Privacy Policy

Last updated: 02 September 2026

This Privacy Policy explains how Mia collects, uses, and shares your personal information when you visit growmia.ie, make a purchase, or otherwise interact with us (the "Services").

For the purposes of data protection law, the data controller is Mia Garden Systems Limited, a company registered in Ireland (company number 815970), registered office at 9 Wheat Field Garryvoe Lower, Ladysbridge, Cork, P25 E8K8. You can contact us at any time at hello@growmia.ie.

Our store is built on Shopify, which hosts the Services and processes personal information on our behalf to make them work.

Please read this policy carefully. By using the Services, you acknowledge that you understand how we handle your information as described below. Nothing in this policy affects your rights under the General Data Protection Regulation (GDPR) and Irish data protection law.

Personal information we collect

Depending on how you interact with us, we may collect:

• Contact details — your name, billing and shipping address, email address, and phone number.
• Order and transaction information — the items you view, add to your cart, and purchase, and your order history.
• Payment information — payment card and transaction details. Note: card details are handled directly by our payment providers; we don't store full card numbers ourselves.
• Communications — anything you include when you contact us, for example a support query or a review.
• Account information — if you create an account, your login details and preferences.
• Device and usage information — your IP address, browser and device details, and how you navigate the site, collected through cookies and similar technologies (see Cookies below).

How we use your information, and our lawful basis

Under GDPR we must have a lawful basis for using your information. We rely on the following:

• To fulfil your order and provide the Services — processing payments, arranging delivery, handling returns, managing your account, and responding to you. Lawful basis: performance of our contract with you.
• Marketing emails — sending you updates, growing tips, and occasional product news, where you've signed up. Lawful basis: your consent (or, for existing customers, our legitimate interest in telling you about similar products). You can unsubscribe at any time using the link in any email.
• Analytics and improving the site — understanding how the site is used so we can improve it. Lawful basis: your consent for non-essential cookies, and our legitimate interest in running and improving our business.
• Security and fraud prevention — keeping the site and your order secure. Lawful basis: our legitimate interests.
• Legal and accounting obligations — keeping records as required by Irish tax and company law. Lawful basis: compliance with a legal obligation.

Who we share your information with

We don't sell your personal information. We share it only with the service providers we need to run the business, and only for the purposes above. These include:

• Shopify — our e-commerce platform and website hosting.
• Klaviyo — our email marketing platform (based in the United States).
• Google Analytics — website analytics (Google, based in the United States).
• Shopify Payments / Revolut and PayPal — payment processing.
• Klarna — if you choose to pay by instalments or "buy now, pay later," Klarna processes your information to offer and manage that payment method, including carrying out its own credit and identity checks.
• Judge.me — our product reviews platform, which may email you to invite a review of a purchase.
• Our delivery courier — to ship your order, we share your name, address, and contact details.

Each of these uses your information under their own privacy terms and only as needed to provide their service to us. We may also disclose information where required by law, or in connection with a sale or restructuring of the business.

International transfers

Some of our providers (including Klaviyo, Google, and Shopify) are based outside the European Economic Area, mainly in the United States. Where your information is transferred outside the EEA, we rely on recognised safeguards — such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework where the provider is certified — to protect it.

Cookies

We use cookies and similar technologies to run the site, remember your preferences, and (with your consent) measure how the site is used. You can manage your preferences through the cookie banner on our site, and through your browser settings. Non-essential cookies, such as analytics, are only set if you consent.

How long we keep your information

We keep your information only as long as we need it:

• Order and transaction records — around 6 years, to meet Irish tax and accounting requirements.
• Marketing contacts — until you unsubscribe or withdraw consent.
• Account information — for as long as your account is active.
• Analytics data — in line with our analytics provider's retention settings.

Your rights

Under GDPR you have the right to:

• Access the personal information we hold about you.
• Correct information that's inaccurate.
• Delete your information (in certain circumstances).
• Portability — receive a copy of your information, or have it transferred, in certain circumstances.
• Object to or restrict our processing of your information.
• Withdraw consent at any time, where we rely on consent (this won't affect processing done before you withdrew it).

To exercise any of these, email us at hello@growmia.ie. We'll respond within the timeframe required by law, and we may need to verify your identity first. We won't treat you any differently for exercising your rights.

Complaints

If you're unhappy with how we've handled your information, please contact us first at hello@growmia.ie so we can try to put it right. You also have the right to lodge a complaint with the Irish Data Protection Commission (the supervisory authority for Ireland) at dataprotection.ie.

Children

The Services are not intended for children, and we don't knowingly collect personal information from anyone under 16. If you believe a child has provided us with their information, contact us and we'll delete it.

Security

We take reasonable steps to protect your information, but no method of transmission or storage is completely secure, so we can't guarantee absolute security. Please avoid sending us sensitive information through insecure channels.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or for legal reasons. We'll post the updated version here and revise the "Last updated" date above.

Contact

For any questions about this policy or your personal information, email us at hello@growmia.ie.

Mia Garden Systems Limited is the data controller of your personal information for the purposes of Irish and EU data protection law.