Privacy policy
Privacy Policy
Last updated: September 26, 2026
Milla Bay operates this store and website, including all related information, content, features, tools, products and services (the "Services"). Milla Bay is operated by Vestera Commerce, Meidoornlaan 17, 3881 EM Putten, The Netherlands (CoC/KvK: 69471002) and is powered by Shopify. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase through the Services, or otherwise communicate with us. Where this policy conflicts with our Terms of Service, this policy controls in relation to personal information.
By using the Services you acknowledge that you have read this policy and understand how your information is collected, used and disclosed.
Personal information we collect
Depending on how you interact with the Services, we may collect:
- Contact details — name, billing address, shipping address, phone number and email address
- Payment information — card and payment details, transaction details, form of payment and payment confirmation, processed by our payment providers
- Transaction information — items you view, add to your cart or wishlist, and orders you place, return, exchange or cancel
- Communications — the content of messages you send us, for example a support request
- Device information — device, browser and network details, IP address and other identifiers
- Usage information — how and when you interact with and navigate the Services
Where we collect it from
- Directly from you, when you order, contact us or otherwise provide it
- Automatically through the Services, including via cookies and similar technologies
- From our service providers, when they process information on our behalf
How we use it
- To provide the Services — process payments, fulfil and ship your order, handle returns and exchanges, and improve the shopping experience
- Marketing — to send promotional emails where you have signed up for them; you can unsubscribe at any time via the link in every email
- Security and fraud prevention — to secure payments and investigate suspicious activity
- Communicating with you — to provide customer support and respond to your questions
- Legal reasons — to comply with the law, respond to valid legal process, and enforce our terms and policies
Who we disclose it to
- Shopify, and vendors who perform services on our behalf such as IT, payment processing, analytics, customer support, cloud storage, fulfilment and shipping (fulfilment partners receive your name and delivery address only, to ship your order)
- Third parties where you direct or consent to it
- In connection with a business transaction such as a merger, or to comply with legal obligations and protect our rights
We do not sell your personal information.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit is transmitted to Shopify and may be shared with third parties located in countries other than where you live. In these circumstances Shopify is responsible for its own processing of your personal information, including responding to requests about it. See Shopify's consumer privacy policy for more.
Third-party websites and links
The Services may link to websites operated by third parties. We are not responsible for their privacy or security practices, and our inclusion of a link does not imply endorsement. Please review their policies before using them.
Children's data
The Services are not intended for children and we do not knowingly collect personal information about children under the age of majority in your jurisdiction. If you are a parent or guardian of a child who has provided us with personal information, contact us using the details below and we will delete it.
Security and retention
No security measure is perfect and we cannot guarantee absolute security. Please do not use unsecured channels to send us confidential information.
How long we keep your information depends on why we hold it: to provide the Services, to comply with legal obligations (order and invoice data is kept for 7 years under Dutch tax law), or to resolve disputes and enforce our policies. Marketing data is kept until you unsubscribe.
Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Have it corrected if it is inaccurate
- Have it deleted
- Receive a copy in a portable format
- Manage your marketing preferences — you can unsubscribe from promotional emails at any time using the link in the email
If you are in the European Economic Area or the United Kingdom you may also object to or restrict certain processing, and withdraw your consent where we rely on it.
To exercise any of these rights, contact us using the details below. We may need to verify your identity first. We will respond within the period required by applicable law and will not discriminate against you for exercising your rights.
Complaints
If you have a complaint about how we handle your personal information, contact us using the details below. You also have the right to lodge a complaint with your local data protection authority; for the Netherlands this is the Autoriteit Persoonsgegevens.
International transfers
We may transfer, store and process your personal information outside the country where you live. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or on an adequacy decision.
Cookies
We use cookies to operate the store, remember your cart and understand how the site is used. You can manage your preferences through your browser settings.
Changes to this policy
We may update this policy to reflect changes in our practices or for operational, legal or regulatory reasons. We will post the revised version here and update the "Last updated" date.
Contact information
Store name: Milla Bay
Company name: Vestera Commerce
Company address: Meidoornlaan 17, 3881 EM Putten, The Netherlands
Company registration number (KvK): 69471002
VAT number: NL002203174B53
Email: info@millabay.com
Customer service hours: Monday – Friday, 9:00am – 5:00pm (EST)
We reply to every message within 24–48 business hours.