PRIVACY POLICY

Last Updated: September 4, 2025

1. Introduction

Welcome to Miatu. This Privacy Policy describes how BIR TUN LIMITED
(doing business as Miatu) ("we," "us," or "our") collects, uses, processes, and discloses your information—including personal information—in conjunction with your access to and use of our website ([insert your website URL, e.g., loralu.shop]) and our services (collectively, the "Site").

By accessing or using our Site, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use our Site.

2. Data Controller Information

For the purpose of the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws, the data controller is:

  • Company Name: BIR TUN LIMITED

  • Company Number: 16754208

  • Registered Office: 14 King Street, Leeds, United Kingdom, LS1 2HL

  • Customer Service Email: support@themiatu.com

  • Contact Number: +447367047727

3. What Personal Information We Collect

a) Information You Provide Directly:

  • Contact and Order Information: Full name, billing/shipping address, payment details (processed securely by our payment gateway), email address, and phone number.

  • Account Information: Name, email address, and password if you create an account.

  • Communications and Support: Any information you provide when contacting us.

b) Information We Collect Automatically (Usage Data):

  • Device and Browser Information: IP address, browser type, time zone, operating system, device type.

  • Interaction Information: Clickstream data, pages viewed, searches, page response times, errors, session duration, scrolling/click activity.

  • Cookies & Tracking Technologies: Used for site functionality, analytics, and advertising (see Section 6).

4. How and Why We Use Your Information (Lawful Basis)

We process your data under the following lawful bases:

  • Contractual necessity: Fulfilling and managing your orders, account, payments, and communications.

  • Legitimate interests: Improving our Site, preventing fraud, ensuring security, and providing customer support.

  • Consent: Sending you marketing communications (you may withdraw at any time).

  • Legal obligation: Recordkeeping for tax, accounting, and compliance requirements.

5. How We Share Your Information

We do not sell your personal information. We may share it only with trusted third-party providers, including:

  • E-commerce platforms (e.g., Shopify) – to power our store.

  • Payment processors (e.g., Stripe, PayPal) – to securely process payments.

  • Logistics partners (e.g., Royal Mail, FedEx) – to deliver orders.

  • Marketing & analytics providers (e.g., Google Analytics, Klaviyo) – to manage and analyze marketing.

All partners are contractually bound to protect your data and use it only for the agreed purposes.

6. Cookies and Tracking Technologies

  • Essential Cookies: Required for core site functions.

  • Analytics Cookies: Help us measure and improve performance.

  • Advertising Cookies: Make marketing more relevant to you.

You may manage cookies via browser settings, but disabling them may affect site performance.

7. International Data Transfers

Your information may be transferred outside the UK/EEA (e.g., to the US or Canada). We ensure appropriate safeguards (such as ICO-approved Standard Contractual Clauses) are in place to protect your data.

8. Data Security & Retention

We use appropriate technical and organizational measures to protect your information. We retain it only as long as necessary to fulfill the purposes outlined in this policy and to comply with legal requirements.

9. Your Data Protection Rights

Under UK GDPR, you have rights including:

  • Right to Access – request a copy of the personal information we hold.

  • Right to Rectification – correct inaccuracies or incomplete details.

  • Right to Erasure – request deletion of your information when no longer necessary.

  • Right to Restrict Processing – limit how your data is used in certain cases.

  • Right to Data Portability – receive your data in a machine-readable format.

  • Right to Object – object to processing based on legitimate interests.

  • Right to Withdraw Consent – withdraw your consent at any time.

To exercise your rights, please contact us at support@themiatu.com.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

10. Children’s Privacy

Our Site is not intended for individuals under 16. We do not knowingly collect information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.

12. Contact Us

If you have questions or requests, contact us:

  • Trade Name: MIATU

  • Email: support@themiatu.com

  • Phone:  (Mon–Fri, 9 AM–5 PM GMT)

  • Mailing Address:14 King Street, Leeds, United Kingdom, LS1 2HL