Last updated: [ADD: date]
This Privacy Policy applies to the ecommerce sites and apps operated by [ADD: Mr. Mushroom legal entity name] and its corporate affiliates, and to any other site or service operated by us that links to it (the "Services"). This Privacy Policy uses the terms "Mr. Mushroom," "our," "us," and "we" to refer to [ADD: Mr. Mushroom legal entity name], and "you" or "user(s)" to refer to individuals described by the information we collect and use, such as customers and site visitors.
Please read this document carefully to learn how we collect, use, share, and protect information, including information that may describe you personally.
By using or accessing the Services, you acknowledge that we will collect, use, and share your information as described in this Privacy Policy. You have choices about whether to provide us with information and how we use it. You may choose not to provide certain information, but that choice may prevent you from using the Services or limit your use of certain features — for example, if you don't provide a payment method, you may not be able to complete a purchase. See Section 7 for more on your choices.
We're always working to improve our Services, so we may need to update this Privacy Policy from time to time to reflect changes in the law, our Services, or advances in technology. We'll let you know about material changes by posting a notice on the Services or sending an email. Our use of the information we collect is subject to the Privacy Policy in effect at the time that information is used.
1. Information We Collect & Use
Some information is actively provided by you, such as when you fill out a form. Some is collected automatically, typically from your device. And some may come from other sources.
1.1 Information You Provide
When you use the Services — such as creating an account, placing an order, leaving a review, or contacting customer support — you may provide information like:
- Name
- Email address
- Payment method or payment account
- Shipping or billing address
- Phone number
- Password or social account login credentials
1.2 Information We Collect Automatically
When you use our Services — including visiting our site or using our app — we automatically collect information about how you use the Services and the devices you use to access them. Examples include:
- IP address
- General location information from your device, or precise GPS location if you allow it
- Device identifiers and attributes, such as operating system and browser type
- Usage data, such as pages viewed, time spent on pages, referring/exit pages, click activity, and error logs
1.3 Analytics, Advertising & Cookies
We and our service providers may use analytics tools, such as Google Analytics, to understand how visitors interact with our Services. We may also use cookies and similar technologies (such as web beacons and tracking pixels) to store or collect information about your activity on our site and, in some cases, other sites. We don't have access to cookies placed by advertisers, and this Privacy Policy doesn't govern their use. See Section 7 for opt-out options.
1.4 Third-Party Links and Plug-Ins
Our Services may link to third-party websites or apps with their own privacy practices. We aren't responsible for how those third parties handle your information — please review their policies directly.
1.5 Other Sources
We may occasionally receive demographic or statistical information about you from third parties, such as marketing partners, and use it to supplement the information we collect directly in order to improve our Services and provide a more relevant experience.
2. How We Use Information
We generally collect, use, and store ("process") your information to provide our Services, fix and improve them, develop new features, and market our products. Specific examples include:
- Setting up and managing your account
- Collecting or making a payment
- Processing and fulfilling your orders
- Communicating with you — by email, SMS, or push notification — about your order or our products
- Marketing our Services, including through email or other channels
- Testing and developing new features
- Analyzing use of our Services and personalizing content
- Providing customer support and resolving issues
- Preventing, detecting, and responding to fraud or misuse of the Services
- Complying with applicable laws and regulations
2.1 Lawful Bases (EEA – GDPR)
For users in the European Economic Area, we typically process personal data where: we need to perform a contract with you (such as processing a payment); it's in our legitimate interests and doesn't override your data protection rights (such as securing the Services or preventing fraud); we need to comply with a legal obligation; or we have your consent.
2.2 De-Identified Data
We may aggregate or de-identify data so it can no longer be tied to a specific individual, and use that data to support research and marketing efforts. This Privacy Policy doesn't apply to our use of de-identified information.
3. Where We Process Data
We operate out of the United States, and information we collect may be processed in the U.S. or elsewhere. Where we share personal information with affiliates or third parties in other countries, we apply appropriate safeguards for that transfer, consistent with applicable law.
4. Retention of Information
We keep your information for as long as needed to fulfill the purposes described in this Privacy Policy or to meet legal requirements, whichever is longer.
5. Information Sharing
5.1 Service Providers
We work with other companies to perform services on our behalf, such as payment processing, order fulfillment, or cloud storage, and we share information with them as needed to complete that work.
5.2 Affiliates
We may share information with companies under common ownership with Mr. Mushroom. Those affiliates use your information as described in this Privacy Policy.
5.3 Order Fulfillment
When you complete a purchase, we share the information needed to fulfill it — such as your shipping address and phone number — with our fulfillment and shipping partners.
5.4 Business Transfers
If we're involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
5.5 Legal Requirements
We may access, preserve, and disclose information if we believe in good faith it's necessary to comply with the law, enforce our policies, or protect the rights, property, or safety of Mr. Mushroom, our customers, or others.
5.6 With Your Consent
We may share your information in other ways if you've asked us to or given consent.
6. Security
Your account is protected by a password, and we recommend choosing a strong one and keeping it confidential. We use reasonable organizational and technical measures to protect your information, but no method of transmission or storage is 100% secure, and we can't guarantee absolute security.
7. Your Choices
If you have questions about information we hold about you, contact us at [ADD: contact email].
7.1 Marketing Communications
You can unsubscribe from marketing emails using the link at the bottom of any email, opt out of SMS alerts by replying STOP, or adjust push notification settings on your device.
7.2 Location Information
You can turn off location sharing at any time through your device or browser settings.
7.3 Cookies & Analytics
You can adjust your browser settings to limit cookies, or opt out of Google Analytics using their browser add-on.
8. Your Rights
8.1 EEA (European Union) Residents
If our processing of your personal data is covered by GDPR, you generally have the right to access, correct, restrict, or delete your data; request data portability; object to certain processing; withdraw consent; and lodge a complaint with your local data protection authority.
8.2 California Residents
California residents may have additional rights, including the right to request the categories of personal information we've collected, request access to or deletion of that information, and not be discriminated against for exercising those rights. To make a request, contact us at [ADD: privacy email]. We may need to verify your identity before fulfilling your request.
9. Privacy Complaints
If you have questions or concerns about our data practices or this Privacy Policy, please contact us at [ADD: privacy email].
10. Children's Privacy
Our Services are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn we've collected information from a child under 13, we will delete it. If you believe a child has provided us personal information, please contact us at [ADD: privacy email].
11. Do Not Track
Our Services do not currently respond to "Do Not Track" browser signals.
12. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us at [ADD: privacy email]. Questions about a specific order should go through our standard support channels at [ADD: contact email]. You can also write to us at [ADD: mailing address].