PRIVACY POLICY

This Privacy Policy explains how Mia Outlet collects, uses, stores and protects your personal information when you visit our online store or make a purchase. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

WHO WE ARE

Mia Outlet ([[TODO: legal business name]], ABN [[TODO: ABN]]) is responsible for the personal information described in this policy.

Contact: [[TODO: support email]]

INFORMATION WE COLLECT

When you shop with us or contact us, we may collect the following information:

Information You Provide Directly
- Full name
- Shipping address and billing address
- Email address
- Phone number
- Order history and purchase details
- Payment information (processed securely by our payment providers; we never store your full card details)
- Any messages you send us through customer service

Information Collected Automatically
- Device information (browser type, operating system, IP address)
- Site usage data (pages viewed, time spent, click behaviour)
- Approximate location, based on IP address
- Cookie and tracking data (see our Cookie Policy)

HOW WE USE YOUR INFORMATION

- To process and deliver your orders
- To provide customer service and communicate about your orders
- To send marketing emails and newsletters, if you have opted in
- To improve our website, products and shopping experience
- To detect and prevent fraud, abuse or security threats
- To meet our legal obligations, including tax and accounting requirements
- To personalise your experience and show relevant product recommendations
- To measure the performance of our marketing campaigns

WHO WE SHARE YOUR INFORMATION WITH

We only share your information with trusted partners who help us operate our store:

- Shopify (our e-commerce platform)
- Payment processors (such as Shopify Payments, PayPal or Shop Pay)
- Shipping and logistics providers (for order fulfilment and delivery)
- Email marketing platforms (for newsletters and order notifications)
- Analytics and advertising providers (such as Google, Meta and TikTok)
- Customer service tools
- Fraud prevention services

OVERSEAS DISCLOSURE

Some of these providers store or process data outside Australia, including in the United States, Canada, the European Union and Asia. Where we disclose personal information overseas, we take reasonable steps to make sure it is handled in line with the Australian Privacy Principles.

We do not sell your personal information.

DATA RETENTION

We keep personal information only for as long as we need it for the purposes in this policy, or as required by law:

- Order and transaction records: 5 years (Australian tax record-keeping requirements)
- Customer account data: while your account is active, plus a reasonable period after
- Marketing preferences: until you unsubscribe
- Analytics data: typically 14–26 months, in de-identified form
- Support communications: 2 years after the last interaction

YOUR RIGHTS

You can ask to access the personal information we hold about you, ask us to correct it if it is inaccurate, out of date or incomplete, and withdraw consent for marketing at any time. You can also ask us to delete your information, subject to our legal record-keeping obligations.

To make a request, email us at [[TODO: support email]]. We will respond within 30 days.

MARKETING COMMUNICATIONS

You can unsubscribe from our marketing emails at any time using the "unsubscribe" link in any email, or by contacting us. Unsubscribing does not affect emails about your orders, such as shipping confirmations and delivery updates.

DATA SECURITY

We take reasonable steps to protect your personal information from misuse, interference, loss and unauthorised access. This includes SSL encryption on our website, secure payment processing and limited access to personal data. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

CHILDREN'S PRIVACY

Our store is not intended for people under the age of 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us and we will delete it.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Any significant changes will be posted on this page.

COMPLAINTS

If you have a concern about how we handle your personal information, please contact us first at [[TODO: support email]] so we can try to resolve it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

CONTACT

For any questions about this Privacy Policy, please email us at [[TODO: support email]].