Privacy Policy

Slast Updated: 4/27/2026

Moonstone & Moss ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the rights you have regarding your personal data.

By using our website or making a purchase, you agree to the practices described in this Policy. If you do not agree, please do not use our website or provide us with your personal information.

This Policy should be read alongside our Terms and Conditions [link] and Refund & Returns Policy [link].

1. Who We Are

Moonstone & Moss is an online retailer of antiques, collectibles, and curated decorative goods, operated from Colorado Springs, Colorado. For any privacy-related questions or requests, you can reach us at:

Email: azure@moonstonemoss.com  

Mailing Address: 2356 N Circle Dr, Colorado Springs, Colorado 80909

2. Information We Collect

We collect personal information that you provide to us directly, as well as certain information automatically when you use our website.

Information you provide directly:

• Full name — to process and ship your order, and to address communications
• Email address — to send order confirmations, shipping updates, customer service responses, and (with your consent) marketing communications
• Shipping and billing addresses — to deliver your order and verify payment
• Phone number — for shipping coordination, delivery notifications, and urgent order-related communication
• Payment information — credit card or other payment details, processed securely through our third-party payment processor. We do not store your full payment card details on our servers.
• Order history and preferences — to manage your purchases, returns, and customer service requests
• Communications — any messages, inquiries, or feedback you send to us

Information collected automatically:

When you visit our website, we may automatically collect:

• IP address and approximate location
• Browser type and version
• Device type and operating system
• Pages viewed, links clicked, and time spent on the site
• Referring website or source
• Cookie and similar tracking data (see Section 6)

3. How We Use Your Information

We use the information we collect for the following purposes:

• To process, fulfill, and ship your orders
• To communicate with you about your order, including confirmations, shipping notifications, and delivery updates
• To respond to customer service inquiries, returns, refund requests, and damage claims
• To verify your identity and prevent fraudulent transactions
• To maintain accurate records of sales, returns, and customer interactions
• To improve our website, product offerings, and customer experience
• To send marketing communications, but only if you have explicitly opted in
• To comply with legal obligations, including tax, accounting, and regulatory requirements
• To enforce our Terms and Conditions and protect our rights, property, and users

We will never sell or rent your personal information to third parties for their own marketing purposes.

4. Legal Basis for Processing (for EU/UK Customers)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract — to fulfill your order and provide customer service
• Legal obligation — to comply with tax, accounting, and consumer protection laws
• Legitimate interests — to operate, secure, and improve our business in ways you would reasonably expect
• Consent — for marketing communications and non-essential cookies, which you may withdraw at any time

5. How We Share Your Information

We share your personal information only as necessary to operate our business and fulfill your orders. We may share information with:

• Payment processors (e.g., [Stripe / PayPal / Square]) to securely handle transactions
• Shipping and logistics providers (e.g., USPS, UPS, FedEx, DHL) to deliver your order
• E-commerce platform and hosting providers (e.g., [Shopify / WooCommerce / etc.]) that power our website
• Email and communication services to send order updates and (with consent) marketing communications
• Analytics providers (e.g., Google Analytics) to help us understand site usage in aggregate
• Professional advisors including accountants, lawyers, and insurers, as needed
• Government authorities or law enforcement when required by law, court order, or to protect our legal rights

All third parties we work with are required to handle your data securely and only for the purposes we specify.

In the event of a business sale, merger, or transfer of assets, customer information may be transferred to the new owner, subject to the protections of this Privacy Policy.

6. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to help the site function, remember your preferences, and analyze traffic. Cookies fall into the following categories:

• Essential cookies — required for core site functions like checkout and account access
• Functional cookies — remember your preferences and improve your experience
• Analytics cookies — help us understand how visitors interact with our site
• Marketing cookies — used only with your consent to deliver relevant advertising

You can manage cookie preferences through your browser settings or our cookie banner [if applicable]. Disabling certain cookies may affect site functionality.

7. Data Retention

We retain your personal information only as long as necessary for the purposes described in this Policy, including:

• Order and transaction records — typically retained for [7] years to comply with tax and accounting obligations
• Customer account information — retained while your account is active or as needed to provide services
• Marketing data — retained until you unsubscribe or withdraw consent
• Website analytics — retained in aggregated or de-identified form

When personal information is no longer needed, we securely delete or anonymize it.

8. Data Security

We take reasonable and appropriate measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Secure SSL/TLS encryption for data transmitted through our website
• Secure payment processing through PCI-compliant third parties
• Restricted access to personal data on a need-to-know basis
• Regular review of our security practices

However, no method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately.

9. Your Rights

Depending on where you live, you may have certain rights regarding your personal information, including:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Deletion — request that we delete your personal data, subject to legal retention obligations
• Restriction — request that we limit how we process your data
• Portability — request a copy of your data in a portable, machine-readable format
• Objection — object to certain types of processing, including direct marketing
• Withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, please contact us at [email address]. We will respond within the timeframe required by applicable law (typically 30–45 days). We may need to verify your identity before fulfilling your request.

For California residents (CCPA/CPRA): You have the right to know what personal information we collect, request deletion of your information, opt out of the sale or sharing of your data (we do not sell personal information), and not be discriminated against for exercising your rights.

For EU/UK residents (GDPR): You also have the right to lodge a complaint with your local data protection authority if you believe we have violated your rights.

10. Marketing Communications

We will only send you marketing emails or texts if you have explicitly opted in. You can unsubscribe at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Replying STOP to any marketing text
• Contacting us directly at [email address]

Even after unsubscribing from marketing, we will continue to send transactional messages related to your orders (such as confirmations, shipping updates, and customer service responses).

11. Children's Privacy

Our website and products are not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us, and we will take steps to delete it promptly.

12. International Data Transfers

If you are located outside USA , please be aware that your information may be transferred to, stored, and processed in USA or in other countries where our service providers operate. These countries may have data protection laws that differ from those in your country. Where required, we use appropriate safeguards (such as standard contractual clauses) to protect your data during international transfers.

13. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any third-party sites you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. If we make material changes, we will notify you by email (if we have your address) or by posting a prominent notice on our website. Your continued use of our site after changes are posted constitutes acceptance of the updated Policy.