This Privacy Policy explains how Michio B.V. ("Aciré", "we") collects, uses and protects your personal data when you use the Aciré webshop and related services.
1. Data we collect
- Account data: name, email, phone, password hash, multi-factor settings.
- Order data: items, prices, delivery address, payment method, invoices and payment records.
- Business data (wholesale): company name, registration number, tax ID, contact persons.
- Programs data: loyalty points, referral codes, gift card balances, rewards activity.
- Support data: messages and attachments you send us.
- Technical data: IP address, device, browser, session identifiers, cookies (see the Cookie Policy).
2. How we use your data
- To operate the webshop, process orders, invoices and payments.
- To run customer accounts and provide secure sign-in and multi-factor authentication.
- To operate gift cards, loyalty, rewards and referral programs.
- To send transactional communications (order confirmations, receipts, delivery updates).
- To send marketing communications where you have opted in (you can unsubscribe at any time).
- To detect and prevent fraud, abuse and security incidents.
- To comply with legal obligations (tax, accounting, consumer protection).
3. Legal bases
We rely on: performance of a contract (to fulfil your order), legitimate interests (security, fraud prevention, service improvement), your consent (marketing, non-essential cookies), and legal obligations (tax and accounting records).
4. Sharing your data
- Service providers: hosting, database, email delivery, analytics and payment processors acting under written agreements.
- Delivery partners: to ship your order.
- Authorities: where required by law or to protect our rights.
We do not sell your personal data.
5. International transfers
Some providers may process data outside Curaçao. Where this occurs, we use providers offering appropriate safeguards and contractual protections.
6. Retention
We retain personal data for as long as your account is active and thereafter for the periods required to meet tax, accounting and legal obligations, and to resolve disputes. Order and invoice records are typically retained for at least seven (7) years.
7. Your rights
- Access, correction and deletion of your personal data.
- Restriction of, or objection to, certain processing.
- Data portability for data you provided under a contract.
- Withdrawal of consent at any time (without affecting processing already carried out).
To exercise your rights, contact privacy@acire.shop.
8. Security
We apply technical and organisational measures including encrypted connections, row-level access controls, multi-factor authentication for staff, and audit logging. No system is perfectly secure; please protect your account credentials.
9. Children
The Service is not directed at children under 16 and we do not knowingly collect their data.
10. Changes
We may update this Policy. The version and effective date are shown at the top.
11. Contact
Data controller: Michio B.V. · Curaçao · privacy@acire.shop
Aciré is a trade name of Michio B.V., a company registered in Curaçao. For any legal enquiries please contact legal@acire.shop.