Privacy Policy

Mirage Capital Corp (“we”, “us”), a corporation incorporated in the State of Delaware, United States, is the controller of personal data collected through this website. Our registered address is 2125 Biscayne Blvd, Ste 204 #10805, Miami, FL 33137, United States.

For anything in this policy, write to hello@miragecapital.co or call +1 (954) 504-9523.

If you are in the European Economic Area, our representative under Article 27 of the GDPR is EU REPRESENTATIVE — NAME AND ADDRESS. If you are in the United Kingdom, our representative under Article 27 of the UK GDPR is UK REPRESENTATIVE — NAME AND ADDRESS.

We collect only two things, and one of them is discarded almost immediately.

The contact form includes a hidden field that is invisible to people and is only ever filled in by automated bots. If it is filled in, the submission is discarded and nothing is stored or sent.

We do not ask for, want, or knowingly store special category data, financial details, government identifiers or credentials. Please do not put them in the message field.

Under the GDPR and UK GDPR we rely on the following bases:

• Legitimate interests (Article 6(1)(f)) — to read and answer an enquiry you chose to send us, and to keep the site secure and free of automated abuse. We think you would reasonably expect both.
• Steps prior to entering a contract (Article 6(1)(b)) — where your enquiry is about engaging us for work.
• Legal obligation (Article 6(1)(c)) — where we must retain records to comply with applicable law.

We do not rely on consent for anything on this website, because we run no analytics, advertising or tracking that would require it.

• We do not sell, rent or share your personal data for anyone else’s marketing.
• We do not add you to a mailing list, drip campaign or nurture sequence because you sent an enquiry.
• We do not profile you or make automated decisions with legal or similarly significant effects.
• We do not use your enquiry to train machine-learning models.

Enquiries are kept for 24 months from your last contact with us, then deleted, unless they have become part of a client engagement record.

IP addresses used for rate limiting persist for about a minute and are not retained afterwards. Logs held by our providers follow their own retention schedules, described in the sub-processors page.

You can ask us to delete an enquiry sooner. We will, unless we are required to keep it.

We use a small number of service providers, each acting as a processor on our instructions and bound by a data processing agreement. The current list, and what each one does, is on the sub-processors page.

We may also disclose personal data where we are legally required to, or to establish or defend legal claims. If we are ever compelled to hand over data, we will tell you unless we are legally prohibited from doing so.

We are established in the United States, and our providers process data in the United States. If you contact us from the EEA, the UK or Switzerland, your personal data will be transferred outside your home jurisdiction.

Those transfers are covered by the European Commission’s Standard Contractual Clauses, together with the UK International Data Transfer Addendum where relevant, and by supplementary measures including encryption in transit and strict access control.

If the GDPR or UK GDPR applies to you, you have the right to access your personal data, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on legitimate interests, you may object at any time.

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what we collect and why, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, and we will not discriminate against you for exercising any right.

To exercise any of these, email hello@miragecapital.co. We will respond within one month, or sooner where the law requires it. We will not charge you, and we will not make you create an account to ask.

If you are unhappy with our answer, you may complain to your local supervisory authority — in the UK, the Information Commissioner’s Office. We would rather you came to us first.

The site is served over HTTPS with HSTS. Enquiry data is transmitted directly to our email provider and is not stored in an application database. Our security measures are described in more detail on the sub-processors and security page.

No system is perfectly secure. If you believe you have found a vulnerability, please tell us at hello@miragecapital.co before disclosing it publicly.

This is a business website and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.

If we change this policy we will update the effective date above. Where a change materially affects your rights, we will say so prominently rather than relying on you to notice.