Privacy Policy

1. Who We Are

Mieru is a trading name of Bloksphere Ltd, a company registered in England & Wales (Company No. 11604463). We are the data controller for the personal data we process through the Mieru platform.

If you have questions about this policy or your personal data, contact us at: tohid@finaura.co.uk

2. What Data We Collect

We collect the following categories of personal data:

• Account information: Name, email address, and password when you create an account.
• Financial data you enter: Account balances, transactions, budgets, invoices, and property documents that you manually input into the platform.
• Email address (pre-registration): If you submit your email via our landing page to receive updates.
• Usage data: Pages visited, features used, browser type, device type, and IP address. This data is collected automatically when you use the platform.
• Support communications: Messages and attachments you send through our support system.

We do not currently collect bank data automatically. Open Banking integration is planned for the future. If and when implemented, this policy will be updated to reflect the additional data collected.

3. How We Use Your Data

We use your personal data for the following purposes:

• Providing the service: To operate your Mieru account, display your financial dashboard, process transactions you enter, and generate reports.
• Communications: To send you service-related notifications, respond to support requests, and (with your consent) send product updates.
• Improving the platform: To understand how users interact with the platform and improve features, performance, and user experience.
• Legal compliance: To comply with our legal obligations and respond to lawful requests from authorities.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following legal bases:

• Contract: Processing necessary to provide you with the Mieru service (Article 6(1)(b)).
• Consent: Where you have opted in to receive marketing communications (Article 6(1)(a)). You can withdraw consent at any time.
• Legitimate interests: To improve our platform, ensure security, and prevent fraud (Article 6(1)(f)).
• Legal obligation: Where we are required to process data to comply with the law (Article 6(1)(c)).

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Hosting providers, email delivery services, and analytics tools that help us operate the platform. These providers are contractually bound to protect your data.
• Legal requirements: If required by law, regulation, or legal process, we may disclose your data to relevant authorities.

If we integrate Open Banking in the future, we will share necessary data with our regulated Open Banking provider under strict data protection agreements. This policy will be updated before any such integration goes live.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Financial data: Retained while your account is active. You can delete individual records at any time.
• Pre-registration emails: Retained until you unsubscribe or for a maximum of 24 months if no account is created.
• Usage data: Retained in anonymised form for up to 24 months.
• Support communications: Retained for up to 36 months after resolution.

7. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Request a machine-readable copy of your data.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email us at tohid@finaura.co.uk. We will respond within one month.

8. Cookies

We use cookies and similar technologies. For full details, see our Cookie Policy.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption of data in transit and at rest, access controls, and regular security reviews. No system is completely secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your data.

10. International Transfers

Your data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO.

11. Children

Mieru is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through the platform. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

14. Contact Us

Bloksphere Ltd
Company No. 11604463
Registered in England & Wales

Email: tohid@finaura.co.uk