Privacy notice
How MIH’s website and Order Desk handle information about accounts, enquiries and deliveries.
Updated
The website and Order Desk
You can browse MIH’s catalogue. Online checkout is not open yet. Order Desk receives Instagram messages and helps MIH prepare delivery drafts. Staff review the details before confirming a shipment with Nepal Can Move (NCM).
MIH’s application and database are hosted on Render in Singapore.
Information we store and use
- Site improvement: with your permission, anonymous page-speed, visit and shopping totals help us improve MIH. These include product views, favourites, bag actions and Instagram link clicks, using broad page categories. Reports do not contain account or visitor IDs, product identifiers, full URLs, search terms or cookie values. A short-lived date and activity-time cookie helps estimate visits without identifying you. Combined hourly totals are kept for 30 days, with hourly cleanup. Native catalogue timing and necessary server response monitoring are handled separately.
- Accounts and shopping: your email, password hash and profile information you provide, such as your name, phone number, address, optional birthday and clothing measurements. Birthday is stored privately with your profile and is not needed to create an account. We also store your cart and wishlist to provide those account features.
- Sign-ins: session information, including IP addresses and browser information, used to manage and secure account access.
- Instagram enquiries: when the Instagram inbox connection is enabled, Order Desk stores incoming and outgoing message text, account and sender identifiers, customer names, usernames, profile-photo links, message identifiers, timestamps and attachment details. Staff uploads are stored privately so MIH can view and send attachments. This helps MIH respond to enquiries and prepare delivery details.
- Delivery and order records: details entered or saved separately, such as a recipient’s name, phone number, address, selected items, package description, delivery instructions and amount to collect. MIH uses these records to manage orders and deliveries, including courier order numbers and shipment updates.
- Newsletter subscriptions: the email address supplied through the newsletter form, to record a request for MIH updates.
How long information stays
Instagram message text, message identifiers, timestamps and attachment details are scheduled for deletion no later than 30 days after their original send date. Private uploads expire 30 days after upload. Cleanup runs periodically while the service is operating. Customer metadata, including account and sender identifiers, names, usernames and profile-photo links, is removed when no retained messages or saved deliveries remain. Profiles found while browsing older Instagram conversations may be cached for 30 days from first discovery without retaining old message content. Repeated browsing during that period does not reset its expiry.
Separately entered delivery details and saved order details are not erased by that cleanup. Customer accounts, delivery and order records, their linked Instagram customer metadata, and newsletter subscriptions currently have no automatic deletion period configured.
Logs and backups may retain copies after information is removed from the application. Their deletion schedule has not yet been confirmed.
Other services and browser storage
Render provides the application, database and uploaded-image storage. When connected, Meta supplies the Instagram messages described above. Information held independently by Meta remains subject to its own handling of that information.
The website uses a sign-in cookie to maintain account sessions. Fonts load from Google Fonts, which receives connection information such as your IP address when your browser requests them. No separate analytics tool is currently configured on this website.
Optional website measurement is off until you choose to allow it. You can change your choice using Cookie settings in the footer. See our cookie notice for the cookie inventory, storage periods and withdrawal controls. We do not currently use advertising cookies or cross-site tracking pixels.
Draft preparation runs within MIH’s hosted application. Conversations are not sent to a separate AI service. When MIH confirms an NCM booking, the recipient’s name, phone numbers, delivery address, selected branches, package description, collection amount, weight and delivery instructions are sent to NCM to arrange the shipment. NCM holds its own delivery records; deleting an MIH draft does not delete NCM’s records.
Questions and deletion requests
For questions about your information or to request deletion, email mih.shop.np@gmail.com.
See the data deletion instructions for the manual request process, what to include and the limits of deletion from MIH’s records.