Privacy policy

Last updated: 4 October 2026

Mimo Beauty operates this online store and website, including all related information, content, features, tools, products and services, in order to provide customers with a curated shopping experience (the “Services”).

Mimo Beauty is powered by Shopify, which enables us to provide the Services.

This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit or use our website, make a purchase, create an account, contact us, request a return or otherwise interact with our Services.

For the purposes of applicable UK data protection law, Mimo Beauty is the data controller of the personal information described in this Privacy Policy, except where another party, such as Shopify, acts as a separate controller for certain processing activities.

Please read this Privacy Policy carefully.

1. Personal Information We Collect

When we refer to “personal information”, we mean information that identifies you or can reasonably be linked to you.

Depending on how you interact with us, we may collect or process the following categories of personal information:

• Contact information, including your name, email address, telephone number, billing address and delivery address.
• Order and transaction information, including products viewed or purchased, order history, returns, refunds, cancellations and delivery details.
• Payment-related information, including payment method, transaction confirmation and payment status. Payment card details may be processed by Shopify Payments or other payment providers rather than directly by Mimo Beauty.
• Account information, including account login details, preferences and settings where applicable.
• Customer service communications, including information you provide when contacting us about an order, product, return, refund, complaint or other enquiry.
• Device and technical information, including IP address, browser type, device information, network information and other technical identifiers.
• Usage information, including how you interact with our website, pages viewed, products browsed and other website activity.
• Marketing preferences, including whether you have chosen to receive or unsubscribe from promotional communications.

We do not intentionally collect more personal information than is reasonably necessary for the purposes described in this Privacy Policy.

2. How We Collect Personal Information

We may collect personal information:

• Directly from you, for example when you place an order, create an account, contact us, submit a return request or subscribe to marketing communications.
• Automatically through our website, including through cookies and similar technologies.
• From Shopify and other service providers that help us operate our website, process payments, fulfil orders, prevent fraud and provide customer services.
• From other third parties, where permitted by law and where relevant to the operation of our Services.

3. How We Use Your Personal Information

We may use your personal information for the following purposes.

Providing our products and Services

We use personal information to:

• process and manage orders;
• process payments;
• arrange shipping and delivery;
• provide order updates;
• manage customer accounts;
• process returns, refunds and cancellations;
• respond to customer enquiries;
• resolve complaints or disputes; and
• otherwise perform our contract with you.

Customer service and communications

We use your information to respond to questions, provide support and communicate with you about orders, returns, delivery issues, refunds and other matters relating to your purchase.

Security and fraud prevention

We may process personal information to:

• protect our website and customers;
• authenticate accounts;
• detect and prevent fraud;
• investigate suspicious or unlawful activity; and
• maintain the security and integrity of our Services.

Website improvement and analytics

We may use information about how customers interact with our website to understand how our Services are used, improve our website, troubleshoot problems and improve the customer experience.

Marketing and advertising

Where permitted by law, and where required with your consent, we may use your personal information to send marketing and promotional communications, primarily by email.

You can unsubscribe from marketing emails at any time by using the unsubscribe link contained in the email.

We may also use website analytics and advertising technologies where permitted by law and subject to applicable cookie-consent requirements.

Legal and regulatory purposes

We may process and retain personal information where necessary to:

• comply with legal, tax, accounting or regulatory obligations;
• respond to lawful requests from courts, regulators or public authorities;
• establish, exercise or defend legal claims; and
• enforce our Terms of Service and other policies.

4. Lawful Bases for Processing

Where UK data protection law applies, we process your personal information only where we have a lawful basis to do so.

Depending on the circumstances, we may rely on the following lawful bases:

Contract

We process personal information where necessary to enter into or perform a contract with you, including to:

• process your order;
• take payment;
• arrange delivery;
• provide customer service;
• manage returns and refunds; and
• otherwise provide the products and Services you request.

Legal obligation

We may process or retain personal information where necessary to comply with legal, tax, accounting, regulatory or other legal obligations.

Legitimate interests

We may process personal information where necessary for our legitimate business interests, including:

• operating and improving our website;
• preventing fraud;
• protecting our business and customers;
• maintaining website security;
• responding to customer enquiries; and
• understanding how our Services are used.

We only rely on legitimate interests where those interests are not overridden by your rights and interests.

Consent

Where required, we rely on your consent, including for certain marketing communications, cookies and similar technologies.

Where processing is based on consent, you may withdraw your consent at any time.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the website, remember preferences, understand website usage and, where applicable and with appropriate consent, support analytics or marketing activities.

