Privacy Policy

1. ABOUT THIS PRIVACY POLICY

This Privacy Policy explains how personal information is collected, used, stored and shared when you visit or use Mirror of the Trader, purchase access to Digital Content, create or use an account, use member features, contact us or subscribe to email communications.

Mirror of the Trader intends to handle personal information in accordance with applicable UK data-protection law, including the UK GDPR and Data Protection Act 2018.

2. ABOUT MIRROR OF THE TRADER

Mirror of the Trader is an online digital publication and educational platform focused primarily on trading psychology, behaviour, mindset, decision-making and personal experience.

The author writes publicly under the pen name Gigi.

Trading name: Mirror of the Trader

Author: Gigi (pen name)

Website: https://mirrorofthetrader.com

Contact: thetradersmirrorofficial@gmail.com

3. INFORMATION WE MAY COLLECT

Depending on how you use the Website, we may process:

ACCOUNT INFORMATION

Email address, account identifier, authentication information, account status, email verification status, account creation/update information and security information associated with authentication.

Passwords are handled through the authentication system and are not intended to be available to Mirror of the Trader in readable form.

PURCHASE INFORMATION

Email address, transaction/payment identifier, purchase status, product purchased, amount, currency, transaction date/time, Stripe customer or checkout identifiers where applicable, and information needed to confirm entitlement to paid content.

Payment-card information is processed by Stripe. Mirror of the Trader does not directly store complete payment-card numbers or card security codes.

JOURNALS, WORKSHEETS AND INTERACTIVE TOOLS

Information you voluntarily enter, such as journal entries, reflections, prompt responses, self-assessment responses, mood/emotion selections, behavioural observations, goals, notes and progress information.

Do not enter passwords, payment information, banking or brokerage credentials, private keys, security codes or unnecessary highly sensitive information.

ASK THE AUTHOR

Account identifier, submitted question, submission date/time, moderation status, author response where applicable and information voluntarily included in the question.

CONTACT AND DIRECT COMMUNICATIONS

Name where provided, email address, message contents, date/time and information reasonably necessary to respond.

NEWSLETTER

Email address, subscription status, confirmation status, subscription date, unsubscribe status and information necessary to maintain the mailing list.

Purchasing Digital Content or creating an account does not automatically subscribe you to marketing emails.

TECHNICAL AND SECURITY INFORMATION

Depending on the services used, IP address, browser/device information, operating system, requested resources, request timestamps, server/authentication logs, security events, error information and information used to detect fraud, abuse or malicious activity may be processed.

4. HOW WE USE PERSONAL INFORMATION

Personal information may be used to process and verify purchases; provide paid access; create, activate and maintain accounts; authenticate users; protect accounts; operate journals, worksheets and member tools; save information entered into account features; operate Ask the Author; respond to enquiries; send essential account/security communications; send newsletters where subscribed; maintain unsubscribe preferences; prevent fraud and misuse; investigate security incidents; enforce Website terms; maintain Website reliability; troubleshoot problems; comply with legal obligations; establish, exercise or defend legal claims; and maintain necessary records.

5. LAWFUL BASES

Depending on the processing, the lawful basis may include:

CONTRACT — where processing is necessary to process your purchase, provide access, maintain your customer account or provide requested member services.

CONSENT — where appropriate, including certain marketing/newsletter communications and non-essential cookies or similar technologies where consent is required. Consent may be withdrawn at any time, without affecting processing already lawfully carried out.

LEGITIMATE INTERESTS — where necessary for interests such as Website/account security, fraud prevention, preventing unauthorised account sharing or piracy, responding to appropriate enquiries, maintaining appropriate records, troubleshooting and establishing or defending legal claims, provided those interests are not overridden by your rights.

LEGAL OBLIGATION — where processing is necessary to comply with a legal or regulatory obligation.

6. STRIPE

Payments are processed using Stripe. Stripe may process payment-card information, billing information, email address, transaction information, device/fraud-prevention information and other information required to process or secure transactions.

Mirror of the Trader does not directly store complete payment-card details. Stripe processes information under its own privacy practices and legal obligations.

7. SUPABASE

Mirror of the Trader uses Supabase for customer authentication and database infrastructure.

Depending on Website use, Supabase may process or store account email addresses, authentication records, user identifiers, account status, purchase entitlement information, journal/worksheet information, member feature information, Ask the Author submissions and other information necessary for protected Website functionality.

Reasonable access controls and database security measures are intended to restrict unauthorised access.

8. NETLIFY

Mirror of the Trader uses Netlify for Website hosting and server-side infrastructure.

