Privacy policy

Last updated: July 28, 2026

At MILI, we respect your privacy and are committed to protecting your Personal Data. This Privacy Policy explains how we collect, use, process, store, protect, and disclose Personal Data when you interact with MILI.

The purpose of this Privacy Policy is to inform you about how MILI Fashion OPC (referred to in this Privacy Policy as “MILI,” “we,” “us,” or “our,” as the context requires) manages and processes Personal Data in connection with our business, website, Online Store, Products, Services, and other interactions with you.

This Privacy Policy is intended to be consistent with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable regulations and issuances of the National Privacy Commission and other relevant authorities. The Data Privacy Act requires Personal Data to be processed fairly and lawfully, for specified and legitimate purposes, in a manner that is adequate and not excessive, and retained only for as long as necessary or as otherwise permitted by law.

This Privacy Policy applies to Personal Data that we collect or process when you:

• visit or use the MILI website or Online Store;

• create or use an Account;

• purchase or inquire about our Products;

• join or participate in the MILI Club;

• contact or communicate with us;

• subscribe to our marketing communications;

• participate in promotions, events, surveys, or other MILI activities; or

• otherwise interact or transact with MILI.

This Privacy Policy supplements and does not supersede or replace any other privacy notice, consent, agreement, or terms that may apply to a specific transaction, service, promotion, or activity.

By providing us with your Personal Data, whether through the MILI website, Online Store, Account, customer service channels, or other means, you acknowledge that you have read and

understood this Privacy Policy. Where applicable law requires consent for a particular processing activity, MILI will obtain the appropriate consent. Where processing is permitted on another lawful basis, MILI may process Personal Data without relying on consent, as permitted by applicable law.

Your Personal Data may be processed by MILI and by authorized representatives, agents, service providers, and other third parties where reasonably necessary to provide our Products and Services, operate our business, fulfill our legal or contractual obligations, protect our legitimate interests, or for other purposes described in this Privacy Policy and permitted by applicable law.

1. INFORMATION WE COLLECT

MILI may collect information that is necessary for us to operate our business, process your Orders, provide our Services, communicate with you, improve our Products, and maintain the security and functionality of our website.

The information we collect may include Personal Data and Non-Personal Information.

1.1 Personal Data You Provide

Personal Data means information that identifies, relates to, or can reasonably be associated with an identifiable individual.

Depending on how you interact with MILI, we may collect:

• Full name;

• Email address;

• Mobile or telephone number;

• Shipping address;

• Billing address;

• Account information;

• Login credentials;

• Order and purchase history;

• Product preferences and shopping activity;

• Payment-related information;

• Customer service inquiries and communications;

• Reviews, feedback, survey responses, and other information you voluntarily provide;

• Information provided when joining the MILI Club;

• Information provided in connection with promotions, events, contests, or other MILI activities; and

• Other information reasonably necessary to provide our Products and Services.

Some information may be required to complete a purchase, process payment, arrange delivery, respond to an inquiry, administer an Account, or provide a particular Service.

If you choose not to provide information that is necessary for a particular transaction or Service, we may not be able to complete or provide that transaction or Service.

1.2 Payment Information

Payments made through the MILI Online Store may be processed by third-party Payment Processors.

Where payment information is collected and processed directly by a Payment Processor, MILI generally does not store or have access to your complete credit card number, CVV, PIN, or other full payment credentials.

MILI may nevertheless receive transaction-related information necessary to process and manage your Order, such as:

• Payment status;

• Transaction or authorization reference;

• Payment method;

• Masked payment details; and

• Other information provided by the applicable Payment Processor.

Payment transactions may also be subject to the privacy policies and terms of the applicable Payment Processor.

1.3 Information Collected Automatically

When you visit or use the MILI website, certain information may be collected automatically through our servers, cookies, analytics tools, pixels, and similar technologies.

This may include:

• IP address;

• Browser type and version;

• Device type;

• Operating system;

• Device or browser identifiers;

• General location information derived from technical data;

• Referring website or search engine;

• Pages visited;

• Products viewed;

• Search terms used on the website;

• Links clicked;

• Shopping cart activity;

• Time and duration of visits;

• Website navigation patterns;

• Exit pages;

• Website performance information;

• Technical errors or failures; and

• Other information generated through your use of the website.

We use this information to operate and secure our website, understand how Customers use our Online Store, identify technical issues, improve website functionality, analyze trends, and improve our Products, Services, and Customer experience.

1.4 Non-Personal Information

Non-Personal Information is information that does not, by itself, identify you as an individual.

This may include aggregated, statistical, analytical, technical, and general usage information.

We may use Non-Personal Information to understand website activity, Customer behavior, Product interest, website performance, and other trends.

Where reasonably possible, information may be aggregated or anonymized before being used for statistical, analytical, research, reporting, or business purposes.

