Privacy policy

This Privacy Policy describes how DarMirror ("we," "us," "our"), operated by Marblux LLC, a New Mexico limited liability company, collects, uses, and protects your personal information when you visit this site or make a purchase.

1. Information We Collect

Provided directly: name, email, shipping/billing address, phone number, payment details (processed by our payment provider — we never store full card numbers), and any custom sizing specs submitted for made-to-order mirrors.

Collected automatically: IP address, browser type, device information, pages viewed, referring URL, and time on site, via cookies and similar technologies.

2. How We Use Your Information

Processing and fulfilling your order, including coordinating custom specifications with our workshop in Morocco
Sending order confirmations, shipping updates, and customer service communications
Improving our website, products, and customer experience
Sending marketing emails, only if you've opted in
Detecting and preventing fraud
Complying with legal, tax, and customs obligations

3. Consent

By providing your information at checkout or through our site, you consent to its collection and use as described in this policy. You may withdraw consent for optional uses, like marketing emails, at any time.

4. How Your Information Is Shared

We don't sell your personal information. We share it only where necessary: with our production workshop in Morocco to coordinate custom orders, with shipping carriers to deliver your order, with payment processors to complete transactions, with service providers who help run the store (analytics, email, support tools), and where required by law.

Because DarMirror ships internationally and coordinates with a workshop outside the United States, your information may be transferred to and processed in countries other than your own, including Morocco and the United States.

5. Payment Security

All payment transactions are encrypted and processed through Shopify Payments and/or PayPal. We do not store your full credit card number on our servers.

6. Data Retention

Order records are kept for 7 years for tax and accounting compliance. Customer service correspondence is kept for 3 years. Website analytics data is kept for 26 months. Marketing consent records are kept until you unsubscribe, plus proof of opt-out for compliance.

7. Cookies & Tracking Technologies

We use essential cookies (required for cart, checkout, and account functions), analytics cookies (to understand site traffic), marketing cookies (to personalize ads and measure campaigns), and preference cookies (to remember settings like currency).

8. Third-Party Services We Use

Shopify (store platform & hosting), Shopify Payments/PayPal (payment processing), shipping carriers (order fulfillment), Google Analytics (site analytics), our email platform (order & marketing emails), and a review platform if enabled.

9. Your Rights

You have the right to access, correct, or request deletion of your personal data; to opt out of marketing at any time via the unsubscribe link in any email; to request your data in a portable format; and to object to certain processing, such as targeted advertising. To exercise any of these rights, email MarbluxLLC@gmail.com. We'll respond within 30 days.

10. Children's Privacy

DarMirror is not directed at children under 13, and we do not knowingly collect personal information from children.

11. Security Measures

We use industry-standard safeguards, including encrypted data transmission (SSL/TLS), to protect your information. No method of transmission over the internet is 100% secure, but we use commercially reasonable means to protect your data.

12. External Links

Our site may link to third-party websites. We aren't responsible for the privacy practices of those sites.

13. U.S. State Privacy Rights

Residents of California (CCPA/CPRA), Virginia (CDPA), Colorado, Connecticut, Texas, and Utah have rights to know, access, correct, delete, and opt out of the sale/sharing of personal information under their respective state laws. We aim to respond to verified requests within 45 days.