Privacy Policy

Effective date: July 8, 2026

Groovy Moon respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how Groovy Moon collects, uses, discloses, stores and protects personal information when you visit groovymoon.com, place an order, contact us, subscribe to our communications or otherwise interact with our business.

In this Policy, “Groovy Moon,” “we,” “us” and “our” refer to Groovy Moon. “You” and “your” refer to a website visitor, customer, subscriber or other person who interacts with us.

1. Who Is Responsible for Your Information?

Groovy Moon is responsible for personal information under its control.

Our Privacy Officer oversees our privacy practices and responds to questions, concerns and requests involving personal information.

Contact information for our Privacy Officer appears at the end of this Policy.

2. Personal Information We Collect

The information we collect depends on how you interact with Groovy Moon.

Information You Provide

We may collect information that you provide directly, including:

• Your name
• Email address
• Telephone number
• Billing and shipping addresses
• Order and purchase information
• Account login information, if customer accounts are available
• Product reviews, comments, photographs or testimonials
• Messages, questions and customer-service communications
• Marketing preferences
• Information provided when entering a promotion, survey, workshop or event
• Any other information you voluntarily provide to us

Please do not send us sensitive medical or financial information unless it is reasonably necessary for us to respond to a specific request.

Payment Information

Payments are processed through Shopify and other authorized payment providers.

Groovy Moon generally does not receive or store your complete credit-card number. Payment providers may collect and process payment-card information, billing details and transaction data according to their own privacy policies and security requirements.

Information Collected Automatically

When you visit our website, Shopify and other technologies used by our store may automatically collect information such as:

• Internet Protocol address
• Browser and device type
• Operating system
• Device identifiers
• Pages viewed
• Referring website or link
• Dates and times of visits
• Approximate location derived from an IP address
• Shopping-cart activity
• Interactions with emails, advertisements and website features
• Cookie and similar technology identifiers

This information helps operate the website, understand how it is used, protect against fraud and improve the customer experience.

Information From Other Sources

We may receive information from service providers and other sources, including:

• Shopify
• Payment processors
• Shipping and fulfilment providers
• Email and marketing platforms
• Analytics providers
• Advertising and social-media platforms
• Fraud-prevention and security providers
• Business partners when you have authorized the disclosure

The information received depends on the service, your settings and the permissions you have provided.

3. How We Use Personal Information

We may use personal information to:

• Process and fulfil orders
• Collect and confirm payment
• Arrange shipping and delivery
• Provide order confirmations and updates
• Respond to questions and customer-service requests
• Handle damaged, defective or incorrect orders
• Provide store credit where applicable
• Maintain customer accounts
• Prevent fraud, unauthorized transactions and misuse
• Operate, secure and improve our website
• Understand website traffic and customer preferences
• Personalize content and the shopping experience
• Manage workshops, events, promotions or surveys
• Send marketing communications where permitted
• Measure the performance of marketing campaigns
• Maintain business, tax, accounting and transaction records
• Enforce our Terms of Service and other policies
• Comply with legal and regulatory requirements
• Establish, exercise or defend legal claims
• Complete a business reorganization, sale or transfer where legally permitted

We will not use personal information for a materially different purpose without obtaining consent where consent is required.

4. Consent and Other Permitted Uses

We collect, use and disclose personal information with your consent, except where another basis is permitted or required by law.

Consent may be express or implied, depending on the nature and sensitivity of the information and the reasonable expectations of the individual.

For example, when you provide your name, address and order details, you consent to their use for processing payment, fulfilling the order and arranging delivery.

We will request separate consent for marketing communications where required.

You may withdraw your consent, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may affect our ability to provide certain products or services.

5. Email and Electronic Marketing

When you subscribe to our mailing list or otherwise provide legally valid consent, we may send emails about Groovy Moon products, offers, events, stories and other updates.

Our marketing messages will include an unsubscribe mechanism where required. You may unsubscribe by using the link in an email or by contacting us.

Unsubscribing from marketing does not prevent us from sending transactional or service-related messages, such as order confirmations, shipping notices, responses to inquiries or important information about an existing purchase.

We may retain a limited suppression record to ensure that we continue to respect an unsubscribe request.

6. Cookies and Similar Technologies

Our website uses cookies, pixels, local storage and similar technologies.

These technologies may be used to:

• Keep the website and checkout functioning
• Remember your cart and preferences
• Maintain secure sessions
• Detect fraud and protect the website
• Measure website traffic and performance
• Understand how visitors use the website
• Support advertising, attribution and marketing
• Provide relevant or personalized content where enabled

Some technologies are necessary for the website to operate. Others may be used for analytics or advertising, depending on your region, consent choices and our current store settings.

The cookies and technologies used by the website may change when Shopify, installed applications or our service providers update their services. For that reason, we do not maintain a fixed list of individual cookie names in this Policy.

