Privacy Policy

This Privacy Policy explains how MIREVONX, LLC collects, uses, stores, protects, and discloses personal information when you visit mirevonx.com, create an account, place an order, contact us, request a return or refund, or otherwise interact with our website and services.

This website is a self-hosted store built on WordPress and powered by WooCommerce. We are responsible for operating the website and for determining how personal information collected through the store is handled, subject to applicable laws and the independent processing activities of third-party service providers described in this Privacy Policy.

1. Information We Collect

We may collect personal information that you voluntarily provide to us when you place an order, create an account, contact customer service, submit a form, request a return or refund, or otherwise use our website.

Depending on how you interact with the website, this information may include your name, billing address, shipping address, email address, telephone number, account details, order information, selected payment method, communications with us, return or refund information, and other information reasonably necessary to provide our services.

We may also automatically collect certain technical information when you use the website, including IP address, browser type, device type, operating system, referring pages, pages visited, approximate geographic region, session information, and information generated through cookies or similar technologies.

2. Order and Transaction Information

When you place an order through mirevonx.com, we collect and maintain information necessary to process and fulfill that order. This may include the products ordered, quantities, prices, applicable shipping charges, transaction currency, order status, billing and shipping details, timestamps, selected payment method, shipping information, tracking information, and related customer communications.

We retain appropriate order and transaction records so that we can fulfill purchases, provide customer support, process returns and refunds, respond to delivery questions, maintain accounting records, prevent fraud, and address payment disputes or chargebacks.

3. Payment Information and Payment Providers

Payments made through mirevonx.com may be processed by independent third-party payment service providers, including Stripe and PayPal.

When a customer enters payment credentials, sensitive payment information is transmitted to the applicable payment provider for authorization and processing. We do not store complete payment card numbers, CVV or CVC security codes, PayPal passwords, PayPal login credentials, or other sensitive payment authentication credentials on our own servers.

We may retain non-sensitive transaction information associated with an order, such as the payment method used, transaction status, payment provider reference or transaction identifier, refund status, payment date, and related order records where necessary for legitimate business, accounting, fraud-prevention, customer-support, and dispute-management purposes.

4. Payment Security

We take payment security seriously and use reasonable technical and organizational safeguards designed to protect information transmitted during checkout and payment processing.

Our website uses HTTPS and SSL/TLS encryption to protect information transmitted between a customer's browser and our website. Payment providers may use additional safeguards including tokenization, encrypted transmission, fraud detection systems, payment authorization controls, risk screening, and 3D Secure authentication where supported.

Tokenization can help reduce exposure of sensitive payment credentials by replacing payment information with a non-sensitive token used for transaction processing. Where available, 3D Secure may provide an additional authentication step between the customer, card issuer, and payment processor.

5. How We Use Personal Information

We may use personal information to process and fulfill orders, arrange shipping, provide tracking information, communicate with customers, respond to questions, provide customer support, process returns and refunds, maintain customer accounts, investigate delivery problems, prevent fraud, maintain website functionality, comply with legal obligations, and protect our legitimate business interests.

We may also use relevant information to verify transactions, investigate suspicious activity, document the fulfillment of an order, and respond to requests from payment providers, banks, card issuers, regulators, or other authorized parties where reasonably necessary.

6. Legal Bases for Processing

Where applicable data protection law requires a legal basis for processing personal information, we may rely on one or more of the following grounds:

Processing necessary to perform a contract with you, including processing and delivering your order;
Processing necessary to comply with legal or regulatory obligations;
Processing based on our legitimate interests, provided those interests are not overridden by your rights and freedoms;
Processing necessary to establish, exercise, or defend legal claims; and
Processing based on your consent where consent is required by law.

7. WooCommerce and WordPress

Our online store is built using WordPress and WooCommerce. These systems provide the technical framework used to display products, manage customer accounts, create orders, maintain order records, calculate transaction information, and support store functionality.

Information submitted through the website may therefore be processed within our self-hosted WordPress and WooCommerce environment where reasonably necessary to operate the store.

