data when it is no longer necessary, you withdraw your consent or another legal ground applies.

This right may be limited where the data must be kept to comply with a legal obligation or to defend claims.

Right to object

You can object to certain processing based on legitimate interest, including direct marketing.

Right to restriction of processing

You can request that we temporarily restrict the use of your data in certain circumstances.

Right to data portability

You can request to receive certain data in a structured, commonly used and machine-readable format, or ask for it to be transmitted to another controller where technically feasible.

Right to withdraw consent

Where processing is based on your consent, you can withdraw it at any time.

Right not to be subject to automated decisions

Where applicable, you have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you.

15. How to exercise your rights

You can exercise your rights by sending a request to:

Email: support@mirello.com

In your request you should state:

• Your first and last name.
• The right you wish to exercise.
• The information needed to identify your account, order or relationship with Mirello.
• Any additional information needed to locate the relevant data.

We may ask for additional information to verify your identity before responding. This verification is used to protect your data from fraudulent requests.

We will respond within the time limits established by applicable law. Exercising these rights is generally free of charge. However, the exceptions provided by law may apply where a request is manifestly unfounded, excessive or repetitive.

You will not be treated in a discriminatory way for exercising your data protection rights.

16. Communication preferences

You can stop receiving commercial messages by using the unsubscribe link included in our emails or by contacting support@mirello.com.

Unsubscribing from promotional communications does not prevent us from sending you necessary messages related to:

• Order confirmations.
• Payment status.
• Delivery tracking.
• Returns and refunds.
• Account security.
• Important changes to our services or terms.

17. Complaints

If you have any questions or complaints about the processing of your personal data, you can first contact us at support@mirello.com.

You also have the right to lodge a complaint with the competent data protection authority in your country of residence or in the country where the controller is established.

If you live in Spain, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).

18. Contact

To ask questions about this Privacy Policy, find out how we process your data or exercise any of your rights, you can contact us at:

Mirello:
Owner: FHR-Solutions
Address: Fascinatio Boulevard 216, 3065 WB Rotterdam
Email: support@mirello.com
Website: mirello.es