Privacy policy

Last updated: October 3, 2026

This Privacy Policy explains how KRISTINN MIRRORS collects, uses and discloses your personal information when you visit kristinnmirrors.com, place an order or contact us, and the choices and rights you have. If this policy and our Terms and Conditions ever conflict, this policy controls how we handle your personal information.

At a glance

We collect the information we need to run our store, deliver your order and answer your messages.
Payments are processed by Shopify Payments. We never see or store your full card number.
Some advertising and analytics activities may count as a “sale” or “sharing” of personal information under certain U.S. state laws. You can opt out at any time on Your Privacy Choices.
You can ask us to access, correct or delete your information by emailing support@kristinnmirrors.com.

1. Who we are

KRISTINN MIRRORS is the trading name of Kristinn Ingi Einarsson, a sole proprietor established in Spain. We operate this store and are responsible for the personal information described in this policy.

Because we are established in Spain, the EU General Data Protection Regulation (GDPR) applies to how we handle personal information. For customers in the United States, we also follow the U.S. state privacy laws that apply to us, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

Business details
KRISTINN MIRRORS
Kristinn Ingi Einarsson, sole proprietor
Tax ID (NIF): Z3697042G
Calle Sócrates 2, Planta 0, Puerta 8
16400 Tarancón, Cuenca, Spain
Email: support@kristinnmirrors.com

2. Personal information we collect

Depending on how you use our store, we may collect or process the following categories of personal information, including inferences drawn from them:

Contact details: your name, shipping and billing address, email address and phone number, if you provide one.
Payment information: payment confirmation, transaction details, card type and the last four digits of your card. Full card numbers are handled by our payment provider, Shopify Payments, and we never see or store them.
Account information: if you create an account, your login details, preferences and settings.
Transaction information: the items you view, add to your cart, buy, return or exchange, and your past orders.
Communications with us: the content of the emails and messages you send us, including photos you share about an order.
Device information: your IP address, browser type, device type, operating system and other unique identifiers.
Usage information: how and when you browse and interact with our store, including the pages you view and the links you click.

3. Where we get it

Directly from you, when you place an order, create an account, sign up for emails or contact us.
Automatically, from your device when you use our store, through cookies and similar technologies.
From our service providers, when they collect or process information on our behalf, for example to process a payment or deliver a package.
From our partners, such as advertising and analytics partners.

4. How we use it

To provide and improve our store: to process your order and payment, arrange shipping, handle returns and refunds, manage your account, remember your preferences and improve how our store works.
For marketing and advertising: to send you marketing emails if you signed up for them, and to show you relevant ads on other websites and platforms based on your activity in our store.
For security and fraud prevention: to protect payments, detect and prevent fraud or abuse, and keep our store secure.
To communicate with you: to send order and shipping updates and to answer your questions.
For legal reasons: to comply with the law, respond to valid legal requests, keep tax and accounting records, and enforce our terms.

5. How we disclose it

We disclose personal information only for the purposes described in this policy:

With Shopify and with service providers who work on our behalf, such as payment processing, IT and hosting, analytics, customer support, email delivery, fulfillment and shipping.
With advertising and marketing partners, to measure and show ads. These partners use your information under their own privacy notices. Depending on where you live, you can opt out on Your Privacy Choices.
When you ask us to, for example to ship your order to a recipient you name, or when you use a social media feature or login.
When required by law or needed to protect rights, for example to respond to a subpoena or court order, to enforce our terms, or in connection with a business transfer such as a sale or merger.

Category	Examples	Disclosed to
Identifiers and contact details	Name, email, postal address, phone number, IP address	Shopify, payment and shipping providers, customer support and email tools, advertising and analytics partners
Commercial information	Items viewed, carts, purchases and returns	Shopify, analytics and advertising partners
Financial information	Payment confirmation, card type, last four digits	Shopify Payments
Internet and device activity	Browsing activity, device and browser details, cookie identifiers, approximate location based on your IP address	Shopify, analytics and advertising partners
Communications	Messages and photos you send us	Customer support and email tools

6. Our relationship with Shopify

Our store is hosted by Shopify, which collects and processes personal information about your use of our store to provide and improve its services. Information you submit is shared with Shopify and with third parties that may be located in other countries. We also use certain Shopify features that combine information from your interactions with our store, with other merchants and with Shopify. For those features, Shopify is responsible for processing your personal information, including responding to requests to exercise your rights.

