Privacy Policy

This Privacy Policy explains how Mi & Glow ("we", "us", "our") collects, uses and protects your personal information when you visit or buy from our online store (the "Site"). We handle your data in line with the UK General Data Protection Regulation (UK GDPR) as amended by the Data (Use and Access) Act 2025, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Data controller: Mi & Glow is a trading name of Shoperazz Ltd, a company registered in England and Wales (company number 17112621). Registered address: Low Fold, Station Road, Steeton, Keighley, BD20 6RL, United Kingdom. VAT number GB519065684. Questions? Email info@miandglow.co.uk.

1. Information we collect

• Information you give us: name, email, billing and delivery address, phone number, and order details when you place an order, create an account, sign up to our newsletter or contact us.
• Skin profile information: if you use our skin consultation quiz, we process the answers you give (such as skin type, concerns and goals) to generate your personalised routine. This is used to give you a recommendation and is not used to make any decision that has a legal or similarly significant effect on you.
• Review content: if you submit a product review, we process the review text, your rating, the name you choose to display, and any photographs you include.
• Payment information: card payments are processed securely by our payment providers. We do not store your full card details.
• Information collected automatically: device, browser, IP address, and how you use the Site, gathered through cookies and similar technologies.

2. How and why we use your information

We process your data on the following legal bases:

• To perform our contract with you — to process and deliver orders, handle returns, and provide customer support.
• Legitimate interests — to run and improve our business, personalise product recommendations, prevent fraud, and keep the Site secure. You can object to processing based on legitimate interests at any time.
• Consent — to send marketing emails (where you have opted in) and to set non-essential cookies. You can withdraw consent at any time.
• Legal obligation — to meet our accounting, tax and other legal duties.

3. Cookies and similar technologies

We use cookies to make the Site work, remember your basket, keep it secure, understand how the Site is used, and — with your consent — for marketing.

Strictly necessary cookies are always required for the Site to function. Following the Data (Use and Access) Act 2025, certain low-risk cookies (such as basic analytics used purely to improve the Site, and cookies that keep it secure) may be used without prior consent, and you can opt out of them at any time. Marketing and other non-essential cookies are only set where you have given consent.

You can manage your choices through our cookie settings or your browser. Turning some cookies off may affect how the Site works.

4. Who we share your information with

We share data only with trusted partners who help us run the store, including:

• Shopify — our e-commerce and hosting platform;
• Payment providers — to process payments securely;
• Couriers and fulfilment partners — to deliver your order;
• Email and reviews providers — including Judge.me, which collects, moderates and displays product reviews on our behalf and may process your name, email address and any photographs you choose to submit with a review; used to send communications you have opted into and to gather verified product reviews;
• Professional advisers and authorities — where required by law.

We never sell your personal data.

5. International transfers

Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards — such as UK adequacy regulations, the UK data bridge, or the International Data Transfer Agreement / Addendum — to protect your information. You can ask us for details of the safeguards in place.

6. How long we keep your data

We keep personal data only as long as necessary for the purposes above, including to meet legal, accounting and reporting requirements. Order records are generally retained for at least six years for tax purposes. Marketing data is kept until you unsubscribe.

7. Your rights

Under UK data protection law you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing;
• data portability;
• withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these, email info@miandglow.co.uk. We will respond within one month. Exercising your rights is free of charge in most cases.

8. Raising a concern or complaint

If you are unhappy with how we have handled your personal data, please tell us first so we have the chance to put it right. Email info@miandglow.co.uk with the details, marking your message "Data protection complaint".

We will acknowledge your complaint within 5 working days and give you a substantive response within one month. If your complaint is complex and we need longer, we will tell you and explain why.

If you are still dissatisfied, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. You may also seek a remedy through the courts.

9. Marketing

If you have opted in, we may email you about new arrivals, restocks and offers. You can unsubscribe at any time using the link in any email or by contacting us. We will never pass your details to third parties for their own marketing.

10. Security

We take reasonable technical and organisational measures to protect your data. No method of transmission over the internet is completely secure, but we work hard to safeguard your information and will notify you and the ICO of any qualifying personal data breach as required by law.

11. Children

The Site is not intended for anyone under 16, and we do not knowingly collect data from children.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be posted here.

13. Contact us

For any privacy questions or requests, email info@miandglow.co.uk or write to us at Shoperazz Ltd, Low Fold, Station Road, Steeton, Keighley, BD20 6RL, United Kingdom.