We take reasonable measures to maintain the security of our website installation, including maintaining software updates, restricting administrative access, reviewing extensions and plugins, and using appropriate hosting and server-security controls.

8. Shipping and Fulfillment Information

To fulfill an order, we may use customer information such as the recipient's name, shipping address, telephone number, email address, order information, and other delivery-related details.

We may share the information reasonably necessary for delivery with shipping carriers, logistics providers, fulfillment providers, postal services, customs authorities, or other organizations involved in transporting or delivering an order.

Such parties receive only the information reasonably necessary to perform the applicable shipping, customs, fulfillment, or delivery service.

9. Returns, Refunds, and Customer Support

When you request a return, refund, replacement, or other post-purchase assistance, we may collect and process your order number, contact details, reason for the request, photographs, product-condition information, shipping information, return tracking information, communications, and related evidence.

This information may be used to assess eligibility under our Return & Refund Policy, process an approved refund, investigate damaged or incorrect products, communicate with shipping providers, and maintain records of the resolution.

10. Payment Disputes and Chargebacks

If a customer submits a payment dispute or chargeback through Stripe, PayPal, a bank, card issuer, or another payment provider, we may use and disclose relevant transaction records for the purpose of investigating and responding to that dispute.

Such records may include order confirmation, transaction identifiers, payment authorization status, billing information, shipping information, carrier tracking, delivery confirmation, customer communications, product information, return requests, refund records, and other information reasonably necessary to demonstrate how the transaction was processed and fulfilled.

Information used in a payment dispute is limited to what is reasonably relevant to reviewing, documenting, or defending the transaction.

11. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential website functions, maintain shopping carts, remember customer preferences, maintain login sessions, improve website performance, detect security issues, and understand how visitors interact with the website.

Some cookies may be necessary for WooCommerce checkout, cart functionality, authentication, security, or other essential store functions. Where applicable law requires consent for non-essential cookies, such technologies should be used in accordance with applicable consent requirements.

12. Analytics and Technical Data

We may process technical and usage information to understand how the website operates, identify errors, improve website performance, prevent abuse, and protect the security of the store.

Technical information may include IP addresses, browser information, device information, operating-system information, timestamps, referring URLs, pages viewed, session data, and diagnostic or security logs.

Where analytics providers or similar third parties are used, their handling of information may also be governed by their own privacy policies and contractual obligations.

13. Third-Party Service Providers

We may engage third-party service providers where reasonably necessary to operate our business and website. These providers may include payment processors, hosting providers, email service providers, shipping carriers, fulfillment providers, security providers, fraud-prevention providers, analytics services, technical support services, and professional advisers.

We seek to limit disclosure to information reasonably necessary for the provider to perform the relevant service. Third parties may also have independent legal obligations governing their processing of personal information.

Stripe and PayPal process payment-related information according to their own privacy, security, regulatory, and contractual requirements.

14. Information Security Measures

We use reasonable technical and organizational measures designed to reduce the risk of unauthorized access, disclosure, alteration, loss, misuse, or destruction of personal information.

Depending on the nature of the system and information involved, these measures may include:

HTTPS connections and SSL/TLS encryption for information transmitted through the website;
Restricted administrative access to WordPress and WooCommerce;
Strong account authentication and password controls;
Role-based access where appropriate;
Regular updates to WordPress, WooCommerce, plugins, themes, and relevant server software;
Monitoring for suspicious access, unauthorized activity, or technical vulnerabilities;
Firewall, server-security, anti-malware, or similar protective controls where appropriate;
Secure hosting practices and controlled access to administrative systems;
Regular backups designed to support recovery from technical incidents;
Payment tokenization and external payment processing through Stripe and PayPal; and
Limiting access to customer data to persons who require access for legitimate business purposes.

No internet-based system can be guaranteed to be completely secure. However, we take reasonable steps to maintain protections appropriate to the nature of the information we process.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as required by applicable law.

Order, transaction, shipping, refund, accounting, and customer-service records may be retained for periods necessary to satisfy contractual, tax, accounting, fraud-prevention, dispute-resolution, chargeback, recordkeeping, or legal obligations.

