Privacy Policy
This policy explains what information is collected when you buy or browse The Mirror Point Card, why it is collected, and what you can ask us to do with it.
Who we are
Mirror Point (“we”, “us”) publishes and sells digital self-care material. You can reach us at haohewh@gmail.com for any privacy question.
What we collect
- Your email address — given at checkout so the receipt and download link can be sent to you.
- Order details — which product was bought, the amount, the currency and the date. This comes to us from Creem, our payment provider.
What we never see
Your card number, bank details and billing address go directly to Creem and its payment partners. We never receive them and we never store them.
Who processes it
- Creem — our Merchant of Record. Creem is the legal seller of record for your order, processes the payment, calculates and remits applicable sales tax or VAT, and delivers the file. Creem’s own privacy policy applies to the payment step.
- Cloudflare — hosting and content delivery for this website.
- Email providers — to send your receipt and download link.
Why we use it
- To deliver the file you bought and to support you if something goes wrong.
- To meet tax, accounting and consumer-protection obligations.
- To keep the site secure.
Marketing
We do not add you to a mailing list because you bought the card. If we ever offer a newsletter, it will be opt-in only and you can leave at any time.
Cookies
This website does not set advertising or tracking cookies. Our hosting and payment providers may use strictly necessary cookies to keep the site and checkout working.
How long we keep it
Order records are kept as long as tax and accounting rules require. Support emails are kept for up to 24 months and then deleted.
Your rights
Depending on where you live, you may ask us to access, correct, export or delete the personal data we hold about you, or to object to certain processing. Email haohewh@gmail.com and we will respond within 30 days. You also have the right to complain to your local data-protection authority.
International transfers
Our providers operate internationally, so your data may be processed outside the country where you live. Where required, transfers rely on standard contractual clauses or an equivalent safeguard.
Children
The card is intended for adults. We do not knowingly collect data from anyone under 16.
Changes
If this policy changes, the date at the top of this page changes with it. Material changes will be announced on this page.