Privacy policy
Last updated: October 6, 2026
This Privacy Policy explains how we collect, use, and share your personal information when you visit or buy from mysa-miami.com (the "Site"). It is written to meet the EU General Data Protection Regulation (GDPR) and U.S. state privacy laws.
1. Who is responsible for your data
The data controller is:
Daily Healthy B.V., trading as Mysa Miami ("we," "us," or "our") Registered in the Netherlands β Chamber of Commerce (KvK) number: 94546215 Registered office: Parelmoervlinder 33, 7534 MB Enschede, Netherlands
U.S. shipping, returns and customer service address: 85-27 250th St, Jamaica, NY 11426, United States Email: info@mysa-miami.com Phone: +1 864 453-9095 (MondayβFriday, 9:00 AMβ5:00 PM ET)
We are not required to appoint a Data Protection Officer under Article 37 GDPR. You can send any privacy request to the contact details above.
2. What we collect, why, and how long we keep it
| Purpose | Information | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|
| Processing orders, payments, shipping, and returns | Name, shipping and billing address, email, phone, order details | Performance of a contract β Art. 6(1)(b) | 7 years |
| Customer service | Contact details, content of your messages | Contract and legitimate interest β Art. 6(1)(b), 6(1)(f) | 24 months |
| Fraud prevention and payment security | Transaction data, IP address, device information | Legitimate interest and legal obligation β Art. 6(1)(f), 6(1)(c) | 24 months |
| Tax and accounting | Billing information, transaction records | Legal obligation β Art. 6(1)(c) | 7 years |
| Newsletter and marketing emails | Email address, name | Consent β Art. 6(1)(a) | Until you unsubscribe |
| Site analytics | Cookies, device identifiers, usage data | Consent β Art. 6(1)(a) | See our Cookie Policy |
| Advertising and retargeting | Cookies, advertising identifiers | Consent β Art. 6(1)(a) | See our Cookie Policy |
We need certain information to process your order. Without it, we can't complete your purchase. Giving us your information for marketing is optional, and you can withdraw your consent at any time by clicking "unsubscribe" in any email or by contacting us.
3. Who we share your information with
We share personal information only with service providers that process it on our behalf under a data processing agreement (Art. 28 GDPR), and with others where the law requires it:
- Shopify International Limited and its group companies β e-commerce platform and site hosting
- PayPal and other payment service providers β processing payments and preventing fraud
- Shipping carriers (USPS) β delivering orders and handling returns
- Google Ireland Limited β analytics, advertising, and Merchant Center tools, only with your consent
- Meta Platforms Ireland Limited β advertising and ad measurement, only with your consent
- hCaptcha (Intuition Machines, Inc.) β spam protection on our contact form
- Customer support and email service providers
- Tax, legal, and accounting advisors, and government authorities when required by law
We never sell your personal information for money or give it to third parties for their own marketing. Some advertising and analytics cookies may count as "selling" or "sharing" personal information under certain U.S. state laws. You can opt out, as explained in Section 5.
4. International data transfers
We are based in the Netherlands, and we deliver to customers in the United States. Your information will therefore be transferred to and processed in the United States and other countries outside the European Economic Area.
When we transfer personal data outside the EEA, we rely on an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework, where the recipient is certified) or on the Standard Contractual Clauses adopted by Commission Implementing Decision (EU) 2021/914, with additional safeguards where needed. You can request a copy of these safeguards by emailing info@mysa-miami.com.
5. Your privacy rights
Rights under the GDPR
You have the right to:
- Access your personal data (Art. 15)
- Correct inaccurate data (Art. 16)
- Have your data deleted (Art. 17)
- Restrict how we process your data (Art. 18)
- Receive your data in a portable format (Art. 20)
- Object to processing based on legitimate interest or for direct marketing (Art. 21)
- Withdraw your consent at any time, without affecting processing that happened before you withdrew it
You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Bezuidenhoutseweg 30, 2594 AV The Hague, the Netherlands β www.autoriteitpersoonsgegevens.nl β or with the supervisory authority where you live.
Rights under U.S. state privacy laws
Depending on your state of residence (for example California, Virginia, Colorado, Connecticut, Texas, Oregon, and others), you may also have the right to:
- Know what personal information we have about you and access it
- Correct or delete it
- Get a copy in a portable format
- Opt out of the sale or sharing of your information, targeted advertising, and profiling
- Not be discriminated against for using these rights
Opting out of targeted advertising: You can turn off non-essential cookies with our cookie banner or your browser settings. We also honor Global Privacy Control (GPC) signals.
California residents: In the past 12 months we have collected identifiers, commercial information, internet activity, and approximate geolocation data for the purposes described in Section 2. We do not use or disclose sensitive personal information for purposes that give you the right to limit its use under California law.
Appeals: If we deny your request, you can appeal by replying to our decision email. If you're not satisfied with the result, you can contact your state Attorney General.
How to make a request
Email info@mysa-miami.com or call +1 864 453-9095. We may need to verify your identity first. You can also have an authorized agent make a request for you. We respond within 30 days. If a request is complex, we may extend this as allowed by law and will tell you why.
6. Automated decision-making
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. The only exception is the automatic fraud checks our payment providers run when they authorize a transaction.
7. Security
Every page of the Site uses TLS encryption. We never receive or store your full payment card details. Our payment providers process them in line with the PCI-DSS standard.
8. Children
The Site is not intended for anyone under 16, and we don't knowingly collect their personal information. This also meets the U.S. Children's Online Privacy Protection Act (COPPA). If you believe a child has given us personal information, contact us and we'll delete it.
9. Changes
We may update this Privacy Policy from time to time. The current version is always posted on this page, with the date at the top.