2. HOW WE USE YOUR PERSONAL DATA

MILI may collect and process Personal Data for purposes that include the following:

2.1 Orders and Purchases

We may use your Personal Data to:

• Process and fulfill Orders;

• Confirm purchases;

• Process and verify payments;

• Arrange shipping and delivery;

• Manage returns, exchanges, and refunds;

• Maintain transaction records;

• Provide order-related assistance; and

• Respond to questions regarding your purchases.

2.2 Accounts and MILI Club

Where applicable, we may use your Personal Data to:

• Create and administer your Account;

• Maintain and update Account information;

• Manage MILI Club membership;

• Provide membership benefits;

• Provide early access or other membership-related opportunities; and

• Send communications relating to your Account or membership.

2.3 Customer Service

We may use information you provide to:

• Respond to inquiries;

• Handle customer support requests;

• Investigate complaints;

• Process returns and exchanges;

• Address delivery or payment issues; and

• Communicate with you regarding your interaction with MILI.

2.4 Website and Business Operations

We may process Personal Data to:

• Operate and maintain our website and Online Store;

• Improve website functionality;

• Analyze website usage and performance;

• Understand Customer preferences and shopping behavior;

• Develop and improve Products and Services;

• Personalize website content and experiences where appropriate;

• Conduct statistical, analytical, and research activities; and

• Maintain and improve our business operations.

2.5 Communications

We may use your Personal Data to communicate with you regarding:

• Orders;

• Payments;

• Shipping and delivery;

• Returns and exchanges;

• Account activity;

• Customer service requests;

• Security matters;

• Important service announcements;

• Changes to our policies; and

• Other matters relating to your transactions or use of our Services.

2.6 Security and Fraud Prevention

We may process information to:

• Verify transactions;

• Authenticate Customers;

• Detect and prevent fraud;

• Identify unauthorized activity;

• Protect our website and systems;

• Investigate suspected misuse;

• Prevent abuse of promotions or Services; and

• Protect MILI, our Customers, employees, service providers, and other third parties.

2.7 Legal and Regulatory Purposes

We may process Personal Data where reasonably necessary to:

• Comply with applicable laws and regulations;

• Respond to lawful requests from government authorities;

• Comply with court orders or legal processes;

• Establish, exercise, or defend legal claims;

• Investigate suspected unlawful activity; and

• Enforce our Terms and Conditions and other applicable policies.

Where consent is required by applicable law for a particular processing activity, MILI will obtain the appropriate consent.

3. MILI CLUB AND MARKETING COMMUNICATIONS

If you voluntarily subscribe to MILI marketing communications or join the MILI Club, we may send you information relating to:

• New collections;

• Product launches;

• Early access;

• Events;

• Community activities;

• Brand updates;

• Special offers; and

• Other MILI news and promotional content.

You may unsubscribe from marketing communications at any time by clicking the “Unsubscribe” link included in our marketing emails or by contacting us directly.

You may also request to update your marketing preferences.

Unsubscribing from marketing communications will not prevent MILI from sending necessary transactional or service-related communications, including:

• Order confirmations;

• Payment notices;

• Shipping updates;

• Delivery communications;

• Account notices;

• Security notifications; or

• Important changes to our policies or Services.

4. COOKIES AND SIMILAR TECHNOLOGIES

MILI uses cookies and similar technologies to help operate, understand, secure, and improve our website.

Cookies may be used to:

• Remember preferences;

• Maintain shopping cart functionality;

• Keep you signed in where applicable;

• Improve website functionality;

• Measure website performance;

• Understand website traffic;

• Analyze browsing and shopping behavior;

• Measure marketing effectiveness;

• Personalize content and experiences;

• Support security and fraud prevention; and

• Generate aggregated analytics.

Some cookies are essential to the operation of the website. Disabling these cookies may affect certain website functions.

Third-party service providers may also use cookies, pixels, tags, or similar technologies in connection with services provided to MILI.

You may manage or disable cookies through your browser settings or other cookie-management tools made available on the website. However, disabling certain cookies may affect the functionality of portions of the Online Store.

5. HOW WE SHARE PERSONAL DATA

MILI does not sell or rent your Personal Data.

We may share or disclose Personal Data when reasonably necessary for the purposes described in this Privacy Policy and as permitted by applicable law.

These circumstances may include:

5.1 Service Providers

We may share information with third parties that provide services to MILI, including:

• Shopify and other e-commerce technology providers;

• Payment Processors;

• Banks and financial institutions;

• Shipping and logistics providers;

• Email and marketing platforms;

• Analytics and measurement providers;

• Customer support platforms;

• Fraud prevention and security providers;

• Website hosting and technology providers;

• IT and infrastructure providers; and

• Professional advisers and business service providers.

