Privacy Policy
Effective Date: July 11, 2026
Welcome to miuluga.online (the “Site“), operated by miuluga (“we,” “us,” or “our“). We are committed to protecting your privacy and handling your personal information with transparency and care.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, make a purchase, or interact with us in any way. Please read this policy carefully. By using our Site and Services, you agree to the practices described herein. If you do not agree, please do not use our Site.
1. Information We Collect
We collect personal information from you in various ways, including when you visit our Site, register an account, place an order, subscribe to our newsletter, or contact customer support. The types of information we may collect include:
A. Information You Provide Directly to Us
- Contact Information: Name, email address, phone number, billing address, and shipping address.
- Order Information: Products purchased, order history, payment confirmation, and transaction details.
- Account Information: Username, password, and security questions when you create an account on our Site.
- Customer Support Information: Any information you voluntarily provide when you contact us via email, live chat, or other communication channels, including attachments such as photos or screenshots.
- User-Generated Content: Product reviews, ratings, testimonials, photos, and any other content you post on public areas of our Site.
- Form Submissions: Information you provide when submitting forms on our Site, including our opt-out request form, contact forms, or any other forms we may offer.
B. Information Collected Automatically
When you visit our Site, we automatically collect certain information about your device and browsing activity through cookies, pixels, and similar tracking technologies:
- Device Information: IP address, browser type, operating system, device identifiers, and referring URLs.
- Usage Data: Pages viewed, products viewed, search queries, add-to-cart behavior, and time spent on the Site.
- Location Data: General geographic location inferred from your IP address.
C. Information from Third Parties
We may also receive information about you from third-party service providers, such as:
- Payment processors that provide us with payment confirmation and billing details (we do not store full payment card information).
- Shipping partners that provide tracking and delivery status for your orders.
- Analytics providers that help us understand Site traffic and user behavior.
- Marketing partners that assist with targeted advertising campaigns.
2. How We Use Your Information
We use your personal information for the following purposes:
| Purpose | Description |
|---|---|
| Order Fulfillment | Process and ship your orders, provide order confirmations, handle returns and exchanges, and provide customer service. |
| Account Management | Create and manage your account, including password resets and security notifications. |
| Marketing Communications | Send promotional emails, newsletters, and personalized product recommendations (you may opt out at any time). |
| Improving Our Services | Analyze user behavior to enhance Site functionality, improve our product offerings, and personalize your shopping experience. |
| Fraud Prevention & Security | Detect and prevent fraudulent transactions, unauthorized access, and other potentially illegal activities. |
| Legal Compliance | Comply with applicable laws, regulations, and legal requests, and enforce our Terms of Service. |
| Comment Moderation | Manage and display comments you leave on our Site, including spam detection. |
| Form Processing | Process form submissions, including opt-out requests, and respond to your inquiries. |
3. Comments
When visitors leave comments on our Site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available at https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
4. Media
If you upload images to our Site, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the Site can download and extract any location data from images on the Site.
5. Cookies and Tracking Technologies
Like many websites, we use cookies and similar tracking technologies to enhance your browsing experience and improve our services.
What Are Cookies?
Cookies are small text files stored on your device that help us remember your preferences, understand how you interact with our Site, and deliver relevant advertisements.
How We Use Cookies:
- Essential Cookies: Necessary for the Site to function properly (e.g., shopping cart, checkout).
- Performance Cookies: Help us analyze Site traffic and improve functionality (e.g., Google Analytics).
- Advertising Cookies: Deliver targeted ads relevant to your interests and measure ad effectiveness (e.g., Google Ads, Facebook/Meta).
- Comment Cookies: If you leave a comment on our Site, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
- Login Cookies: If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will set up several cookies to save your login information and screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
- WooCommerce Cookies: We use cookies to keep track of cart contents while you are browsing our Site and to remember your preferences during checkout.
Your California Privacy Rights (CCPA/CPRA)
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to:
- Know what personal information we collect about you
- Request deletion of your personal information
- Opt out of the sale or sharing of your personal information
- Not be discriminated against for exercising your privacy rights
California law requires that we provide a “Do Not Sell or Share My Personal Information” link or a “Your Privacy Choices” link. You will find this link in the footer of every page on our Site. Clicking this link will allow you to exercise your opt-out rights. We also honor Global Privacy Control (GPC) browser signals as an opt-out request.
