Privacy
How we look after your information
This is a short, plain account of what we collect when you subscribe to Dear Mira, why we need it, and what we do with it. If anything here is unclear, ask us.
Who we are
Dear Mira is a monthly letter subscription for children, made by Chris in Exeter, Devon. It is the trading name of Chris Walker, a sole trader; his address is on the terms page. He is the data controller for the information described here. You can reach us at hello@dearmira.co.uk.
What we collect, and why
- To post the envelopes: your name, email address and postal address, and your child’s first name, which goes on the front of the envelope. Without these we cannot send anything.
- To take payment: payments are handled by Stripe. We see your name, the last four digits of your card and the amount paid, and never your full card number.
- For gifts: the child’s first name and address, and your own address if you ask for the first envelope to come to you.
- When you write to us: whatever you choose to put in your email, so that we can reply.
Our lawful basis
UK data protection law asks us to say why we are allowed to use your information. We rely on:
- Contract: to run your subscription, post the envelopes and tell you about your order.
- Legitimate interests: to keep our business records, answer your questions and protect against fraud.
- Consent: for any news from Mira by email beyond your order, if we offer it. You can withdraw it at any time.
Who we share it with
Only the companies we need in order to run the subscription: Stripe, which takes payment and stores your address for us; the email provider we send from; and Royal Mail, which carries the post. We do not sell your information, and we do not share it with anyone else. If Dear Mira moves into a limited company set up to run it, or passes to someone who will carry it on, your details go with it under the same promises, and we will tell you by email before the change.
How long we keep it
For as long as you are subscribed, and for six years after your last payment, because we have to keep records for tax.
Children
Dear Mira is written for children, but our customer is always an adult. We only hold a child’s first name, given to us by the adult who subscribes, so that it can go on the envelope. If a child sends letters or field notes to Mira, we read them and keep them only with the adult’s consent, and we never publish them without asking first. We never contact a child directly, except by post through the subscription.
Your rights
Under UK GDPR you can ask to see the information we hold about you, have it corrected or deleted, ask us to stop using it, or ask for a copy to take elsewhere. Write to hello@dearmira.co.uk and we will reply within a month.
Cookies
This website sets no cookies of its own, and we do not use analytics. The fonts are loaded from Google Fonts, which may record your visit or set its own cookies; Google’s privacy policy explains what it does with that.
Complaints
If you think we have got something wrong, please tell us first and we will do our best to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Changes
If we change this policy, we will put the new date at the top and, if the change matters to you, email you about it.