Privacy Policy for GypsySoulSisters.shop
Effective Date: January 1, 2026
Last Updated: August 1, 2026
At GypsySoulSisters.shop ("Company," "we," "our," or "us"), we are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, share, and protect information when you visit our website, purchase products, subscribe to communications, or otherwise interact with us.
By using GypsySoulSisters.shop, you agree to the practices described in this Privacy Policy.
1. Information We Collect
Information You Provide
We may collect personal information that you voluntarily provide, including:
- Name
- Email address
- Phone number
- Billing address
- Shipping address
- Payment information
- Account login information
- Order history
- Customer service communications
- Marketing preferences
Information Collected Automatically
When you visit our website, we may automatically collect:
- IP address
- Browser type and version
- Device information
- Operating system
- Pages viewed
- Time spent on pages
- Website interactions
- Referring URLs
Cookies and Similar Technologies
We use cookies, pixels, tags, and similar technologies to:
- Operate our website
- Remember user preferences
- Improve website performance
- Analyze website traffic
- Personalize content and advertisements
- Measure marketing effectiveness
You can manage cookie settings through your browser settings.
2. How We Use Your Information
We use personal information to:
- Process and fulfill orders
- Provide customer support
- Manage accounts
- Process payments
- Deliver products
- Send order confirmations and updates
- Prevent fraud and unauthorized activity
- Improve our products and services
- Conduct analytics and performance monitoring
- Send promotional communications
- Comply with legal obligations
3. Legal Bases for Processing Personal Information
Where applicable under GDPR and UK data protection laws, we process personal information based on:
- Your consent
- Performance of a contract
- Compliance with legal obligations
- Protection of vital interests
- Legitimate business interests that do not override your rights and freedoms
4. How We Share Information
We may share your information with:
- Payment processors
- Shipping and fulfillment providers
- Website hosting providers
- Marketing and email service providers
- Analytics providers
- Professional advisors
- Law enforcement or government authorities when legally required
We do not sell your personal information for monetary compensation.
5. Payment Processing
Payments are processed through secure third-party payment providers. We do not store complete payment card information on our servers.
Please review the privacy policies of our payment service providers for information about how they handle your personal information.
6. Data Retention
We retain personal information only for as long as necessary to:
- Fulfill orders
- Provide services
- Resolve disputes
- Maintain business records
- Meet legal and regulatory requirements
When information is no longer required, it will be securely deleted or anonymized.
7. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.
However, no internet transmission or electronic storage system can be guaranteed to be 100% secure.
8. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of third-party sites.
We encourage users to read the privacy policies of any website they visit.
9. Children's Privacy
GypsySoulSisters.shop is not intended for children under the age of 13.
We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete the information promptly.
10. GDPR Privacy Rights (European Economic Area)
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR).
These rights may include:
Right of Access
You can request a copy of the personal information we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete information.
Right to Erasure
You can request deletion of your personal information under certain circumstances.
Right to Restrict Processing
You can request restrictions on how we process your information.
Right to Data Portability
You can request your personal information in a structured, machine-readable format.
Right to Object
You may object to certain processing activities, including direct marketing.
Right to Withdraw Consent
Where processing is based on consent, you can withdraw that consent at any time.
Right to Lodge a Complaint
You have the right to lodge a complaint with your local data protection authority.
International Data Transfers
If personal information is transferred outside the EEA, we take reasonable measures to ensure appropriate safeguards are in place consistent with applicable data protection laws.
11. United Kingdom Privacy Rights
If you are located in the United Kingdom, you have rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
These rights include:
- The right to access personal information
- The right to correct inaccurate information
- The right to request deletion of personal information
- The right to restrict processing
- The right to object to processing
- The right to data portability
- The right to withdraw consent where applicable
You may also submit a complaint to the UK Information Commissioner's Office (ICO) if you believe your information has been processed unlawfully.
Additional information about your rights can be found through the ICO.
12. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
Right to Know
You may request information about:
- Categories of personal information collected
- Sources of personal information
- Business purposes for collection
- Categories of third parties receiving information
- Specific pieces of personal information collected
Right to Delete
You may request deletion of personal information we have collected, subject to certain legal exceptions.
Right to Correct
You may request correction of inaccurate personal information.
Right to Limit Use of Sensitive Personal Information
California residents may request limits on the use and disclosure of sensitive personal information where applicable.
Right to Opt-Out
We do not sell personal information for monetary compensation.
If we engage in activities that constitute "sharing" under California law, California residents may exercise their right to opt out.
Right to Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
This means we will not deny services, charge different prices, or provide different levels of service because you exercised your rights.
Authorized Agents
California residents may authorize another person to submit privacy requests on their behalf, subject to verification requirements.
13. Exercising Your Privacy Rights
To exercise any privacy rights described in this policy, please contact us:
Email: Diana@gypsysoulsisters.shop
Website: GypsySoulSisters.shop
When submitting a request, we may need to verify your identity before processing the request.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or other factors.
Any changes will be posted on this page with an updated "Last Updated" date.
Your continued use of the website after any updates constitutes acceptance of the revised Privacy Policy.
15. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Gypsy Soul Sisters
Website: GypsySoulSisters.shop
Email: Diana@gypsysoulsisters.shop
Business Address: Caldwell, Idaho, USA