These parties may receive access to Personal Data only where reasonably necessary to perform their services.

5.2 Customer-Requested Services

We may disclose Personal Data where you specifically request or authorize us to do so, or where disclosure is necessary to provide a Service you have requested.

5.3 Promotions and Events

Certain MILI promotions, contests, events, collaborations, or activities may involve third-party partners.

Where participation requires Personal Data to be shared with a third party, we will provide appropriate notice and, where required, obtain the necessary consent.

5.4 Legal and Regulatory Requirements

We may disclose Personal Data where required or permitted by law, including in response to:

• Court orders;

• Subpoenas or other lawful processes;

• Government or regulatory requests;

• Law-enforcement investigations;

• Legal claims; or

• Other circumstances where disclosure is necessary to protect the rights, safety, property, or legitimate interests of MILI, our Customers, employees, or the public.

5.5 Business Transactions

If MILI is involved in a merger, acquisition, restructuring, financing, sale of assets, transfer of business, or similar corporate transaction, Personal Data may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

6. THIRD-PARTY SERVICE PROVIDERS AND DATA PROCESSORS

MILI relies on third-party providers to operate its website, process transactions, fulfill Orders, communicate with Customers, and provide other business services.

These providers may process Personal Data on MILI's behalf.

Depending on the services used by MILI, these may include:

• Shopify;

• Payment Processors;

• Logistics and delivery providers;

• Email and marketing platforms;

• Analytics providers;

• Customer service providers;

• Fraud prevention services;

• Cloud and hosting providers; and

• Other technology or business service providers.

MILI takes reasonable steps to select service providers that can provide appropriate safeguards for Personal Data and, where applicable, requires them to maintain confidentiality and process Personal Data only for authorized purposes.

Third-party providers may also have their own privacy policies and terms governing information they process independently of MILI.

7. PAYMENT AND TRANSACTION SECURITY

MILI works with third-party Payment Processors to facilitate payment transactions.

Payment information may be subject to encryption, authentication, fraud screening, and other security measures implemented by the applicable Payment Processor.

MILI may receive information regarding the status and outcome of a payment but generally does not store complete payment card credentials where these are processed directly by the Payment Processor.

MILI may also use fraud prevention and transaction-security services to assess potentially unauthorized or suspicious transactions.

Where reasonably necessary, MILI may delay, restrict, decline, or investigate an Order where there are reasonable grounds to suspect fraud, unauthorized activity, or unlawful conduct.

8. INTERNATIONAL DATA TRANSFERS

Some of MILI's service providers may operate or maintain systems outside the Philippines.

As a result, Personal Data may be processed, stored, or accessed outside the Philippines in connection with services such as:

• Website hosting;

• E-commerce services;

• Payment processing;

• Analytics;

• Marketing;

• Customer support;

• Cloud storage; and

• Other business operations.

Where Personal Data is transferred internationally, MILI will take reasonable steps to ensure that appropriate safeguards are applied and that processing remains consistent with applicable data protection requirements.

9. DATA RETENTION

MILI retains Personal Data only for as long as reasonably necessary for the purposes for which it was collected or as otherwise required or permitted by applicable law.

The period for which information is retained may depend on:

• The nature and purpose of the information;

• The nature of the transaction or relationship;

• Legal, accounting, and tax requirements;

• Customer service requirements;

• Dispute resolution;

• Fraud prevention and security requirements; and

• The establishment, exercise, or defense of legal claims.

When Personal Data is no longer required, MILI will take reasonable steps to securely delete, destroy, or anonymize the information, subject to applicable retention requirements.

Information may remain in secure backups or archives for a limited period where necessary for legitimate security, legal, or business-continuity purposes.

10. DATA ACCURACY AND UPDATES

MILI takes reasonable steps to maintain Personal Data that is accurate, complete, and reasonably current for the purposes for which it is used.

If you maintain an Account, you may be able to review and update certain information through your Account settings.

You may also contact MILI if you believe that Personal Data we hold about you is inaccurate, incomplete, or outdated.

We may request information reasonably necessary to verify your identity before making changes to Personal Data.

11. YOUR PRIVACY RIGHTS

Subject to applicable law, including the Data Privacy Act of 2012, you may have certain rights relating to your Personal Data.

These may include the right to:

• Be informed about how your Personal Data is processed;

• Request access to Personal Data held by MILI;

• Request correction of inaccurate or incomplete Personal Data;

• Request deletion or blocking of Personal Data where legally appropriate;

• Object to or restrict certain processing where applicable;

• Withdraw consent where processing is based on consent;

• Request data portability where applicable; and

• Raise a concern or complaint regarding the processing of your Personal Data.

These rights are subject to applicable legal limitations and exceptions.

