Privacy policy
Last updated: 3 November 2026
NovaSupplies VOF, trading as Miarus (“we”, “us”, “our”), is committed to protecting your privacy. This Privacy Policy explains what personal data we collect when you visit miarus.com, place an order or contact us, how we use it, who we share it with, how long we keep it, and what rights you have.
We are the data controller of your personal data. We process it in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR). By using our website or placing an order, you confirm that you have read this policy. If you do not agree with it, please do not use our website.
1. Who we are
The shop miarus.com is operated by NovaSupplies VOF, a business registered in the Netherlands under business number 98765795, with its address at PG Nieuwkerkpad 36, 3555TN Utrecht, The Netherlands. For any question about this policy or about how we handle your data, email info@miarus.com.
2. The personal data we collect
We collect and process the following categories of personal data.
- Identity and contact data: your name, email address, telephone number, and delivery and billing addresses.
- Order and transaction data: the products you buy, order value, delivery method, order history, returns, refunds and any payment confirmation details.
- Payment data: payments are processed by third-party payment providers. We do not see or store your full card number or security code. We receive only limited information such as the last four digits of the card, the payment status and the transaction ID.
- Account data: if you create an account, your login details and saved preferences.
- Communication data: messages, emails, and any other correspondence between you and us, including customer service requests, reviews and feedback.
- Technical data: IP address, browser type and version, device type, operating system, time zone setting, language and general location (such as city or region) derived from the IP address.
- Usage data: information about how you use our website, such as pages visited, products viewed, links clicked, search terms, time spent on pages and the website you came from.
- Marketing and cookie data: your preferences for receiving marketing from us, your cookie choices, and how you interact with our emails and adverts.
We do not intentionally collect special-category data (such as data about health, religion or ethnic origin). Please do not send us such information. Our website is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, please contact us so that we can delete it.
3. How we collect your data
- Directly from you: when you place an order, create an account, subscribe to our newsletter, contact customer service, leave a review or enter a competition or survey.
- Automatically: through cookies, pixels, server logs and similar technologies when you browse our website.
- From third parties: such as payment providers, delivery partners, analytics and advertising providers, and fraud-prevention services.
4. How and why we use your data
We use your personal data only where the law allows us to. The table below sets out what we use it for and the legal basis we rely on.
| Purpose | Data used | Legal basis |
|---|---|---|
| To take and process your order, arrange payment and delivery | Identity, contact, order, payment | Performance of a contract |
| To manage returns, refunds and cancellations | Identity, contact, order, payment | Performance of a contract |
| To provide customer service and respond to your enquiries | Identity, contact, communication, order | Performance of a contract; legitimate interests |
| To create and manage your account | Identity, contact, account | Performance of a contract |
| To keep accounting, tax and VAT records and comply with the law | Identity, order, payment | Legal obligation |
| To detect and prevent fraud and keep our website secure | Identity, technical, order, payment | Legitimate interests; legal obligation |
| To analyse and improve our website, products and services | Technical, usage | Legitimate interests; consent where cookies are used |
| To send you marketing emails and offers | Identity, contact, marketing | Consent; legitimate interests for existing customers (soft opt-in) |
| To show you relevant adverts on other websites and platforms | Technical, usage, marketing | Consent |
| To collect and display customer reviews | Identity, communication | Legitimate interests |
| To establish, exercise or defend legal claims | All relevant data | Legitimate interests; legal obligation |
Where we rely on legitimate interests, we have considered whether our interests are outweighed by your rights and freedoms. You can ask us for more information about this assessment. We will only use your data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another compatible purpose. If we need to use it for an unrelated purpose, we will tell you and explain the legal basis.
5. Automated decision-making
We do not make decisions that have legal or similarly significant effects on you based solely on automated processing. We may use automated tools for fraud screening, and if an order is flagged, a member of our team will review it.
6. Who we share your data with
We share personal data only where necessary and with organisations that are bound by confidentiality and data-protection obligations. These include:
- Payment providers to process payments and refunds and prevent fraud.
- Couriers, postal services and fulfilment or warehouse partners to pack and deliver your orders and handle returns.
- E-commerce platform, website hosting, email and customer-support providers that run the technical side of our shop.
- Analytics and advertising providers, such as Google and social media platforms, in line with your cookie choices.
- Professional advisers, such as accountants, auditors, insurers and legal advisers.
- Public authorities, regulators and law enforcement, where we are required to do so by law or to protect our rights.
- Prospective buyers or successors, if our business is sold or restructured, in which case your data may be transferred under the same protections.
We require all service providers to process your data only on our instructions and to keep it secure. We do not sell your personal data.
