Privacy Policy

This Privacy Policy describes how MOODSTORIES LLC ("MOODSTORIES," "we," "us," or "our") collects, uses, and discloses your Personal Information when you visit www.moodstories.us (the "Site"), make a purchase, subscribe to our communications, or otherwise interact with us.

Contact

For any questions about this policy, requests to exercise your privacy rights, or to file a complaint, please contact us:

  • Email: order@moodstories.com
  • Mail: MOODSTORIES LLC, 18369 Northeast 4th Court, Miami, FL 33179, United States

Personal Information We Collect

When you visit the Site, we collect information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. The categories below describe what we collect and why.

Device and usage information

  • Purpose of collection: to load the Site accurately, perform analytics on Site usage, optimize Site performance, and personalize your experience.
  • Source of collection: collected automatically when you access the Site through cookies, log files, web beacons, tags, pixels, and similar tracking technologies.
  • Disclosure for a business purpose: shared with Shopify (e-commerce platform), Google (Google Analytics 4), Meta Platforms (Facebook and Instagram Pixel), TikTok, Pinterest, and Klaviyo.
  • Personal Information collected: web browser type and version, IP address, device identifiers, time zone, geographic location (approximate, derived from IP), referring URLs, pages and products viewed, search terms, clickstream data, and how you interact with the Site.

Order information

  • Purpose of collection: to fulfill our contract with you — process and ship your order, process payment, send invoices and order confirmations, communicate with you about your purchase, screen orders for fraud, and (where you have consented or where permitted by law) send you marketing communications about our products.
  • Source of collection: collected directly from you at checkout.
  • Disclosure for a business purpose: shared with Shopify (e-commerce and order management), payment processors (Shopify Payments, PayPal, and other gateways enabled at checkout), shipping carriers (such as USPS, UPS, FedEx, and DHL) and our fulfillment partners, and Klaviyo for transactional and marketing email/SMS where applicable.
  • Personal Information collected: name, billing address, shipping address, payment information (credit and debit card numbers processed by our payment provider — we do not store full card numbers ourselves, PayPal, Apple Pay, Google Pay, and Shop Pay), email address, phone number, and order history.

Customer support information

  • Purpose of collection: to respond to your inquiries, resolve issues with your order, process returns and exchanges, and improve our customer service.
  • Source of collection: collected directly from you when you contact us by email, contact form, or social media direct message.
  • Disclosure for a business purpose: shared with Shopify, Gmail (Google Workspace), and any customer service platform used to manage inquiries.
  • Personal Information collected: name, email address, phone number, order details, and any additional information you choose to share in your communication with us.

Marketing information

  • Purpose of collection: to send you newsletters, promotional offers, new arrival announcements, and other marketing communications based on your preferences.
  • Source of collection: collected from you when you subscribe to our newsletter, create an account, or place an order (where permitted).
  • Disclosure for a business purpose: shared with Klaviyo (email and SMS marketing platform).
  • Personal Information collected: name, email address, phone number, country, marketing preferences, and engagement data (opens, clicks).

Minors

The Site is not directed to individuals under the age of 13, and we do not knowingly collect Personal Information from children under 13. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at the address above and we will promptly delete it. We do not knowingly sell or share the Personal Information of consumers under 16 years of age.

How We Share Personal Information

We share your Personal Information with service providers who help us operate our business, fulfill our contracts with you, and provide our services. The categories of recipients include:

  • E-commerce and hosting: Shopify powers our online store. Read more about how Shopify uses Personal Information here: https://www.shopify.com/legal/privacy.
  • Payment processors: Shopify Payments, PayPal, and other gateways enabled at checkout. These providers are independent controllers of payment information they process.
  • Shipping and fulfillment: USPS, UPS, FedEx, DHL, and our fulfillment partners.
  • Email and SMS marketing: Klaviyo. Privacy notice: https://www.klaviyo.com/legal/privacy-notice.
  • Analytics and advertising: Google (Google Analytics 4 and Google Ads), Meta Platforms (Facebook and Instagram Pixel), TikTok, and Pinterest. See the "Behavioral Advertising" section below for details and opt-out options.
  • Legal and safety: we may disclose Personal Information to comply with applicable laws and regulations, respond to a subpoena, search warrant, or other lawful request, enforce our terms, or protect our rights, property, or safety, or that of our customers or others.
  • Business transfers: in the event of a merger, acquisition, financing, or sale of business assets, your Personal Information may be transferred as part of that transaction.