Your GDPR Rights (If You Are in the EU/EEA)
If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):
| Right | Description |
|---|---|
| Right to Access | Request a copy of the personal information we hold about you. |
| Right to Rectification | Request corrections to inaccurate or incomplete information. |
| Right to Erasure (“Right to be Forgotten”) | Request deletion of your personal information, subject to certain exceptions. |
| Right to Restrict Processing | Request that we limit how we use your data. |
| Right to Data Portability | Receive your data in a structured, commonly used format. |
| Right to Object | Object to the processing of your data for marketing or other specific purposes. |
| Right to Withdraw Consent | Withdraw consent for processing based on consent at any time. |
Our Cookie Consent Plugin
We use the GDPR Cookie Compliance plugin to manage cookie consent on our Site. This plugin stores all user consent data locally on our website — we do not send your data to external servers for cookie consent processing. The plugin allows you to:
- Accept all cookies
- Reject non-essential cookies
- Customize your cookie preferences by category
- Revoke or change your consent at any time
A floating “Revoke Consent” button is available on our Site, allowing you to revisit your cookie settings at any time.
Your Choices Regarding Cookies
Most browsers accept cookies by default. You may adjust your browser settings to block or delete cookies. Please note that blocking certain cookies may affect the performance and functionality of our Site.
6. Embedded Content from Other Websites
Articles on our Site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
7. Form Submissions
When you submit a form on our Site (including our opt-out request form, contact forms, or any other forms we may offer), we collect the information you provide, as well as your IP address for spam protection purposes.
We retain form submission data for 30 days. After this period, the data is securely deleted or anonymized.
Forminator Forms
We use Forminator Forms to create and manage forms on our Site. When visitors or users submit a form, we capture the IP Address for spam protection. We also capture the email address and may capture other personal data included in the form fields.
Data Retention: By default, we retain form submissions for 30 days.
Third-Party Services: If we enable third-party integrations (such as Google reCAPTCHA for spam protection, or email marketing services), those services may process your data in accordance with their own privacy policies.
8. How We Share Your Information
We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:
A. Service Providers and Business Partners
We share your information with trusted third-party service providers who perform services on our behalf, including:
- Payment Processors: To process transactions and prevent fraud.
- Shipping Carriers: To fulfill and deliver your orders.
- IT & Hosting Providers: To maintain and secure our Site and data.
- Marketing Platforms: To send emails, manage ads, and analyze campaign performance.
- Analytics Tools: To understand Site usage and improve user experience.
B. Advertising and Analytics Partners
We may share certain information (such as browsing behavior, device data, IP addresses, and interaction with our Site) with the following third-party partners for advertising and analytics purposes:
| Partner | Purpose |
|---|---|
| Google Analytics | Analyze website traffic and user behavior to improve our Site and services. |
| Google Ads | Deliver targeted advertisements across the Google advertising network and measure ad campaign performance. |
| Facebook (Meta) | Deliver personalized ads on Facebook and Instagram, and measure the effectiveness of our ad campaigns. |
| Other Advertising Partners | We may work with other advertising platforms to show you relevant content and offers. |
These partners may collect or receive information about your interactions with our Site and use it to deliver targeted ads and analytics. This data sharing is used for cross-context behavioral advertising, which is covered under the CPRA definition of “share.”
C. Legal Obligations
We may disclose your information if required by law, regulation, or legal process, or to protect the rights, property, or safety of miuluga, our customers, or others.
D. Business Transactions
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the new owner, subject to this Privacy Policy.
E. With Your Consent
We may share your information for other purposes with your explicit consent.
9. Data Security
We take the security of your personal information seriously and implement reasonable technical and organizational measures to protect it:
- Encryption: We use Secure Socket Layer (SSL) technology to encrypt data transmitted between your browser and our Site.
- Access Controls: Access to personal information is limited to authorized personnel who require it for their job functions.
- Secure Storage: We store personal data on secure servers with appropriate firewalls and monitoring.
- Local Data Storage: Our cookie consent plugin stores all user preference data locally on our website — we do not transmit this data to external servers.
