Privacy Policy
Last updated: 5 November 2026
This document is available in English and Spanish. In case of any discrepancy between the two versions, the Spanish version prevails.
1. Who is responsible for your data
The controller of the personal data described in sections 2 to 8 is:
- Company name: Miranda Network, S.L. (sociedad de responsabilidad limitada, a Spanish limited company)
- CIF: B-75866194
- Registered office: Carretera TF-643, 21, piso 01, puerta 1 B, 38600 Granadilla de Abona, Santa Cruz de Tenerife, Spain
- Email: support@mirandanetwork.es
This policy covers visitors to our website and merchants who use NoHold Checkout. If you bought something from a store that uses NoHold Checkout, the store is responsible for your data: see section 10.
2. Data we collect about merchants
- Account: name, email and password (stored only as a secure hash).
- Store and connections: Shopify store domain, Shopify custom app credentials and Whop API key (stored encrypted), checkout settings, offers and pixel settings.
- Billing: Stripe customer and subscription references, plan status and the fees charged. Your card details are handled by Stripe; we don't see your full card number.
- Feedback and support: your answers if you fill in the cancellation survey, and the messages you send us.
- Technical data: IP address and the session cookie, used to keep you logged in and to protect the service against abuse.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account and provide the service, including service emails | Performance of the contract, art. 6(1)(b) |
| Bill our fee and keep accounting and tax records | Contract, art. 6(1)(b), and legal obligation, art. 6(1)(c) |
| Security, rate limiting and fraud prevention | Legitimate interest in protecting the service and its users, art. 6(1)(f) |
| Improve the product with your feedback (e.g. the cancellation survey) | Legitimate interest, art. 6(1)(f) |
| Respond to requests from authorities and defend legal claims | Legal obligation, art. 6(1)(c), and legitimate interest, art. 6(1)(f) |
We don't sell personal data or use it for automated decisions with legal effects on you. If we ever send product news, it will only be as the law allows and with an easy way to unsubscribe.
4. How long we keep it
We keep your account data while your account is active. After you close it, we delete it within 30 days, except for what the law requires us to keep, such as invoices and accounting records, which are kept for the periods set by Spanish commercial and tax law (generally up to six years) and then deleted. Password reset links expire after one hour.
5. Who we share it with
We use these providers to run the service. They process data on our behalf under data processing agreements:
| Provider | What for | Location |
|---|---|---|
| Contabo GmbH | Hosting of the application and database (VPS) | Germany (EU) |
| Stripe | Billing of our fee | EU / United States |
| Resend, Inc. | Transactional emails | United States |
| Google (Google Fonts) | Fonts on checkout pages, loaded from Google's servers | United States |
At your instruction, we send data to the accounts you connect: your Shopify store, your Whop account and, if you enable them, your Meta, TikTok and Google accounts. We may also disclose data to public authorities when the law requires it.
6. International transfers
Some providers above may process data in the United States. Where the provider is certified under the EU-US Data Privacy Framework, transfers rely on that adequacy decision; otherwise they rely on the Standard Contractual Clauses approved by the European Commission, with additional measures where needed.
7. Security
Connections use HTTPS, passwords are stored as secure hashes, Shopify and Whop credentials are encrypted at rest, and access to the systems is limited to the people who need it.
8. Your rights
You can ask to access, rectify or erase your data, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to support@mirandanetwork.es from your account email (we may ask you to verify your identity). We answer within one month.
If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.
10. If you bought from a store that uses NoHold Checkout
The store is responsible for your data. The store you bought from (the merchant) decides how your data is used and is the controller. Miranda Network, S.L. only processes it on the store's behalf, as its processor, to run the checkout.
What we process for the store
- Your email, name, shipping address and phone number.
- Your cart and order details, and your answers to any post-purchase survey.
- Whether you agreed to receive marketing from the store.
- Your IP address and browser user agent.
- Only if the store enables advertising pixels, and with your consent where required: advertising identifiers such as Meta (fbp, fbc), TikTok (ttp, ttclid) and Google (gclid).
Your card details are entered into and stored by Whop, which processes the payment. We only keep Whop's reference to your saved payment method, so that if the store shows you an extra offer after your purchase, it is charged only if you click to accept it.
Who receives it
The store's Shopify account (to create your order), the store's Whop account (to process your payment) and, only if the store has set them up, Meta, TikTok and Google (to measure its ads). It is hosted on our servers in the EU.
Your rights
Contact the store first: it can tell you how it uses your data and act on your request. Its privacy policy explains how. You can also write to us at support@mirandanetwork.es; we will pass your request to the store and help it respond. You can also complain to your data protection authority, in Spain the AEPD (www.aepd.es).
11. Changes to this policy
We may update this policy. If the changes are material, we will tell merchants by email before they apply.