Privacy policy

Privacy Policy
Effective date: June 6, 2026
Last updated: June 6, 2026
This Privacy Policy explains how Meridiem35 Oy, operating the Mleva brand, collects, uses, discloses, and protects personal data when you visit mleva.com, place an order, contact us, subscribe to marketing, submit a review, or otherwise interact with us.
1. Controller and contact information
Legal name / operator: Meridiem35 Oy
Brand: Mleva
Website: mleva.com
Business ID / Y-tunnus: 3620684-4
VAT ID, if applicable: FI36206844
Registered office / mailing address: PL 999, 42011 YRITYSLOKERO, Finland
Business mailing address / C/O: PL 999, 42011 YRITYSLOKERO, Finland
Contact method: email at info@mleva.com (support, legal/complaints, and privacy requests)
For privacy questions or requests, contact info@mleva.com.
2. Personal data we collect
Depending on how you interact with us, we may collect:
Contact details: name, email address, billing address, shipping address, and phone number if provided;
Order details: products purchased, order number, payment status, delivery status, refunds, coupons, returns, customer service history, and return and refund requests;
Payment-related information: payment method type, transaction identifiers, billing details, fraud screening results, authentication data, and payment status. We generally do not store full payment card numbers;
Account and checkout information: Shopify account data, Shop account identifiers, login status, saved checkout preferences, and customer account settings where applicable;
Communications: emails, support requests, refund requests, photos, videos, reviews, testimonials, safety complaints, survey responses, and other messages;
Information you voluntarily include in messages or reviews: if you choose to mention foot size, comfort preferences, sizing needs, or product experience when contacting support or leaving a review, we receive that information. We do not run health quizzes, symptom surveys, due-date forms, or pregnancy-stage questionnaires, and we do not ask for or require health information in order to shop;
Device and usage information: IP address, browser type, device type, operating system, pages viewed, referral URLs, approximate location, timestamps, cookies, pixels, analytics identifiers, and interaction data;
Marketing information: subscription status, consent records, email engagement, preferences, and unsubscribe records;
Fraud prevention and security information: risk scores, order verification data, payment authentication information, chargeback information, and security logs;
Import, customs, and logistics information: shipping route, carrier, customs broker, tracking number, product classification support, country-of-origin information, and delivery status where associated with an order.
3. Sensitive information and pregnancy-related information
Mleva is a pregnancy comfort brand, but we keep data collection to the minimum needed to run the store. To place an order we collect your name, shipping and billing address, email address, and order details, and your payment is handled by our payment processor (we generally do not store full card numbers). For optional marketing we collect your email address. We do not run health quizzes, symptom surveys, due-date forms, or pregnancy-stage questionnaires anywhere on the Website, and we do not ask for or require health information to shop. Any inference that a customer may be pregnant is incidental to selling a pregnancy comfort product. Please do not send us medical records, diagnostic information, or sensitive health details unless necessary for a specific support or safety issue.
If you voluntarily provide pregnancy-related or comfort-related information, we use it to respond to your request, provide product guidance, improve our products and customer experience, process a return, refund, or safety issue, or personalize communications where permitted by law and your preferences.
We do not use pregnancy-related information to diagnose, treat, cure, or prevent any medical condition. We do not provide medical advice.
4. How we collect personal data
We collect personal data directly from you when you place an order, subscribe to emails, contact support, submit a review, or otherwise provide information through the Website. We do not use health quizzes or symptom surveys.
We also collect certain data automatically through cookies, analytics, pixels, server logs, Shopify tools, and similar technologies. We may receive data from third parties such as Shopify, payment processors, fraud prevention providers, suppliers, carriers, customs brokers, logistics partners, email marketing providers, review tools, advertising platforms, and customer support tools.
5. How we use personal data
We may use personal data to:
operate the Website and online store;
process, confirm, fulfill, ship, track, import, clear, and deliver orders;
process payments, refunds, coupons, fraud checks, and chargeback responses;
provide customer support and respond to inquiries;
provide sizing, product, comfort, and care guidance;
investigate damaged, defective, incorrect, missing, delayed, lost, unsafe, or disputed orders;
administer returns and refunds;
manage reviews, testimonials, User Content, and product feedback;
send transactional emails about orders, accounts, support, shipping, refunds, safety, or policy updates;
send marketing emails where permitted by law and your preferences;
personalize Website content, offers, and customer experience;
measure Website performance, advertising, analytics, and marketing effectiveness;
detect, prevent, and respond to fraud, security incidents, abuse, chargebacks, customs issues, and unlawful activity;
maintain records, enforce terms, resolve disputes, comply with legal obligations, and respond to regulators or courts;
improve products, supplier quality, Website functionality, logistics, and customer experience.