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
10. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods include:
| Data Type | Retention Period |
|---|---|
| Order Information | Retained for the duration of our business relationship and for a reasonable period thereafter for tax, audit, and warranty purposes (typically 7 years as required by law). |
| Account Information | Retained as long as your account is active. |
| Comment Data | Retained indefinitely to recognize and approve follow-up comments automatically. |
| Form Submissions | Retained for 30 days. |
| Marketing Preferences | Retained until you opt out or unsubscribe. |
| Consent Records | Consent logs are retained for audit and compliance purposes, with timestamps and hashed visitor identifiers. |
When no longer required, we securely delete or anonymize your personal information.
11. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
| Right | Description |
|---|---|
| Right to Access | Request a copy of the personal information we hold about you. |
| Right to Rectification | Request corrections to inaccurate or incomplete information. |
| Right to Erasure (“Right to be Forgotten”) | Request deletion of your personal information, subject to certain exceptions (e.g., legal obligations). |
| Right to Object | Object to the processing of your data for marketing or other specific purposes. |
| Right to Data Portability | Receive your data in a structured, commonly used format. |
| Right to Withdraw Consent | Withdraw consent for processing based on consent at any time. |
| Right to Opt Out of Sale/Sharing (California Residents) | Opt out of the sale or sharing of your personal information. |
How to Exercise Your Rights: To exercise any of these rights, please contact us using the details provided in Section 17. We will respond to your request within a reasonable timeframe, usually within 30 days.
Opting Out of Marketing: You may opt out of receiving promotional communications at any time by clicking the “unsubscribe” link in any marketing email or by contacting us directly.
“Do Not Sell or Share My Personal Information”: California residents can exercise their opt-out rights by clicking the “Your Privacy Choices” link in the footer of our Site.
12. International Data Transfers
miuluga operates globally. Your personal information may be transferred to and processed in countries outside your country of residence, including the United States. When we transfer data internationally, we take appropriate safeguards to ensure that your data remains protected in accordance with this Privacy Policy and applicable law.
13. Children’s Privacy
Our Site is not intended for children under the age of 13. We do not knowingly collect or solicit personal information from children under 13. If you believe that we have inadvertently collected such information, please contact us immediately, and we will take steps to delete it.
14. California Privacy Rights (CCPA/CPRA)
Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information:
Right to Know
You have the right to request that we disclose the following information about you:
- The categories of personal information we have collected about you
- The specific pieces of personal information we have collected about you
- The categories of sources from which we collect personal information
- The business or commercial purpose for collecting or selling personal information
- The categories of third parties with whom we share personal information
Right to Delete
You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions (e.g., to complete transactions, comply with legal obligations, or detect security incidents).
Right to Opt Out of Sale or Sharing
You have the right to direct us not to sell or share your personal information. We provide a “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” link in the footer of our Site to facilitate this request.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA/CPRA rights. This means we will not:
- Deny you goods or services
- Charge you different prices or rates
- Provide you with a different level or quality of goods or services
Global Privacy Control (GPC)
We honor Global Privacy Control (GPC) browser signals as a valid opt-out request under California law.
Shine the Light Law (California Civil Code Section 1798.83)
California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us using the information in Section 17.
15. Who We Share Data With (WooCommerce)
As an e-commerce store, we share information with third parties who help us provide our orders and store services to you:
Payments
We accept payments through payment processors. When processing payments, some of your data will be passed to our payment processors, including information required to process or support the payment, such as the purchase total and billing information. Please refer to the privacy policy of our payment processors for more details.
Shipping
We share your shipping information with our shipping carriers to fulfill and deliver your orders.
Our Team
Members of our team have access to the information you provide us. Both Administrators and Shop Managers can access:
- Order information like what was purchased, when it was purchased, and where it should be sent
- Customer information like your name, email address, and billing and shipping information
Our team members have access to this information to help fulfill orders, process refunds, and support you.
16. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will post the revised policy on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.
17. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: deryksandez332@gmail.com
Phone: 240-317-7129
Working Hours: Monday – Saturday · 9AM – 5PM
We are here to help and will respond to your inquiry as promptly as possible.
miuluga — Beauty, On Your Own Terms.