This Privacy Policy explains how Mystic Mail ("we", "us", "our") collects, uses, shares, and protects your personal information when you visit our website or subscribe to our letters.
1. Information We Collect
- Account & order details: name, email address, mailing address, and the products you subscribe to.
- Payment information: processed by our payment provider. We do not store full card numbers on our servers.
- Communications: messages you send through our contact form or by email.
- Usage data: basic analytics such as pages visited, device type, and approximate location, collected via cookies and similar technologies.
2. How We Use Your Information
- To create and ship your letters each month.
- To process payments and manage your subscription.
- To respond to your questions and provide support.
- To send service emails (e.g. order confirmations) and, if you opt in, our newsletter.
- To improve the Service, prevent fraud, and comply with legal obligations.
3. Legal Bases (EEA/UK Users)
If you are in the European Economic Area or the United Kingdom, we process your personal data on the basis of contract performance (to deliver your subscription), legitimate interests (to operate and improve our business), consent (for marketing emails and non-essential cookies), and legal obligations.
4. Sharing Your Information
We do not sell your personal information. We share it only with trusted service providers who help us operate Mystic Mail, such as:
- Payment processors
- Shipping and fulfillment partners
- Email and hosting providers
- Analytics providers
We may also disclose information when required by law or to protect our rights, users, or the public.
5. Cookies
We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings. Disabling cookies may affect some features.
6. Data Retention
We retain your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.
7. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have additional rights under the CCPA/CPRA, including the right to know and the right to delete. To exercise any of these rights, contact us using the details below.
8. Security
We take the safety of your information seriously and use reasonable technical, administrative, and organizational safeguards to protect it against loss, misuse, or unauthorized access. That said, no method of transmitting or storing data online is completely safe, so while we work hard to protect your information, we are unable to promise that it will be secure in every circumstance.
9. Children's Privacy
Mystic Mail is meant for adults. We do not offer the Service to anyone under 16, and we do not intentionally gather personal information from anyone in that age group. If you believe a child has shared information with us, please get in touch using the details below and we will delete it promptly.
10. International Transfers
Your information may be processed in countries other than your own. When we transfer personal data internationally, we use appropriate safeguards as required by applicable law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a notice on the Service.
12. Contact Us
For privacy questions or to exercise your rights, reach us through our contact page.