6. Legal bases under GDPR
Because Meridiem35 Oy is based in Finland, we rely on applicable legal bases under data protection law where required. Depending on the context, our legal bases may include:
Contract: to process orders, payments, shipping, support requests, refunds, returns, and account-related services;
Legal obligation: to comply with tax, accounting, customs, consumer protection, product safety, fraud prevention, and regulatory obligations;
Legitimate interests: to operate and improve the Website, prevent fraud, secure our systems, respond to disputes, manage supplier quality, conduct analytics where permitted, and protect our business;
Consent: for certain marketing, cookies, advertising pixels, or other optional features where consent is required;
Vital interests or public interest: where relevant in limited safety, emergency, or legal situations.
Where we rely on consent, you may withdraw consent where applicable. Withdrawal does not affect processing that occurred before withdrawal.
7. How we share personal data
We may share personal data with:
ecommerce platforms, including Shopify and related services;
payment processors, card networks, banks, fraud prevention tools, and chargeback providers;
suppliers, manufacturers, fulfillment partners, sourcing agents, warehouses, customs brokers, logistics providers, postal operators, and carriers;
analytics, advertising, cookie, pixel, and marketing providers, including Meta Platforms (we run the Meta Pixel on the Website, which sends event data such as page views, add-to-cart, and purchase events to Meta for advertising and measurement);
email marketing, review, customer support, and communication tools;
professional advisers, insurers, auditors, accountants, and legal counsel;
regulators, customs authorities, courts, law enforcement, payment networks, or other parties where required or permitted by law;
business transfer parties if we sell, merge, reorganize, or transfer all or part of our business.
We do not sell personal information for money. However, because we run the Meta Pixel for advertising, the data it sends to Meta Platforms may be considered a “sale,” “sharing,” or “targeted advertising” under some U.S. state privacy laws (such as the California CCPA/CPRA). You can opt out at any time using the “Do Not Sell or Share My Personal Information” link on the Website, through our cookie banner, or through a recognized browser opt-out signal such as Global Privacy Control (GPC), which we honor where required by applicable law.
8. International transfers
We are based in Finland, and we may process personal data in Finland, the European Economic Area, the United States, and other countries where our service providers, ecommerce platform, payment processors, suppliers, fulfillment partners, or tools operate.
Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses, adequacy decisions, vendor terms, or other lawful mechanisms.
9. Retention
We keep personal data for as long as needed for the purposes described in this Privacy Policy, including to process orders, provide support, comply with tax/accounting/customs obligations, resolve disputes, prevent fraud, administer returns and refunds, maintain records, and comply with legal obligations.
Retention periods vary by data type, legal requirement, business need, and customer relationship. We delete or anonymize personal data when it is no longer reasonably needed, unless retention is required or permitted by law.
10. Cookies and similar technologies
We use cookies, pixels, tags, local storage, analytics tools, advertising technologies, and similar technologies as described in our Cookie Policy. You can manage cookie choices through the cookie banner or settings provided on the Website where available, and through your browser settings.
11. Marketing choices
You can unsubscribe from marketing emails by using the unsubscribe link in our emails or by contacting info@mleva.com. Even if you unsubscribe from marketing, we may still send transactional or service messages about orders, support, refunds, safety, account activity, or policy updates.
12. Your rights
Depending on where you live and which laws apply, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data, withdraw consent, opt out of certain processing, or lodge a complaint with a data protection authority.
EEA/UK residents may have rights under GDPR or similar laws. California and other U.S. state residents may have rights under applicable state privacy laws, including rights to know/access, correct, delete, opt out of sale/sharing/targeted advertising, and limit the use or disclosure of sensitive personal information where applicable.
To exercise rights, contact info@mleva.com. We may need to verify your identity before processing a request.
13. Global Privacy Control and opt-out signals
Where required by applicable law and technically feasible, we honor recognized browser-based opt-out preference signals, such as Global Privacy Control, as an opt-out of sale/sharing/targeted advertising for the browser or device used.
14. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal data. However, no website, transmission, storage system, payment system, or online service is completely secure.
15. Children
The Website is not directed to children under 13. We do not knowingly collect personal data from children under 13 without legally required consent. If you believe a child provided us with personal data, contact info@mleva.com.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on the Website with a revised "Last updated" date.
17. Contact
Mleva / Meridiem35 Oy
PL 999, 42011 YRITYSLOKERO, Finland
Email: info@mleva.com