Effective date: 20 September 2026
Last reviewed: 20 September 2026
The Mirror Deck is operated by Quirkwise (“we”, “us”, or “our”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy describes how we collect, use, disclose and safeguard your information when you visit our website or make a purchase from us. Please read this policy carefully. If you disagree with its terms, please discontinue use of the site.
We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the effective date. You are encouraged to review this policy periodically to stay informed.
1. Information We Collect
Information you provide to us — We collect personal information that you voluntarily provide when you place an order, register on our site, express interest in our products, contact us, or otherwise engage with us. This includes:
- Full name, email address, phone number and postal/delivery address;
- Billing information (processed securely — we do not store card numbers);
- Username and password if you create an account;
- Messages, feedback or enquiries submitted through our contact form; and
- Newsletter subscription email address.
Information collected automatically — When you visit our website, certain information is collected automatically by our servers and analytics tools, including your IP address, browser type and version, operating system, referring URLs, pages viewed, time and date of your visit, and time spent on pages. This data is used in aggregate form to understand site usage and does not personally identify you.
Cookies and tracking technologies — We may use cookies, web beacons, pixel tags and similar technologies to collect and store information about your preferences and activity on our site. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of our site may not function properly.
2. How We Use Your Information
We use personal information collected via our website for a variety of legitimate business purposes, including to:
- Process transactions — fulfil orders, arrange delivery, send order confirmations, invoices and shipping updates;
- Manage your account — create and maintain your customer account if applicable;
- Respond to enquiries — reply to your questions, comments and support requests promptly;
- Send marketing communications — share news, product updates, tips and workshop announcements, where you have opted in. You may opt out at any time;
- Improve our website — analyse usage patterns, identify technical issues and enhance site performance and user experience;
- Prevent fraud — monitor for suspicious activity and protect the security of our platform and customers; and
- Comply with legal obligations — meet applicable legal, tax and regulatory requirements.
We will only use your personal information for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason compatible with the original purpose.
3. Sharing and Disclosure of Information
We do not sell, trade or rent your personal information to third parties for their own marketing purposes. We may share your information in the following limited circumstances:
- Service providers — third-party vendors who perform services on our behalf (payment processing, order fulfilment, logistics, email delivery, web hosting, analytics). These parties are permitted to use your data only to perform services for us and are required to maintain its confidentiality;
- Business transfers — in connection with a merger, acquisition, reorganisation or sale of all or part of our business, your information may be transferred as part of that transaction;
- Legal compliance — where required by applicable law, regulation, legal process, governmental request, or to protect the rights, property or safety of our company, customers or others; and
- With your consent — in any other circumstances, only with your explicit prior consent.
4. Data Retention
We retain personal information for as long as necessary to fulfil the purposes described in this policy and to comply with legal, accounting or reporting obligations. The specific retention period depends on the type of information and the purpose for which it was collected:
- Order and transaction records are typically retained for seven years from the date of purchase in compliance with Indian tax and commercial law;
- Customer account data is retained for the duration your account remains active and for a reasonable period thereafter;
- Marketing subscription data is retained until you unsubscribe or withdraw consent; and
- Support and correspondence records are retained for up to three years.
When personal data is no longer required, we securely delete or anonymise it.
5. Security of Your Information
We implement appropriate technical and organisational security measures designed to protect your personal information from accidental loss, unauthorised access, disclosure, alteration and destruction. These measures include:
- SSL/TLS encryption for data transmitted between your browser and our website;
- Secure, encrypted payment processing through PCI-DSS compliant third-party gateways;
- Access controls limiting who within our organisation can access personal data; and
- Regular review of our information collection, storage and processing practices.
Despite these efforts, no security system is impenetrable. We cannot guarantee the absolute security of information transmitted to or stored on our systems. In the event of a data breach that affects your rights or freedoms, we will notify you in accordance with applicable law.
6. Your Rights and Choices
Depending on applicable law, you may have the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you;
- Correction — request that we correct inaccurate or incomplete information;
- Deletion — request that we delete your personal information, subject to our legal retention obligations;
- Portability — request that we transfer your data to you or another organisation in a structured, commonly used format;
- Objection — object to processing of your personal data for direct marketing purposes; and
- Withdrawal of consent — where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please submit a request through the Contact Us page. We will respond within 30 days. We may need to verify your identity before fulfilling a request.
7. Marketing Communications
We will only send you marketing emails if you have opted in by subscribing to our newsletter or ticking the relevant box at checkout. Each marketing email includes an unsubscribe link. You may also opt out by contacting us directly. Once you unsubscribe, we will remove your address from our marketing list promptly and within 10 business days at most. Please note that opting out of marketing does not affect transactional emails related to your orders.
8. Third-Party Links
Our website may contain links to third-party websites, including social media platforms and LinkedIn profiles referenced in testimonials. Clicking these links will take you to sites not operated by us. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit. Our inclusion of a link does not imply endorsement of the linked site.
9. Children’s Privacy
Our website and products are intended for adults and professional practitioners. We do not knowingly collect personal information from individuals under the age of 18. If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.
10. Grievance Officer
In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of our Grievance Officer are published on the Contact Us page of this website. You may contact the Grievance Officer to raise any concern or complaint regarding the processing of your personal data. We will acknowledge your grievance within 48 hours and seek to resolve it within one month of receipt.
If you remain dissatisfied with our response, you may seek redress through the applicable consumer or data protection authorities under Indian law.
11. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements or other factors. When we update the policy, we will revise the effective date at the top of this page. For significant changes, we may also notify you by email or by placing a prominent notice on our website. We encourage you to review this page regularly. Your continued use of our website after any changes constitutes your acknowledgement of the updated policy.
The Mirror Deck by Quirkwise • Privacy Policy • Mumbai, India