Netlify may process technical information necessary to deliver and secure the Website, including IP addresses, request information, server logs, browser/device information, security information and diagnostic information. Netlify may also process information transmitted through server-side Website functions where necessary.

9. RESEND

Mirror of the Trader uses Resend for email-delivery infrastructure.

Resend may process email addresses, email delivery information, subscription information, delivery/confirmation status and technical information associated with email delivery.

10. TRANSACTIONAL EMAILS

Where you have an account or purchase Digital Content, essential communications may include email verification, account activation, password reset, security notifications, purchase-related communications, service notices and other necessary account communications.

These are separate from optional marketing communications.

11. MARKETING AND NEWSLETTERS

Purchasing Mirror of the Trader or creating an account does not automatically subscribe you to marketing emails.

Where you voluntarily subscribe, your email address may be used to send newsletters, updates or related marketing communications. A confirmation process may be used where appropriate.

You can unsubscribe using the mechanism in marketing emails or by contacting thetradersmirrorofficial@gmail.com.

Unsubscribing from marketing does not prevent essential account, purchase or security emails where those remain necessary.

12. COOKIES AND SIMILAR TECHNOLOGIES

The Website may use cookies, local storage or similar technologies necessary for authentication, account sessions, security, Website state and access to protected areas.

Where non-essential technologies are introduced, they will be handled in accordance with applicable consent requirements. See the Cookie Policy.

13. SHARING PERSONAL INFORMATION

Personal information is not sold to third parties.

Information may be shared with service providers where necessary to operate the service, including Stripe, Supabase, Netlify and Resend.

Information may also be disclosed where reasonably necessary to comply with law or lawful requests, investigate fraud/security incidents, protect legal rights, enforce contractual rights, or in connection with a legitimate business reorganisation or transfer subject to applicable data-protection requirements.

14. INTERNATIONAL DATA TRANSFERS

Some providers may process personal information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, an applicable recognised transfer mechanism should be used, such as adequacy regulations or approved contractual safeguards.

15. RETENTION

Personal information will not be retained for longer than reasonably necessary for the purpose for which it was collected, subject to legal, accounting, security and dispute-resolution requirements.

Account information may generally be retained while an account remains active and for an appropriate period afterwards.

Purchase records may be retained as necessary for tax, accounting, fraud-prevention and legal obligations.

Journal and worksheet information may generally be retained while the relevant account/feature remains active, unless deleted earlier where functionality or applicable rights permit.

Ask the Author submissions may be retained where reasonably necessary to operate the feature or maintain appropriate records.

Contact messages may be retained as reasonably necessary to respond and maintain records.

Newsletter information may be retained while subscribed. Limited suppression information may be retained after unsubscribing where necessary to continue respecting the unsubscribe request.

Security and technical logs may be retained for a reasonable period for security, fraud prevention, troubleshooting or legal claims.

16. DATA SECURITY

Reasonable technical and organisational measures are used to protect personal information. These may include encrypted connections, authentication controls, restricted database access, row-level database security, server-side handling of secret credentials, access controls, security monitoring and separation of public and protected Website content.

No online system can guarantee absolute security. Users are responsible for protecting their own login credentials.

17. YOUR DATA-PROTECTION RIGHTS

Depending on applicable law and circumstances, you may have rights including access, rectification, erasure, restriction, data portability, objection, withdrawal of consent and rights relating to certain automated decision-making.

These rights are not absolute and legal exceptions may apply.

To make a request, contact thetradersmirrorofficial@gmail.com. Identity verification may be required where appropriate.

18. COMPLAINTS

If you have concerns about how your personal information is handled, contact Mirror of the Trader first at thetradersmirrorofficial@gmail.com.

You may also have the right to complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk

19. CHILDREN

Mirror of the Trader is not designed or intended for children and does not knowingly seek to collect children's personal information through the Website.

If such information is discovered in circumstances where it should not have been collected, reasonable steps may be taken to delete it where appropriate.

20. THIRD-PARTY LINKS

This Privacy Policy does not govern third-party websites or services linked from the Website or Digital Content. Review the relevant third party’s privacy information before providing personal information.

21. AUTOMATED DECISION-MAKING

Mirror of the Trader does not currently use customer personal information to make solely automated decisions that produce legal or similarly significant effects on customers.

Automated security, spam or fraud-prevention processes may be used to identify suspicious activity.

22. CHANGES TO THIS POLICY

This Privacy Policy may be updated to reflect changes in Website functionality, information processing, service providers, security practices or applicable law.

The current version will be published with its last-updated date. Material changes will be communicated where required.

23. CONTACT

Mirror of the Trader

Author: Gigi (pen name)

Website: https://mirrorofthetrader.com

Email: thetradersmirrorofficial@gmail.com