Privacy Policy

Sisters by the Moon ("we", "us", "our") runs this website and online store (the "Services"). This Privacy Policy explains what personal information we collect when you visit the site, place an order or contact us, how we use it, and which service providers help us run the store. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to your personal information.

Information We Collect — When you place an order: your name, email address, shipping address, the billing details needed for your payment method, the items you order and the order total. You enter these on Stripe’s secure checkout page. Your card or other payment details go directly to Stripe; we never see or store your full card number. When you contact us: whatever you include in your email, call or message. When you browse: your shopping cart is saved in your own browser (local storage) so it’s still there when you come back; it isn’t sent to us until you check out. Like any website, our hosting provider automatically receives technical information such as your IP address, browser type and the pages you request. When Google Analytics is turned on, it also collects information about how you use the site (see Cookies and Analytics below). If you ordered from us before this website launched, we also keep the order and customer records from our previous online store, which can include your name, contact details, addresses and order history.

How We Use Your Information — We use your personal information to process payments; to fulfill and ship your orders; to send you emails about your order, such as an order confirmation and a shipping update; to answer your questions; to keep order records for our business, accounting and tax purposes; to understand how visitors use the site so we can improve it (Google Analytics); to protect the store against fraud and abuse; and to comply with the law. We do not use your personal information for targeted advertising, and we do not sell it.

Service Providers We Use — We share personal information only with the companies that help us run the store, and only what they need to do their job: Stripe (payments) processes your payment and collects your payment, billing and shipping details on its checkout page; Stripe handles that information under its own privacy policy. Vercel (hosting) hosts this website and receives the technical information your browser sends when you visit. Sanity (catalog and order records) stores our product catalog and our order and customer records; product images are delivered from Sanity’s image service, so your browser requests them directly from Sanity. An email delivery provider (SMTP) sends our order confirmation and shipping emails, so it receives your email address and order details. Google Analytics (site analytics), when it’s turned on, receives information about your visit, described under Cookies and Analytics, and handles it under Google’s own privacy policy. Shippo (shipping labels) receives your name, shipping address, email address and phone number so we can buy your shipping label and give the carrier your tracking details; Shippo handles that information under its own privacy policy. Shipping carriers receive your name and shipping address so they can deliver your order. We may also disclose personal information when required by law or valid legal process, to enforce our Terms of Service, to protect our rights, our customers or others, or as part of a sale or transfer of our business.

Cookies and Analytics — We use Google Analytics to understand how visitors use the site. It only loads when we have turned it on for the site. When it’s on, it loads a script from Google that sets cookies (such as _ga and _ga_ followed by an ID) and collects information such as the pages you view, how you arrived at the site, your browser and device type, and your approximate location, which Google works out from your IP address. Google Analytics doesn’t log or store IP addresses. We don’t use any other analytics tools, advertising cookies or tracking pixels. You can block or delete these cookies in your browser settings, or use Google’s opt-out browser add-on (tools.google.com/dlpage/gaoptout). Your cart is kept in your browser’s local storage, and you can clear it at any time. Stripe’s checkout page is run by Stripe and may use its own cookies to process payments securely and prevent fraud.

Links to Other Sites — The Services link to sites we don’t control, such as our Facebook page. Those sites have their own privacy policies, and we are not responsible for their privacy or security practices.

Children’s Data — The Services are not intended for children, and we do not knowingly collect personal information from children. If you are the parent or guardian of a child who has given us personal information, you may contact us using the details below to request that it be deleted.

Security and Retention — No security measures are perfect, and we cannot guarantee "perfect security." Please don’t send sensitive information, such as card numbers, by email. We keep personal information for as long as we need it to fulfill orders, keep business, accounting and tax records, meet legal obligations and resolve disputes.

Your Rights and Choices — Depending on where you live, you may have the right to ask us for access to the personal information we hold about you, to correct or delete it, or to receive a copy of it. These rights are not absolute, and we may decline a request as permitted by law. To make a request, contact us using the details below.

Where Your Information Is Processed — We are based in the United States. Our service providers may process and store your information in the United States and in other countries.

Changes to This Privacy Policy — We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact — Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call +1 812-391-2427 or email us at sistersbythemoon111@gmail.com or contact us at Sisters by the Moon, 1014 E 2030 rd, Soper OK 74759, United States. For the purpose of applicable data protection laws, we are the data controller of your personal information.