Privacy Notice

Who we are. MIRS Store (mirsstore.com) is operated by MIRS Innovate Pte. Ltd., UEN 201719166K, 5 Little Road #03-01, Cemtex Industrial Building, Singapore 536983. We follow Singapore's Personal Data Protection Act 2012 (PDPA).

What we collect

• Enquiries and quotes: your name, email, phone number, company, country, delivery destination, the products you ask about and your message.
• Your account: your email address, and when you sign in with Google, the name, email address and profile picture Google shares with us. We never see or store your Google password. Sign-in links sent by email work once and expire after 24 hours.
• WhatsApp chats: if you message us on WhatsApp, we receive your phone number, WhatsApp profile name and your messages. If you came from one of our ads or our website, we may also receive the reference code linked to the chat.
• Orders and payments: delivery details, items ordered and payment status. Card payments are handled by Stripe on its own secure page; we never see or store your full card number.
• Website analytics (only if you allow analytics): our first-party visitor cookie, page and section views, scroll milestones, button clicks, product and checkout steps, broad device class, campaign tags, ad click IDs, landing page and referring website. We may link a visit to your enquiry Lead ID, account or order when you use those services. We do not record typed form text, full URLs or query strings, IP addresses or session recordings. We do not load third-party analytics or advertising scripts.
• Your browser: your cart, favourites and preferences are stored in your own browser (see our Cookie Notice).

Why we use it

• To answer enquiries, prepare quotes and process orders, deliveries, returns and warranty claims.
• To run your account and keep it secure.
• To understand which websites, campaigns and ads bring customers, and to improve the store (analytics, only with your consent).
• To keep records the law requires.
• To send product news, only if you opt in. You can unsubscribe at any time.

Who we share it with. We share only what each organisation needs to do its job for us:

• Hostinger: website hosting, database and email.
• Google: sign-in, if you choose it.
• WhatsApp (Meta): if you message us.
• Stripe: payments.
• Our product suppliers, couriers and customs agents: to deliver your order. Some orders ship directly from our supplier to you.
• The manufacturer or its service centres: for warranty claims.
• Authorities, where the law requires it.

We do not sell your personal data.

Google Ads measurement. If you arrive from one of our Google ads and you have accepted analytics, we keep the ad click identifier that Google adds to the link. When you place an order or send an enquiry, we may send Google that identifier with the time, the type of conversion (order or enquiry) and the order value, so we can measure which ads work. We do not send your name, email address, phone number or address.

Internal traffic. Staff and internal visits are excluded from analytics reports.

Overseas transfers. Some of these organisations store or process data outside Singapore, including our supplier and courier for international delivery. Where we transfer personal data overseas, we take steps to ensure it is protected to a standard comparable to the PDPA.

How long we keep it

• Enquiries and leads: 24 months after our last contact with you.
• Order and accounting records: as long as Singapore law requires.
• First-party visitor cookie (mirs_vid): up to 180 days after your last visit if you allow analytics.
• Visitor-level analytics events: up to 13 months. Anonymous daily totals: up to 25 months.
• Campaign source and ad click IDs: up to 90 days.
• Your account: until you ask us to close it.

Your choices and rights. You can ask to see or correct the personal data we hold about you, or withdraw your consent, for example to analytics or marketing. Withdrawing consent may mean we can't continue a service that depends on it, and we'll tell you if so. We may need to verify your identity; please don't send identity documents unless we ask through a secure method.

Contact our Data Protection Officer at mirs@mirs-innov.com, or write to the address above. We aim to reply within 30 days.

Changes. If we change this notice, we'll update the date above, and we'll tell you about important changes before they apply.