Privacy Policy

Last updated: December 17, 2024

1. Introduction

Welcome to The Mirror Within ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our psychological assessment platform.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

Personal Information

  • Name and contact information (email address, phone number)
  • Date of birth (for age verification)
  • Location information (city, country)
  • Assessment responses and psychological profile data
  • Payment information (processed securely through Polar)

Automatically Collected Information

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, time spent, click patterns)
  • Cookies and similar tracking technologies
  • Performance data (page load times, errors)

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our assessment services
  • Generate personalized psychological reports
  • Process payments and manage subscriptions
  • Communicate with you about your assessment and results
  • Improve our services and develop new features
  • Ensure the security and integrity of our platform
  • Comply with legal obligations
  • Send marketing communications (with your consent)

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist us in operating our platform (e.g., cloud hosting, payment processing)
  • Legal Requirements: When required by law or to respond to legal process
  • Protection of Rights: To protect our rights, privacy, safety, or property
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly agree to share your information

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security audits and assessments
  • Access controls and authentication measures
  • Employee training on data protection
  • Incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

  • Assessment data: Retained for 3 years to allow for progress tracking
  • Account information: Retained while your account is active
  • Payment records: Retained for 7 years for tax and accounting purposes
  • Marketing data: Retained until you opt-out

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your personal information
  • Data Portability: Receive your data in a structured format
  • Opt-Out: Opt-out of marketing communications
  • Restriction: Request restriction of processing
  • Objection: Object to certain processing activities

To exercise these rights, please contact us at privacy@themirrorwithin.com

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

  • Maintain your session and preferences
  • Analyze usage patterns and improve our services
  • Provide personalized content and advertisements
  • Detect and prevent fraud

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our platform.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

  • The right to know what personal information we collect, use, and disclose
  • The right to delete your personal information
  • The right to opt-out of the sale of personal information (we do not sell your data)
  • The right to non-discrimination for exercising your privacy rights

12. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA) or United Kingdom (UK), you have additional rights under the General Data Protection Regulation (GDPR), including:

  • The right to be informed about data processing
  • The right to withdraw consent at any time
  • The right to lodge a complaint with a supervisory authority
  • The right to object to automated decision-making

Our legal basis for processing your personal information includes consent, contract fulfillment, and legitimate interests.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Your continued use of our services after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

The Mirror Within

Email: privacy@themirrorwithin.com

Data Protection Officer: dpo@themirrorwithin.com

Address: [Your Business Address]