Privacy policy
Last Updated: August 28, 2026
Gypsy Moon ("we," "our," or "the Company") owns and operates this website and provides related services to you. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you interact with our website, place an order, or otherwise use our services. By accessing or using our website and services, you acknowledge that you have read and understood this policy.
1. Information We Collect
We gather the following categories of personal information to deliver, maintain, and enhance our services:
| Information Category | Details | How We Collect It |
|---|---|---|
| Contact Details | Full name, email address, telephone number, shipping address, billing address | Registration, purchases, customer inquiries |
| Payment Data | Credit/debit card numbers, billing information, payment method details | Checkout process |
| Account Credentials | Username, password, saved preferences | Account creation |
| Transaction Records | Items purchased, order history, returns, exchanges | Completed transactions |
| Device & Technical Data | IP address, browser type and version, operating system, device type and identifiers | Automatic collection via website |
| Behavioral & Usage Data | Pages viewed, session duration, click patterns, traffic source, referring URL | Automatic collection via website |
2. How We Use Your Information
We process your personal information for the following purposes:
- Order Management: Process, confirm, and fulfill your purchases, including coordinating shipping, delivery, and tracking updates.
- Customer Communication: Send order confirmations, shipping notifications, delivery status updates, and respond to your support requests in a timely manner.
- Customer Support: Provide assistance with questions, concerns, product inquiries, and post-purchase service.
- Marketing (With Consent Only): Deliver promotional emails, special offers, and marketing content — only when you have explicitly opted in to receive them.
- Website Improvement: Analyze how visitors interact with our site to enhance functionality, refine our product selection, and improve overall user experience.
- Fraud Prevention & Security: Detect and prevent unauthorized transactions, fraudulent activity, and potential threats to website and account security.
- Legal Compliance: Meet applicable legal obligations, including tax reporting, accounting standards, and regulatory requirements.
- Analytics & Optimization: Study website traffic patterns to optimize page layout, content structure, and site performance.
3. SSL Encryption & Data Security
Protecting your personal data is a core priority. Our website uses SSL (Secure Sockets Layer) encryption to ensure that all information transmitted between your browser and our servers remains fully encrypted and secure. You can confirm our active SSL certificate by looking for the padlock icon in your browser's address bar.
We maintain a comprehensive set of technical and organizational safeguards to protect your information against unauthorized access, alteration, disclosure, or loss. These include:
- TLS/SSL encrypted data transmission across all web pages
- PCI-compliant third-party payment processors for secure transaction handling
- Strict access controls — personal data is accessible only to authorized personnel with a legitimate business need
- Routine security audits and continuous vulnerability monitoring
4. Cookies & Tracking Technologies
We employ cookies and comparable tracking tools to deliver a smoother browsing experience and personalized service.
4.1 Types of Cookies We Use
| Cookie Type | Purpose | Essential | Retention Period |
|---|---|---|---|
| Shopping Cart Cookie | Preserve cart items and checkout progress | Yes | 30 days |
| Session Cookie | Maintain logged-in status and session state | Yes | Until browser closes |
| Security Cookie | Account authentication and fraud prevention | Yes | 1 hour |
| Google Analytics | Website traffic analysis and user behavior insights | No | 2 years |
| Google Ads | Personalized advertising and conversion measurement | No | 90 days |
| Facebook Pixel | Ad performance tracking and audience retargeting | No | 90 days |
| Klaviyo | Email marketing automation and customer analytics | No | 365 days |
4.2 Managing Your Cookie Preferences
You can control cookies through several methods:
- Browser Settings: Most web browsers allow you to block, restrict, or delete cookies through the privacy or settings menu.
-
Advertising Opt-Out Tools:
- Google Ads: https://www.google.com/settings/ads
- Facebook: https://www.facebook.com/settings/?tab=ads
Note: Disabling essential cookies may impair core website functionality, including shopping cart operations, checkout processing, and personalized recommendations.
5. Data Retention Schedule
We retain your information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Information | 3 years | Retained from account closure or last recorded activity |
| Order & Transaction Records | 5 years | Required for tax, accounting, and legal compliance |
| Payment Details | 1 year | Held solely for transaction processing and dispute resolution |
| Marketing Preferences | Until consent is withdrawn | You may unsubscribe or withdraw consent at any time |
Upon expiration of the applicable retention period, your data will be securely deleted or permanently anonymized so that it can no longer be associated with you.
6. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights with respect to your personal data:
| Right | Description |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Correction | Update or rectify inaccurate or incomplete personal information |
| Deletion | Request that we delete your personal data (the "Right to Be Forgotten") |
| Opt-Out of Marketing | Unsubscribe from promotional emails and marketing communications at any time |
| Restriction / Objection | Limit or object to specific data processing activities |
| Data Portability | Receive your data in a structured, commonly used, machine-readable format |
California Consumer Privacy Act (CCPA) — California Residents Only
If you reside in California, the CCPA grants you additional rights:
| Right | Description |
|---|---|
| Right to Know | Learn what personal information we collect, how it is used, and with whom it is shared |
| Right to Delete | Request deletion of your personal information (subject to applicable legal exceptions) |
| Right to Opt-Out of Sale/Sharing | Opt out of the sale or sharing of personal information for cross-context behavioral advertising |
| Right to Non-Discrimination | We will not discriminate against you for exercising any CCPA right |
We do not sell your personal information for monetary consideration. For details on how we may share data with advertising partners for targeted advertising purposes, please refer to our Your Privacy Choices page.
How to Exercise Your Rights
- Email: info@gypsymoon.us
- Phone: (651) 699-9531
We will confirm receipt of your request within 10 business days and provide a substantive response within 45 days, as required by applicable law.
7. Data Breach Response & Notification
7.1 Our Commitment
In the unlikely event of a data security incident, we commit to the following actions:
- Notify affected individuals within 72 hours of discovering the breach
- Report the incident to relevant regulatory authorities as mandated by applicable law
- Clearly communicate the nature, scope, and potential impact of the breach
- Provide concrete remediation steps, protective recommendations, and ongoing support
7.2 What Our Notification Will Include
- The types and approximate volume of records affected
- Potential consequences for impacted individuals
- Actions taken or planned to contain the breach and prevent recurrence
- A direct contact channel for affected individuals to obtain further information or assistance
8. Children's Privacy
Our website and services are not directed to individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction).
We do not knowingly collect personal information from children. If we become aware that a child's personal data has been collected without verified parental or guardian consent, we will immediately delete that information from our systems.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us promptly at info@gypsymoon.us so we can take immediate corrective action.
9. Third-Party Links & Services
Our website may contain hyperlinks to third-party websites, platforms, or services that are not operated or controlled by Gypsy Moon. We are not responsible for the privacy practices, content, or security measures of these external sites.
We strongly encourage you to review the privacy policy of any third-party website before sharing your personal information. The presence of third-party links on our website does not constitute an endorsement of those sites or their operators.
10. Policy Updates & Revisions
We may revise this Privacy Policy periodically to reflect changes in our data practices, service offerings, or legal and regulatory requirements.
- The updated policy will be published on this page with a revised "Last Updated" date at the top
- Significant changes will be communicated to registered users via email or a prominent notice on our website
- Your continued use of our website and services after the effective date of any update constitutes your acceptance of the revised policy
We encourage you to review this page regularly to stay informed about how we safeguard your information.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to reach out. Our team is happy to help.
| Phone | (651) 699-9531 |
| info@gypsymoon.us | |
| Address | 1675 Selby Ave, Saint Paul, MN 55104, USA |
| Business Hours | Monday – Saturday: 10 AM – 6 PM · Sunday: 11 AM – 5 PM |