What we collect, and what we do not.
This is a marketing site with one form on it. The short version: we collect what you type into that form, we use analytics to see which pages are read, and we do not sell anything to anybody.
Who we are
Dot Mirror Ltd operates dotmirror.com and is the controller of the personal data described here. Our registered office is [registered address], company number [company number].
For anything on this page, including a request to see or delete your data, write to [email protected].
What we collect
When you submit the enquiry form, we receive what you typed: your name, your work email, your website URL, the service you selected, and any message you added. If you arrived from an order or pricing link, the form also carries the package and the page you came from, so we can reply about the right thing.
When you request a sample library, we receive your email address and the service you asked about, and send you a confirmation link.
When you book a call, the scheduling is handled by Calendly, on their own page embedded in ours. Whatever you enter there is collected by them under their privacy policy, not by us.
When you use the chat on this site, we receive your name and email (asked before the chat starts), the messages you write, the page you were on, and where you first came from (for example a search ad's campaign tags). The first answers come from an AI assistant that only knows what we wrote about our services; a person from our team can read the chat and join it. If you book a call in the chat, it is scheduled on our own calendar and you get a confirmation by email.
We also receive the ordinary technical data any website receives — IP address, browser and device type, referring page. Your IP is used only to rate-limit the form against automated submissions, is held in memory, and is not written to a database or attached to your enquiry.
Why we use it
- To answer your enquiry and, if it goes further, to quote and deliver the work. That is performance of a contract, or steps taken at your request before one.
- To keep the site working and defend the form against spam and abuse. That is our legitimate interest in running the service.
- To understand which pages are read, in aggregate, so we can write better ones. That is analytics, covered below.
We do not use your data for automated decision-making or profiling.
Who else touches it
We keep the list of third parties deliberately short. In full:
- Resend — delivers the email your enquiry becomes, and the confirmation emails from the sample library.
- Google Analytics 4 — measures page views and traffic sources.
- Calendly — hosts the booking page embedded at /book.
- GrowthDesk — runs the chat on this site, its AI assistant, and the calls booked in it.
- Our hosting provider — serves the site and holds ordinary server logs.
We do not sell, rent or trade personal data, and we do not share your details with other clients, partners or advertisers. Where a supplier processes data on our behalf, they do so under contract and only on our instructions.
Some of these providers operate outside your country. Where data is transferred internationally, it is done under the safeguards those providers publish, such as standard contractual clauses.
How long we keep it
- Enquiries that do not become work — kept for up to 24 months, then deleted.
- Client and partner records — kept for the length of the relationship and then for as long as tax and accounting law requires.
- Analytics — retained on Google's schedule, in aggregate, with no way back to you as an individual.
- Rate-limiting data — held in memory only and lost on every deploy.
Your rights
Depending on where you live, you have some or all of the following rights over your data: to ask for a copy of it, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format.
Write to [email protected] and we will respond within 30 days. We will not charge you for it and we will not ask you why.
You can tell us to stop contacting you at any time, and every email we send carries a way to do that. If you think we have handled your data badly, you are entitled to complain to the data protection authority in your country.
Security
The site is served over HTTPS. Access to enquiry data is limited to the people who need it to reply to you. We hold no payment card details at any point — payments are handled by our payment provider, and card numbers never reach our systems.
No system is perfect. If a breach ever affects your data, we will tell you and the relevant authority within the time the law allows, and we will tell you what we are doing about it.
Changes
If this policy changes materially, we will update the date at the top and, where the change affects how we use data you have already given us, tell you directly rather than expecting you to re-read the page.
This policy is governed by the law of [governing jurisdiction].
Ask us and we will answer in plain terms.
We would rather settle a question now than argue one later.