Where information is no longer reasonably required and there is no lawful basis for continued retention, we may delete, anonymize, or securely dispose of that information.

16. International Data Transfers

Because our website may serve customers in multiple countries and use service providers operating internationally, personal information may in some circumstances be processed or transferred outside the country or region in which the customer is located.

Where applicable law requires safeguards for international transfers, we seek to rely on recognized legal mechanisms, contractual safeguards, adequacy decisions, or other permitted transfer methods appropriate to the circumstances.

Payment providers such as Stripe and PayPal may independently process payment information in jurisdictions where they or their service providers operate.

17. GDPR — Rights of Individuals in the European Economic Area

If you are located in the European Economic Area, European Union, or another jurisdiction where the General Data Protection Regulation applies, you may have specific rights under the General Data Protection Regulation (GDPR).

Subject to applicable legal conditions and exceptions, these rights may include:

Right of access: You may request information about whether we process your personal data and request a copy of relevant personal data.
Right to rectification: You may request correction of inaccurate or incomplete personal data.
Right to erasure: You may request deletion of personal data in circumstances where continued processing is no longer legally justified.
Right to restriction: You may request that certain processing activities be restricted in appropriate circumstances.
Right to data portability: Where applicable, you may request certain personal data in a structured, commonly used, and machine-readable format.
Right to object: You may object to processing based on certain legitimate interests or to direct marketing where applicable.
Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Right to lodge a complaint: You may lodge a complaint with a competent data protection supervisory authority.

These rights are not absolute. We may retain or continue processing certain information where necessary to comply with legal obligations, complete contractual obligations, prevent fraud, protect legal rights, maintain financial records, or establish, exercise, or defend legal claims.

18. California and Other U.S. Privacy Rights

Residents of certain U.S. states may have additional privacy rights depending on applicable state law and whether the relevant statutory requirements apply to our business.

Such rights may include rights to request access to certain personal information, request correction, request deletion, receive certain disclosures regarding data practices, or exercise other rights provided under applicable law.

We will consider valid privacy requests in accordance with the laws that apply to us and the requesting individual.

19. Children’s Privacy

Our website and products are intended for general adult consumers and are not directed toward children for the purpose of collecting personal information.

We do not knowingly seek to collect personal information from children in violation of applicable law. If we become aware that personal information relating to a child has been collected in circumstances requiring parental or guardian consent and such consent was not properly obtained, we will take reasonable steps to address the information as required by law.

20. Data Breach and Security Incident Response

If we identify a suspected security incident involving personal information, we may investigate the incident, take steps to contain or mitigate the issue, preserve relevant technical records, secure affected systems, review access controls, and work with hosting, security, payment, or technical providers where appropriate.

Where applicable law requires notification of a personal data breach to affected individuals, regulators, supervisory authorities, or other parties, we will take reasonable steps to make the required notifications within the legally applicable timeframe.

Because Stripe and PayPal independently control their payment-processing environments, security incidents occurring entirely within those providers' systems may be managed under their own incident-response procedures.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, WooCommerce configuration, payment providers, shipping arrangements, security practices, legal obligations, or other operational requirements.

The updated version will be published on mirevonx.com. Where required by applicable law, we may provide additional notice or obtain consent before materially changing the way personal information is processed.

Customers are encouraged to review this Privacy Policy periodically to remain informed about our privacy and data-security practices.

22. Contact Information and Privacy Requests

If you have questions about this Privacy Policy, how your personal information is handled, a security concern, or a request to exercise an applicable privacy right, please contact us using the information below:

MIREVONX, LLC
Address: 1020 Plain St, Ste 270, Marshfield, MA 02050, US
Phone: +1 (781) 924-1315
Email: [email protected]

When submitting a privacy request, we may request reasonable information necessary to verify your identity and determine which records relate to you. We will use verification information only as reasonably necessary to process and respond to the request.

Privacy requests do not automatically require deletion of information that we are legally permitted or required to retain, including records necessary for accounting, fraud prevention, order fulfillment, refunds, chargebacks, legal compliance, or the establishment, exercise, or defense of legal claims.