For example, MILI may need to retain certain information to comply with legal obligations, complete transactions, prevent fraud, resolve disputes, or establish or defend legal claims.

To exercise your rights, please contact us using the contact information provided at the end of this Privacy Policy. The DPA recognizes, among other rights, access, correction, erasure/blocking, objection, and data portability rights, subject to applicable conditions and limitations.

12. WITHDRAWAL OF CONSENT

Where the processing of your Personal Data is based on your consent, you may withdraw that consent at any time, subject to applicable law.

Withdrawal of consent will not affect the lawfulness of processing that occurred before your withdrawal.

Withdrawal of consent also does not necessarily require MILI to stop processing where another lawful basis or legal obligation permits or requires continued processing.

For example, unsubscribing from marketing communications will not prevent MILI from processing information necessary to fulfill an Order, provide customer support, maintain transaction records, prevent fraud, or comply with legal requirements.

13. PROTECTING YOUR PERSONAL DATA

MILI takes reasonable administrative, technical, organizational, and physical measures designed to protect Personal Data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

Depending on the nature of the information and processing activity, safeguards may include:

• Access controls;

• Authentication measures;

• Encryption or secure transmission technologies;

• Firewall and system protections;

• Restricted access to Personal Data;

• Confidentiality obligations for authorized personnel;

• Contractual safeguards for service providers; and

• Periodic review of information security practices.

Access to Personal Data is limited to employees, contractors, agents, and service providers who reasonably require such access to perform their responsibilities.

Although MILI takes reasonable precautions to protect Personal Data, no electronic transmission, website, storage system, or security measure can be guaranteed to be completely secure.

14. DATA SECURITY INCIDENTS

MILI maintains procedures designed to identify, investigate, contain, and respond to suspected security incidents involving Personal Data.

If a data security incident or personal data breach occurs, MILI will assess the incident and take appropriate measures in accordance with applicable law and regulatory requirements.

Where notification is required by applicable law, MILI will notify affected individuals and/or the appropriate regulatory authority in accordance with the applicable requirements.

15. CHILDREN'S PRIVACY

The MILI website and Online Store are not specifically directed toward children.

MILI does not knowingly collect Personal Data from children where such collection is prohibited by applicable law.

Where a minor accesses the website or Services with the knowledge or consent of a parent or legal guardian, the parent or legal guardian is responsible for supervising that use.

If you believe that a child has provided Personal Data to MILI without appropriate authorization, please contact us so that we can review the matter and take appropriate action.

16. THIRD-PARTY WEBSITES AND SERVICES

The MILI website may contain links to websites, applications, social media platforms, payment services, or other third-party services.

These third parties may maintain their own privacy policies and practices.

MILI does not control and is not responsible for the privacy practices, security, content, or handling of Personal Data by independent third-party websites or services.

We encourage you to review the applicable privacy policy of any third-party website or service before providing Personal Data to that third party.

17. SOCIAL MEDIA, REVIEWS, AND USER CONTENT

MILI may provide features that allow Customers to submit reviews, comments, photographs, testimonials, feedback, or other content.

Depending on the feature and your settings, information you voluntarily submit may be visible to other Customers or the public.

You should carefully consider the information you include in publicly accessible reviews, comments, photographs, or other submissions.

Where applicable, the use of submitted content will also be governed by the terms presented to you when you submit the content and by the MILI Terms and Conditions.

18. YOUR COMMUNICATIONS WITH MILI

When you contact MILI through email, customer service channels, social media, forms, or other communication channels, we may retain the information you provide, including the content of your communication and information reasonably necessary to respond to your request.

We may use these communications to:

• Respond to your inquiry;

• Provide customer support;

• Investigate complaints;

• Improve our Services;

• Maintain appropriate business records; and

• Address legal, security, or operational matters.

19. CHANGES TO THIS PRIVACY POLICY

MILI may update this Privacy Policy from time to time to reflect changes in our business, Products, Services, technology, data-processing practices, or applicable legal requirements.

When we make material changes, we will update the Last Updated date at the beginning of this Privacy Policy and, where appropriate, provide additional notice.

We encourage you to review this Privacy Policy periodically to remain informed about how MILI collects, uses, protects, and shares Personal Data.

20. CONTACT US

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or the way MILI handles your Personal Data, you may contact us at:

MILI Fashion OPC

SEC Registration No.: 2026050251610-47

Email: kitty@mili-club.com

Contact Number: +639267222006

We respond within 48 hours during business days. Business days are Monday to Friday, excluding Philippine public holidays.

Customer service hours: Monday to Friday, 9:00 AM–5:00 PM (PHT / GMT+8), excluding Philippine public holidays.

For privacy-related requests, please include sufficient information to help us understand and process your request and, where necessary, verify your identity.

MILI will make reasonable efforts to address privacy-related requests and concerns in accordance with applicable law.