Privacy Policy

1. Introduction

MISO™ The Cat ("MISO™", "we", "us", or "our") operates the online store at itsmisothecat.com (the "Site"). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have over it. By using the Site or placing an order, you consent to the practices described here.

2. Data We Collect

2.1 Account & Contact Data

When you create an account, place an order, or contact us, we collect your name, email address, shipping address, billing address, and phone number.

2.2 Order & Payment Data

We collect order details, including the items purchased, transaction amount, and shipping method. Payment card information is processed entirely by our third-party payment processor (Stripe) — we never receive, store, or transmit full card numbers on our servers.

2.3 Newsletter & Marketing Data

If you join our drop list or subscribe to our newsletter, we collect your email address. You can unsubscribe at any time using the link in any email or by contacting us.

2.4 Cookies & Analytics

We use essential cookies to maintain your session, remember cart contents, and process checkout. We use analytics cookies (including Google Analytics) to understand how visitors use the Site, which pages are most popular, and where traffic comes from. You can disable non-essential cookies in your browser settings or via our cookie banner where applicable.

3. How We Use Your Data

• To process and fulfil your orders, including shipping and returns.
• To send order confirmations, shipping updates, and customer service communications.
• To send newsletter and marketing emails, but only if you have opted in.
• To detect and prevent fraud, abuse, and unauthorised access.
• To improve the Site, our products, and our customer experience.

4. Lawful Basis for Processing (GDPR)

For users in the European Economic Area and the United Kingdom, we process your personal data under the following lawful bases:

• Performance of a contract — processing your order and delivering products.
• Legitimate interests — fraud prevention, site security, and analytics.
• Consent — newsletter subscriptions and non-essential cookies.
• Legal obligation — tax and accounting record-keeping.

5. Data Sharing & Third Parties

We do not sell your personal data. We share it only with the following categories of service providers, under written agreements that require them to protect it:

• Payment processors (Stripe) — to process and secure your payment.
• Shipping carriers — to deliver your order; we share your name, address, and phone number.
• Email & marketing platforms — to send newsletter and order emails.
• Analytics providers (Google Analytics) — to measure Site traffic and usage.
• Legal authorities — where required by law, court order, or to protect our rights.

6. Data Retention

We retain account and order data for as long as your account is active, plus the period required by tax and accounting law (typically 7 years). Newsletter data is retained until you unsubscribe. You may request earlier deletion of your account and personal data at any time, subject to our legal retention obligations.

7. Data Security

We use industry-standard measures to protect your data, including TLS encryption for data in transit, access controls, and secure infrastructure. Payment data never touches our servers — it is transmitted directly to our PCI-compliant payment processor. No method of transmission or storage is 100% secure, but we work to protect your data using commercially acceptable means.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request that we delete your personal data (the "right to be forgotten").
• Opt-out — unsubscribe from marketing emails or disable non-essential cookies at any time.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent — withdraw consent for processing based on consent at any time.
• Object — object to processing based on legitimate interests.

To exercise any of these rights, contact us at the email address in Section 11. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

9. CCPA Notice (California Residents)

If you are a California resident, you have the right to know what personal data we collect about you, request deletion of that data, opt out of the sale of your personal data, and not be discriminated against for exercising these rights. We do not sell personal data. To submit a request, contact us at the email in Section 11.

10. Children's Privacy

The Site is not directed at children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Contact

Questions or requests about this Privacy Policy or your personal data? Email us at support@itsmisothecat.com or reach us through the Contact section on our Terms & Conditions page.