Privacy policy

Who we are

This site sells the Jewelry Box. "We" means MiLi. For any privacy question or request, contact our privacy contact at service@mili-shop.com.

What we collect

• When you order: your name, email, shipping and billing address, phone number if you give one, what you bought and the last four digits and type of your card. Card details are entered on Stripe’s secure checkout; we never see or store the full number.
• When you email us: your email address and what you write.
• When you visit: our host keeps standard server logs (IP address, browser type, pages requested, time) for security and to keep the site running. Your browser stores one setting on your own device, whether you turned animations off. We do not use analytics, advertising cookies or tracking pixels.

Your box’s location

The tracker in your box works through Apple Find My or Google Find Hub. Location reports go through Apple or Google, encrypted so that only you can see them, under their own privacy policies. We never receive your box’s location or your Apple or Google account details.

How we use it

To process payment, ship your order and send tracking, to handle returns, refunds and warranty claims, to answer your messages, to prevent fraud, and to keep records that tax and accounting laws require. We only send marketing emails if you ask for them, and every one has an unsubscribe link.

Who we share it with

Only the service providers that help us do the above, and only what each one needs:

• Stripe, to take payment and prevent fraud.
• Shipping carriers, to deliver your order.
• Our web host and email provider, to run the site and our inbox.
• Authorities, if the law requires it.

We do not sell your personal information, and we do not share it for advertising.

Where it is stored

Your information may be stored and processed outside your state, province or country, including in the United States, by us and our service providers. Wherever it goes, we require it to be protected to the standard in this policy.

How long we keep it

Order records are kept for as long as tax and accounting laws require, generally up to 7 years. Emails are kept as long as needed to resolve your request. Server logs are kept for a short time and then deleted.

Your rights

You can ask to see the personal information we hold about you, correct it, delete it, or get a copy, and you can withdraw consent to marketing at any time. Email service@mili-shop.com; we reply within 30 days and will not treat you differently for asking. We may need to confirm it is you, and we may keep what the law requires us to keep.

California residents have these rights under the California Consumer Privacy Act, plus the right to know which categories of information we collect (listed above) and to opt out of sales or sharing, which we do not do. Canadian residents have these rights under PIPEDA and, in Quebec, Law 25. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

Do Not Track

We don’t track you across other websites, so a Do Not Track signal changes nothing here.

Children

This site is not meant for children under 13, and we do not knowingly collect their information. If you think a child has given us information, email us and we will delete it.

Security

The site uses HTTPS, payments run on Stripe’s PCI-compliant checkout, and access to order information is limited to the people who need it. If a breach ever puts your information at risk, we will tell you and the regulators as the law requires.

Changes

If we change this policy, we update the date below. If a change is significant, we will say so on this page before it takes effect.