Privacy policy

Last updated: 4 October 2026

This policy explains how Mirayama Limited collects and uses your personal information when you visit mirayama.co.uk, shop with us, contact us or hear from us. We collect only what we need, we do not sell your personal information, and you can ask us about it at any time.

Who we are

Mirayama Limited is the controller of your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are a company registered in England and Wales under company number 14102867. Our registered office is 21 Brooksville Avenue, London NW6 6TH, United Kingdom.

For any question about your personal information, please email contact@mirayama.co.uk.

What we collect

When you place an order

  • Your name, email address, telephone number, billing and delivery addresses.
  • Details of what you buy, your order history and any messages about your order.
  • Payment details. Payments are processed by our payment providers. We do not see or store your full card number.

When you create an account

  • Your name, email address, saved addresses and order history.

When you sign up to hear from us

  • Your email address, your marketing preferences, and whether you open or click our emails.

When you make an enquiry or book an appointment

  • Your name, contact details and message.
  • For bespoke and couture pieces: your measurements, fitting notes, design preferences and any photographs you choose to share. We use these only to make, fit and care for your pieces.
  • Appointment dates and notes.

When you browse our website

  • Technical and usage information, such as your IP address, device and browser type, approximate location, the pages you visit and how you arrived. Some of this is collected using cookies and similar technologies (see "Cookies" below).

How we use it and our lawful bases

  • To process, deliver and support your order, including returns, refunds and aftercare. Lawful basis: performance of a contract with you.
  • To make bespoke and couture pieces and manage appointments and fittings. Lawful basis: performance of a contract, or steps you ask us to take before entering into one.
  • To answer your enquiries. Lawful basis: our legitimate interest in responding to you, or steps you ask us to take before entering into a contract.
  • To keep accounting and tax records. Lawful basis: legal obligation.
  • To prevent fraud and keep our website and checkout secure. Lawful basis: our legitimate interests in protecting our business and our clients.
  • To send you news of collections, appointments and events by email. Lawful basis: your consent or, where you have bought from us before, our legitimate interest in telling you about similar pieces (as permitted by the Privacy and Electronic Communications Regulations). You can unsubscribe at any time using the link in every email.
  • To understand how our website is used and to measure our advertising. Lawful basis: your consent, given through our cookie banner.
  • To manage our business, for example to improve our pieces and service, and to deal with legal claims. Lawful basis: our legitimate interests.

Who we share it with

We share personal information only with trusted providers who help us run our business, and only as far as they need it. They act on our instructions or under their own privacy policies where they are independent controllers. They include:

  • Shopify, which hosts our online shop, checkout, customer accounts, the Shop app, our client emails (Shopify Email) and online chat.
  • Payment providers: Shopify Payments, PayPal, Shop Pay, Apple Pay and Google Pay, which process your payment and help prevent fraud.
  • DHL, which delivers your order and may contact you about delivery and customs.
  • Mailchimp (Intuit), which sends some of our emails.
  • Meta (Facebook and Instagram), Google (including Google Analytics, Google Ads and YouTube) and Pinterest, where we show our pieces and measure our advertising. Analytics and advertising cookies are used only with your consent.
  • Website tools: Hotjar and Smartlook (to understand how visitors use our website), hCaptcha (to protect our forms from spam), Shogun (page building), Instafeed (to show our Instagram posts) and FT GeoRedirect (to direct visitors to the right regional store).
  • Professional advisers, such as our accountants and lawyers.
  • Authorities, such as HMRC, the police or courts, where the law requires it.

If our business is ever sold or restructured, your information may be transferred to the new owner, who would have to use it in line with this policy.

International transfers

Some of our providers store or process information outside the UK, including in the European Economic Area and the United States. When information leaves the UK, we make sure it is protected by an adequacy decision of the UK Government (including the UK Extension to the EU-US Data Privacy Framework), or by appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

  • Orders and invoices: six years from the end of the financial year in which the order was placed, as tax law requires.
  • Marketing preferences: until you unsubscribe. We keep a record of your unsubscribe so that we do not contact you again.
  • Enquiries that do not lead to an order: two years.
  • Customer accounts: until you ask us to close your account, subject to the order records above.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal information we hold about you (access);
  • ask us to correct information that is inaccurate or incomplete (rectification);
  • ask us to delete your information (erasure);
  • ask us to limit how we use your information (restriction);
  • object to how we use your information, including at any time to direct marketing (objection);
  • receive your information in a portable format, or ask us to send it to another organisation (portability);
  • withdraw your consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.

To use any of these rights, email contact@mirayama.co.uk. We will respond within one month. There is normally no charge.

Cookies

Cookies are small files stored on your device that help a website work and remember your choices. We use:

  • Essential cookies, which keep your shopping bag, checkout, account and security working. These are always on, as the website cannot work without them.
  • Analytics cookies, which help us understand how visitors use our website so that we can improve it.
  • Marketing cookies, which help us and our advertising partners show relevant content and measure our campaigns.

Analytics and marketing cookies are optional. When you first visit, our cookie banner lets you accept or decline them. You can change your choice at any time by clearing your browser's cookies for this website and choosing again when the banner reappears, or through your browser settings. Blocking essential cookies may stop parts of the website working.

Children

Our website and products are intended for adults. We do not knowingly collect personal information from children under 18.

Security

We use appropriate technical and organisational measures to protect your personal information. Payments and checkout are handled on secure, encrypted connections.

Complaints

If you have a concern about how we use your personal information, please contact us first at contact@mirayama.co.uk and we will do our best to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk, telephone 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.

Contact us

Mirayama Limited, registered in England and Wales, company number 14102867.
Registered office: 21 Brooksville Avenue, London NW6 6TH, United Kingdom.
Email: contact@mirayama.co.uk