To learn more about how Shopify uses your personal information, see the Shopify Consumer Privacy Policy. Depending on where you live, you can exercise certain rights over that data through the Shopify Privacy Portal.

7. Cookies and similar technologies

Cookies are small files stored on your device. We and our partners use cookies, pixels and similar technologies to:

Run the store: keep your cart, process checkout, keep you signed in and protect the store. These are strictly necessary.
Understand performance: see how visitors use the store so we can improve it.
Advertise: measure our ads and show you relevant ads on other websites and platforms.

You can block or delete cookies in your browser settings, but the cart and checkout may not work without the strictly necessary ones. If your browser sends a Global Privacy Control (GPC) signal, we treat it as described in section 11. Other than GPC, we do not respond to “Do Not Track” signals.

8. Marketing emails

We send marketing emails only if you sign up for them or where the law allows it. Every marketing email includes an unsubscribe link that works right away, and you can also ask us to remove you by writing to support@kristinnmirrors.com. Even after you unsubscribe, we still send you emails about your orders, such as confirmations and shipping updates.

9. Third-party websites and links

Our store may link to websites or platforms run by others, such as social networks. Their privacy and security practices are their own, and we are not responsible for them. Please review their policies before you share information with them. Anything you post publicly, such as on social media, may be visible to others.

10. Children

Our store is not directed to children, and we do not knowingly collect personal information from children under 13. We do not knowingly sell or share the personal information of consumers under 16. If you are a parent or guardian and believe your child has given us personal information, contact us at support@kristinnmirrors.com and we will delete it.

11. Your rights and choices

Depending on where you live, you may have some or all of these rights:

Access and know: ask what personal information we hold about you and get a copy.
Delete: ask us to delete the personal information we hold about you.
Correct: ask us to correct inaccurate personal information.
Portability: receive a copy of your information in a portable format and ask us to send it to another company, where technically possible.
Opt out of sale, sharing and targeted advertising: use Your Privacy Choices. If your browser sends a Global Privacy Control signal, we treat it as an opt-out request for that browser and device, and for your account when we can link them.
Appeal: if we decline your request, you can appeal by replying to our decision with “Appeal” in the subject line. If you are not satisfied with the result of your appeal, you may contact your state attorney general.

If the GDPR applies to you, you can also object to or ask us to restrict certain processing, withdraw your consent at any time, and lodge a complaint with a data protection authority, such as the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD).

To exercise a right, email support@kristinnmirrors.com with the subject “Privacy request”. We may need to verify your identity before we act. You may use an authorized agent: we will ask the agent for proof that you authorized them, and we may ask you to confirm your identity directly with us. We respond within the time required by applicable law, and we will not discriminate against you for exercising any of these rights.

12. Security and retention

We use reasonable safeguards to protect personal information, but no method of storage or transmission is completely secure. Please do not send sensitive information, such as full card numbers, by email.

We keep order, invoice and payment records for 6 years, as required by Spanish commercial and tax law. We keep other information only as long as we need it for the purposes in this policy, for example to manage your account, provide customer support or resolve disputes, and then we delete or anonymize it.

13. International transfers

We are established in Spain and serve customers in the United States. Your personal information may be stored and processed in the United States, in Spain and other countries of the European Union, and in other countries where our service providers operate. Where the GDPR applies to a transfer outside the European Economic Area, we rely on recognized safeguards, such as the European Commission’s Standard Contractual Clauses.

14. Changes to this policy

We may update this policy from time to time to reflect changes to our practices or for legal, operational or regulatory reasons. We will post the updated version on this page and change the “Last updated” date above.