Behavioral Advertising

We use your Personal Information to provide you with targeted advertisements and marketing communications we believe may interest you. Specifically:

For more information about how targeted advertising works, visit the Network Advertising Initiative's educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

Using Personal Information

We use your Personal Information to provide our products and services to you, including: offering products for sale, processing payments, shipping and fulfilling your order, providing customer support, sending transactional communications, sending marketing communications (where you have consented or where permitted by law), preventing fraud, complying with legal obligations, and improving the Site.

Lawful basis (for EEA and UK residents)

If you are a resident of the European Economic Area, the United Kingdom, or Switzerland, we process your Personal Information on the following lawful bases under the GDPR and UK GDPR:

  • Performance of a contract — to fulfill orders, process payments, deliver products, and provide customer support.
  • Consent — for marketing communications (email and SMS), non-essential cookies, and behavioral advertising. You may withdraw consent at any time.
  • Legitimate interests — to operate, secure, and improve the Site, prevent fraud, and conduct analytics, where these interests are not overridden by your fundamental rights.
  • Compliance with legal obligations — including tax, accounting, and consumer protection laws.

Retention

We retain your Personal Information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. As a general rule:

  • Order and transaction records: retained for 7 years to comply with US tax and accounting requirements.
  • Customer accounts: retained for as long as your account is active, plus 2 years of inactivity.
  • Marketing data: retained until you unsubscribe or withdraw consent, plus a short period to honor your suppression request.
  • Customer support correspondence: retained for 3 years from the date of last contact.
  • Cookie and analytics data: retained for the duration listed in the Cookies section below.

You may request deletion of your Personal Information at any time, subject to our legal retention obligations — see the "Your Rights" section below.

Automated decision-making

If you are a resident of the EEA or UK, you have the right to object to processing based solely on automated decision-making (including profiling) that has a legal effect on you or otherwise significantly affects you.

We do not engage in fully automated decision-making that produces legal or similarly significant effects on customers. Our processor Shopify uses limited automated decision-making to prevent fraud, which does not produce legal or significant effects on you. These services include:

  • Temporary blacklist of IP addresses associated with repeated failed transactions (persists for a small number of hours).
  • Temporary blacklist of credit cards associated with blacklisted IP addresses (persists for a small number of days).

Your US State Privacy Rights

If you are a resident of California, Virginia, Colorado, Connecticut, Texas, Oregon, Montana, or another US state with a comprehensive privacy law, you may have specific rights regarding your Personal Information.

Sale and sharing of Personal Information

We do not sell Personal Information for monetary consideration. However, our use of advertising cookies and pixels (Meta, Google, TikTok, Pinterest) may constitute "sharing" of Personal Information for cross-context behavioral advertising under the California Consumer Privacy Act, as amended by the CPRA, and similar "targeted advertising" disclosures under other US state privacy laws.

You have the right to opt out of this sharing/targeted advertising. To opt out:

  • Use the cookie consent banner on our Site to disable advertising cookies.
  • Email us at order@moodstories.com with the subject "Do Not Sell or Share My Personal Information."
  • Use the opt-out links provided in the Behavioral Advertising section above.
  • Enable a Global Privacy Control (GPC) signal in your browser — we honor GPC as a valid opt-out request for California residents and other states where required.

We do not knowingly sell or share the Personal Information of consumers under 16 years of age.

Your rights

Depending on your state of residence, you may have the right to:

  • Know / Access: request to know what Personal Information we have collected, used, disclosed, or shared about you.
  • Delete: request deletion of your Personal Information, subject to certain exceptions.
  • Correct: request correction of inaccurate Personal Information.
  • Portability: request a copy of your Personal Information in a portable format.
  • Opt out of sale or sharing for cross-context behavioral advertising (see above).
  • Limit use of sensitive Personal Information (California).
  • Non-discrimination: we will not discriminate against you for exercising your privacy rights.
  • Appeal a denial of your request (Virginia, Colorado, Connecticut, Texas).

To exercise your rights, email us at order@moodstories.com or write to us at the postal address above. We will verify your identity using the email associated with your account, your order history, or other reasonable verification methods. We will respond within the timeframe required by your state's law (typically 45 days, with a possible extension).

You may designate an authorized agent to submit requests on your behalf. We will require written proof of authorization and may require you to verify your identity directly.

Categories of Personal Information collected and disclosed (for California residents)

In the past 12 months, we have collected the following categories of Personal Information, as defined under the CCPA/CPRA: identifiers (name, email, phone, IP address); customer records (billing and shipping address, payment information); commercial information (purchase history, products viewed); internet or other electronic network activity (browsing history, interaction with the Site); geolocation data (approximate, derived from IP); and inferences drawn from the above to create a profile of preferences.

