This Privacy Policy explains how Mystic Mail ("we", "us", "our") collects, uses, shares, and protects your personal information when you visit our website or subscribe to our letters.
1. Information We Collect
- Account & order details: name, email address, mailing address, and the products you subscribe to.
- Payment information: processed by our payment provider. We do not store full card numbers on our servers.
- Communications: messages you send through our contact form or by email.
- Usage data: basic analytics such as pages visited, device type, and approximate location, collected via cookies and similar technologies.
2. How We Use Your Information
- To create and ship your letters each month.
- To process payments and manage your subscription.
- To respond to your questions and provide support.
- To send service emails (e.g. order confirmations) and, if you opt in, our newsletter.
- To improve the Service, prevent fraud, and comply with legal obligations.
3. Legal Bases (EEA/UK Users)
If you are in the European Economic Area or the United Kingdom, we process your personal data on the basis of contract performance (to deliver your subscription), legitimate interests (to operate and improve our business), consent (for marketing emails and non-essential cookies), and legal obligations.
4. Sharing Your Information
We do not sell your personal information. We share it only with trusted service providers who help us operate Mystic Mail, such as:
- Payment processors
- Shipping and fulfillment partners
- Email and hosting providers
- Analytics providers
We may also disclose information when required by law or to protect our rights, users, or the public.
5. Cookies
We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings. Disabling cookies may affect some features.
6. Data Retention
We retain your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.
7. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have additional rights under the CCPA/CPRA, including the right to know and the right to delete. To exercise any of these rights, contact us using the details below.
8. Security
We use reasonable technical and organizational measures to protect your information. No system is perfectly secure, however, and we cannot guarantee absolute security.
9. Children's Privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us so we can remove it.
10. International Transfers
Your information may be processed in countries other than your own. When we transfer personal data internationally, we use appropriate safeguards as required by applicable law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a notice on the Service.
12. Contact Us
For privacy questions or to exercise your rights, reach us through our contact page.