7. International transfers
We are based in the Netherlands, and some of our service providers are located in other countries, including outside the UK and the European Economic Area. Where we transfer your data outside the UK, we make sure it is protected in at least one of the following ways:
- the country is covered by UK adequacy regulations (the UK currently recognises the European Economic Area as adequate);
- we use the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses;
- another lawful safeguard applies under UK data-protection law.
You can contact us for more information about the safeguards we use.
8. Cookies and similar technologies
We use cookies and similar technologies to make our website work, to understand how it is used, and to show relevant advertising.
- Strictly necessary cookies: needed for the shop to work, for example to keep items in your basket, complete checkout and keep the site secure. These do not need your consent.
- Preference cookies: remember your settings, such as language or region.
- Analytics cookies: help us understand how visitors use the site so we can improve it. These are used only with your consent.
- Marketing cookies: used by us and our advertising partners to show you relevant adverts and measure their performance. These are used only with your consent.
When you first visit our site, you can accept, reject or customise non-essential cookies through our cookie banner. You can change your choice at any time using the cookie settings link on the website. You can also block or delete cookies in your browser settings, but if you block essential cookies, parts of our website may not work properly.
9. Marketing communications
We send marketing emails only if you have signed up, or if you have bought from us and we are promoting similar products, in which case you can opt out at any time. We will never send you marketing by email or text without a lawful basis under PECR. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by emailing info@miarus.com. Opting out of marketing will not stop essential messages about your orders, such as confirmations, delivery updates and refund notices.
10. How long we keep your data
We keep your personal data only for as long as necessary for the purposes set out in this policy, including legal, accounting and reporting requirements.
| Type of data | Retention period |
|---|---|
| Order, invoice and payment records | At least 7 years, to meet tax and accounting obligations |
| Account data | Until you close your account, plus a short period to resolve any issues |
| Customer-service correspondence | Up to 3 years after the matter is closed |
| Marketing data and consent records | Until you unsubscribe or withdraw consent, plus a record that you did so |
| Technical and usage data | Up to 26 months, or according to cookie lifetimes |
When we no longer need your data, we delete or anonymise it securely.
11. Data security
We take appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure and alteration. These include encrypted (HTTPS) connections, secure payment processing, restricted access to personal data on a need-to-know basis and confidentiality commitments from staff and providers. Although we work hard to protect your data, no online system is completely secure, and you share information at your own risk. Please keep your account password confidential. If a data breach is likely to put your rights and freedoms at risk, we will notify you and the Information Commissioner’s Office (ICO) as required by law.
12. Your rights
Under UK data-protection law you have the following rights:
- Right to be informed about how we use your data, which is the purpose of this policy.
- Right of access: to receive a copy of the personal data we hold about you.
- Right to rectification: to have inaccurate or incomplete data corrected.
- Right to erasure: to ask us to delete your data in certain circumstances.
- Right to restrict processing: to ask us to pause the use of your data in certain circumstances.
- Right to object: to processing based on legitimate interests, and at any time to direct marketing.
- Right to data portability: to receive your data in a structured, commonly used format, or have it sent to another provider, where processing is based on consent or contract and carried out by automated means.
- Right to withdraw consent at any time, where we rely on consent. This does not affect the lawfulness of processing before you withdrew it.
- Rights relating to automated decision-making, as described in section 5.
To exercise any of these rights, email info@miarus.com. We may need to ask for proof of identity to make sure your data is not disclosed to someone else. You will not normally have to pay a fee. We aim to respond within one month. If your request is complex or you have made several requests, we may extend this by up to two further months, and we will tell you if so. In some cases the law allows us to refuse a request, and if so we will explain why.
13. Links to other websites
Our website may contain links to third-party websites, plug-ins or applications. We do not control them and are not responsible for their privacy practices. When you leave our website, we encourage you to read the privacy policy of every site you visit.
14. Complaints
If you have a concern about how we use your data, please contact us first at info@miarus.com so that we can try to put things right. You also have the right to complain at any time to the UK data-protection authority, the Information Commissioner’s Office (ICO), at ico.org.uk or by telephone on 0303 123 1113. As we are based in the Netherlands, you may also contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
15. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The latest version is always published on miarus.com, with the date of the last update shown at the top. If we make significant changes, we will let you know, for example by email or a notice on our website.
16. Contact us
If you have any questions about this Privacy Policy or about how we use your personal data, please contact us using the details below.
Company Information
Company Name: NovaSupplies VOF
Shop name: Miarus
Business number: 98765795
Business Address: PG Nieuwkerkpad 36, 3555TN Utrecht
Email: info@miarus.com
Phone:
Customer Service: (GMT +00:00)
Monday – Friday: 8:30 AM – 6:00 PM
Saturday: 9:00 AM – 6:00 PM
Sunday: Closed
We aim to respond within 1 business day.