We have disclosed these categories to the service providers and advertising partners listed in the "How We Share Personal Information" and "Behavioral Advertising" sections above for the business purposes described in this policy.

Your Rights (EEA, UK, and Switzerland)

If you are a resident of the EEA, UK, or Switzerland, you have the right to access, correct, update, port, restrict processing of, or erase the Personal Information we hold about you, and to object to processing based on legitimate interests. To exercise these rights, contact us at order@moodstories.com.

Your Personal Information may be transferred to and processed in countries outside the EEA/UK, including the United States and Canada, where data protection laws may differ. Where required, such transfers are protected by appropriate safeguards, including the European Commission's Standard Contractual Clauses. For details on Shopify's GDPR compliance, see: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

You also have the right to lodge a complaint with your local data protection authority. A list of EU authorities is available here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. UK residents may contact the ICO: https://ico.org.uk/make-a-complaint/.

Cookies

A cookie is a small piece of information downloaded to your device when you visit the Site. We use functional, performance, advertising, and analytics cookies. Cookies remember your actions and preferences (such as language and region), help us understand how you use the Site, and enable us to deliver relevant advertising.

The following categories of cookies are used on our Site:

Cookies necessary for the functioning of the store

Name Function Duration
_ab Used in connection with access to admin. 2y
_secure_session_id Used in connection with navigation through a storefront. 24h
_shopify_country Used in connection with checkout. session
_shopify_m Used for managing customer privacy settings. 1y
_shopify_tm Used for managing customer privacy settings. 30min
_shopify_tw Used for managing customer privacy settings. 2w
_storefront_u Used to facilitate updating customer account information. 1min
_tracking_consent Tracking preferences. 1y
c Used in connection with checkout. 1y
cart Used in connection with shopping cart. 2w
cart_currency Used in connection with shopping cart. 2w
cart_sig Used in connection with checkout. 2w
cart_ts Used in connection with checkout. 2w
cart_ver Used in connection with shopping cart. 2w
checkout Used in connection with checkout. 4w
checkout_token Used in connection with checkout. 1y
secure_customer_sig Used in connection with customer login. 20y
shopify_pay Used in connection with checkout. 1y
storefront_digest Used in connection with customer login. 2y

Reporting and analytics

Name Function Duration
_landing_page Track landing pages. 2w
_orig_referrer Track landing pages. 2w
_s Shopify analytics. 30min
_shopify_d Shopify analytics. session
_shopify_s Shopify analytics. 30min
_shopify_y Shopify analytics. 1y
_y Shopify analytics. 1y
_ga, _ga_* Google Analytics 4 — distinguish users and sessions. 2y
_gid Google Analytics — distinguish users. 24h
_gat Google Analytics — throttle request rate. 1min

Advertising and marketing

Name Function Duration
_fbp Meta Pixel — identify browsers for ad delivery and analytics. 3 months
fr Meta — ad delivery and measurement. 3 months
_ttp TikTok Pixel — measure conversions and target ads. 13 months
_pin_unauth Pinterest Tag — measure ad performance. 1y
__kla_id Klaviyo — identify visitors for email/SMS marketing attribution. 2y

The length of time a cookie remains on your device depends on whether it is a "persistent" or "session" cookie. Session cookies last until you stop browsing; persistent cookies last until they expire or are deleted.

You can control cookies through our cookie consent banner (where available), through your browser settings, or by opting out of advertising cookies via the links in the "Behavioral Advertising" section. Please note that disabling cookies may affect Site functionality. For more information on managing cookies, visit www.allaboutcookies.org.

Do Not Track and Global Privacy Control

Because there is no consistent industry standard for responding to "Do Not Track" browser signals, we do not currently respond to DNT signals. However, we honor the Global Privacy Control (GPC) signal as a valid opt-out of sale and sharing of Personal Information for California residents and other US state residents where required by law.

Security

We implement reasonable administrative, technical, and physical safeguards to protect your Personal Information. Our e-commerce platform uses SSL encryption for data transmitted between your device and our Site. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the updated policy on this page and revise the "Last updated" date below. For material changes, we will provide additional notice (such as by email or a prominent notice on the Site).

Complaints

If you would like to make a complaint, please contact us first using the contact details above. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection or consumer protection authority in your jurisdiction.

Last updated: May 5, 2026