Some cookies are necessary for the website to function and cannot be switched off.

Non-essential cookies, including certain analytics or advertising cookies, will only be used where permitted by applicable law and, where required, after you have provided consent.

You can manage your cookie preferences using the cookie controls available on our website.

6. How We Share Personal Information

We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy.

This may include:

• Shopify, which provides the ecommerce platform used to operate our store.
• Payment providers, which process customer payments and refunds.
• Delivery and fulfilment providers, where necessary to ship and deliver your order.
• IT, hosting, analytics and technical service providers, where necessary to operate and maintain our website.
• Professional advisers, such as accountants, legal advisers or other professional service providers where required.
• Government authorities, regulators, courts or law enforcement agencies, where disclosure is required or permitted by law.
• Business transaction parties, where necessary in connection with a future sale, transfer, restructuring or similar transaction involving the business.

We may also disclose information where you specifically request or consent to that disclosure.

We do not sell your personal information in the ordinary meaning of the term.

7. Relationship with Shopify

Our store is hosted by Shopify.

Shopify collects and processes certain personal information relating to your access to and use of our Services in order to provide and improve its services.

Information submitted through our store may be transmitted to and processed by Shopify and other service providers, including providers located outside the United Kingdom.

Shopify may also process certain information as an independent data controller for its own purposes.

For more information about how Shopify handles personal information, please refer to Shopify’s Consumer Privacy Policy and privacy resources available through Shopify.

8. Third-Party Websites and Services

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy, security or content of third-party websites that we do not control.

If you follow a third-party link, you should review that third party’s privacy policy before providing personal information.

9. Children’s Data

Our Services are not specifically directed at children.

We do not knowingly collect personal information from children where doing so would be unlawful.

If you believe that a child has provided us with personal information without appropriate authorisation, please contact us at contact@mimobeauty.uk so that we can review the matter and, where appropriate, delete the information.

10. Security of Your Personal Information

We take reasonable technical and organisational measures to protect personal information against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Please avoid sending highly sensitive or confidential information to us through unsecured communication channels.

11. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

This may include retaining information to:

• provide our Services;
• maintain transaction and accounting records;
• comply with tax, legal and regulatory obligations;
• resolve disputes;
• prevent fraud; and
• establish, exercise or defend legal claims.

The exact retention period depends on the type of information, the reason it was collected and any applicable legal requirements.

When personal information is no longer required, we will delete, anonymise or securely dispose of it where reasonably practicable.

12. International Transfers

Some of our service providers, including Shopify, may process or store personal information outside the United Kingdom.

Where personal information is transferred outside the UK, appropriate safeguards will be used where required by law.

These may include:

• transfers to countries recognised as providing an adequate level of protection;
• approved contractual safeguards, including UK-approved data transfer agreements or recognised standard contractual clauses; or
• other lawful transfer mechanisms permitted under applicable data protection law.

13. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have the following rights in relation to your personal information.

Right of access

You may request confirmation of whether we hold personal information about you and request a copy of that information.

Right to correction

You may ask us to correct inaccurate or incomplete personal information.

Right to deletion

You may ask us to delete your personal information in certain circumstances.

This right is not absolute and we may retain information where required by law or where another lawful basis applies.

Right to restriction

You may ask us to restrict the processing of your personal information in certain circumstances.

Right to object

You may object to certain processing, including processing based on legitimate interests and direct marketing.

Right to data portability

In certain circumstances, you may have the right to receive personal information you have provided to us in a structured, commonly used and machine-readable format, or ask us to transfer it to another organisation.

Right to withdraw consent

Where we rely on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Marketing preferences

You may unsubscribe from promotional emails at any time using the unsubscribe link in the email.

You may still receive non-marketing communications relating to your orders, account, returns, refunds or other transactions.

To exercise your rights, please contact us at contact@mimobeauty.uk.

We may need to verify your identity before responding to certain requests.

14. Complaints

If you have any concerns about how we collect or use your personal information, please contact us first at:

contact@mimobeauty.uk

We will try to resolve your concern.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

Information about data protection rights and how to make a complaint is available through the ICO.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• our business practices;
• our website or Services;
• the service providers we use; or
• applicable legal or regulatory requirements.

When we make changes, we will update the “Last updated” date at the top of this Privacy Policy and provide additional notice where required by law.

16. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise your data protection rights, please contact:

Mimo Beauty
124 City Road
London
EC1V 2NX
United Kingdom

Email: contact@mimobeauty.uk

For the purposes of applicable UK data protection law, Mimo Beauty is the data controller of the personal information described in this Privacy Policy.