Privacy

Privacy Policy

Last updated: June 2026 · Applies to Mirnest Ltd, company no. 17164263

This policy explains what personal information Mirnest collects, why, how we look after it, and the rights you have. We take your privacy — and your child's — seriously.

1.Who is responsible for your data

Mirnest Ltd (company no. 17164263), 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, is the data controller for the personal information you provide. For any privacy question or request, contact us at support@mirnest.com.

2.The information we collect

Account & order details: your name, email, delivery and billing address, and phone number.
Your child's stage: your baby's date of birth or age, which we use solely to match the right kit to their developmental stage. This is provided by you as the parent or guardian.
Payment information: handled securely by Shopify Payments. We do not store your full card details ourselves.
Communications: messages you send us and our replies.
Website & usage data: information collected through cookies and similar technologies — see our Cookie Policy.

3.Why we use it, and our lawful basis

To provide your subscription — fulfilling orders, matching kits to your child's stage, taking payment, delivering and handling returns. Lawful basis: performance of our contract with you.
To contact you about your kits — dispatch notices, service updates, and responding to your queries. Lawful basis: contract and our legitimate interests.
Marketing — sending you news and offers, only where you've agreed. You can opt out at any time. Lawful basis: consent.
Improving Mirnest — understanding how our site and kits are used. Lawful basis: our legitimate interests in running and improving our business.
Legal and safety obligations — including product-safety records and accounting. Lawful basis: legal obligation.

4.Your child's information

Mirnest sells to adults. We do not knowingly collect information directly from children, and we do not market to children. The only information we hold relating to your child is their age or date of birth, provided by you to match the right kit, and used for no other purpose.

5.Who we share it with

We share personal information only with trusted providers who help us run Mirnest, and only as far as needed:

Shopify, which hosts our online store and processes orders
Shopify Payments, which processes payments
Our delivery and fulfilment partners, to get your kits to you and handle returns
Our email and customer-communication provider, to send order and service messages

We may also share information where required by law. We never sell your personal information.

6.Analytics

At present we rely on the built-in analytics provided by Shopify to understand, in aggregate, how our store is used. If we introduce additional analytics or advertising tools in future, we'll update this policy and our Cookie Policy first, and seek your consent where required.

7.Transfers outside the UK

Some of our providers may process data outside the UK. Where they do, we ensure appropriate safeguards are in place (such as UK-approved contractual clauses) so your information remains protected.

8.How long we keep it

We keep your information for as long as you have an account or subscription with us, and afterwards only as long as needed for legitimate business and legal reasons (for example, tax and product-safety records). When it's no longer needed, we securely delete it.

9.Keeping your data secure

We use appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access. No method of transmission is completely secure, but we work hard to safeguard your data and to act quickly if anything ever goes wrong.

10.Your rights

Under UK data protection law you have the right to: access the information we hold about you; ask us to correct it; ask us to delete it; object to or restrict how we use it; withdraw consent at any time; and request a copy of your data in a portable format. To exercise any of these, email support@mirnest.com and we'll respond within one month.

11.Complaints

We hope to resolve any concern directly, so please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.