You can manage cookies through your browser and, where available, through the cookie banner or privacy-preference controls on our website.

Blocking some cookies may affect website functions, including the cart, login or checkout experience.

7. Shopify

Our store is hosted by Shopify, which provides the ecommerce platform used to operate the website and process purchases.

Shopify may collect, process, store and disclose personal information as necessary to provide its platform, checkout, payment, security, analytics, fraud-prevention and other services.

Shopify may process information in Canada, the United States and other countries where it or its service providers operate.

Shopify’s processing of personal information is also governed by its own applicable privacy notices.

Where Shopify offers privacy controls, you may be able to use those tools to manage certain processing carried out by Shopify.

8. Service Providers and Disclosures

We may disclose personal information to companies that help us operate our business, including:

• Shopify and ecommerce platform providers
• Payment processors
• Banks and financial institutions
• Shipping carriers and postal services
• Fulfilment and delivery providers
• Website hosting and technical support providers
• Email and customer-communication platforms
• Analytics and reporting providers
• Advertising and social-media platforms
• Fraud-prevention, cybersecurity and authentication providers
• Accountants, insurers, lawyers and professional advisers
• Government, regulatory or law-enforcement authorities where required

These providers may use information only as permitted by their agreements with us, their own legal obligations and their applicable privacy policies.

We may also disclose personal information:

• With your consent
• To complete a transaction you requested
• To investigate fraud, security incidents or policy violations
• To comply with a subpoena, court order, legal process or applicable law
• To protect the rights, safety or property of Groovy Moon, our customers or others
• In connection with a sale, financing, merger, reorganization or transfer of all or part of the business

We do not disclose personal information merely because someone requests it. Requests from authorities are assessed according to applicable law.

9. International Processing

Groovy Moon is located in Ontario, Canada, but some of our service providers may process or store personal information in the United States or other countries.

As a result, personal information may be subject to the laws of those jurisdictions and may be accessible to courts, law-enforcement agencies or government authorities where legally permitted.

We take reasonable steps to use reputable providers and appropriate contractual or organizational protections, but we cannot require foreign governments or authorities to follow Canadian law.

10. Advertising and Social Media

We may use social-media, analytics and advertising services to promote Groovy Moon and understand the effectiveness of our advertising.

Depending on the technologies enabled on our store and your privacy choices, these providers may receive information such as:

• Your device or browser identifiers
• IP address
• Website activity
• Pages or products viewed
• Shopping-cart or purchase events
• Advertising interactions

Some providers may combine this information with information they already hold under their own privacy policies.

Where required, non-essential advertising technologies will be subject to available consent or opt-out controls.

Groovy Moon does not sell customer lists for money. Certain privacy laws may define some advertising-related disclosures as “sharing” or “selling” even when no money is exchanged. Where applicable, we will provide legally required privacy choices.

11. Links and Third-Party Websites

Our website may contain links to websites, applications or services operated by other organizations.

Once you leave our website, the privacy practices of those third parties apply. Groovy Moon is not responsible for the content, security or privacy practices of external websites.

We encourage you to review the privacy policies of any external service you use.

12. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy or as required by law.

Retention periods may depend on:

• The nature and sensitivity of the information
• The reason it was collected
• Tax, accounting and recordkeeping obligations
• Warranty, chargeback and dispute periods
• Fraud-prevention and security requirements
• Legal limitation periods
• Whether an account or ongoing customer relationship exists

When information is no longer reasonably required, we will delete it, anonymize it or securely dispose of it, subject to technical and legal limitations.

Information may remain temporarily in secure backups until those backups are overwritten or deleted through normal system processes.

13. Security

We use reasonable administrative, technical and physical safeguards appropriate to the nature and sensitivity of the personal information under our control.

These may include:

• Secure ecommerce and payment platforms
• Encrypted data transmission
• Password and account-access controls
• Limited access to personal information
• Fraud-monitoring measures
• Secure devices and service providers
• Staff or contractor confidentiality expectations
• Appropriate record-disposal practices

Payment-card processing providers are responsible for maintaining their own payment-security standards.

No method of internet transmission, electronic storage or security protection is completely secure. We cannot guarantee absolute security.

Please protect your account credentials and contact us promptly if you believe your account or personal information has been compromised.

14. Privacy Breaches

If we become aware of a privacy or security breach, we will investigate and take reasonable steps to contain and address it.

Where required by law, we will notify affected individuals and the appropriate privacy authorities and maintain legally required records.

15. Your Privacy Rights

Depending on where you live and subject to applicable law, you may have the right to:

• Ask whether we hold personal information about you
• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Withdraw consent to certain uses
• Unsubscribe from marketing
• Request deletion of information where legally available
• Ask questions about how information is used or disclosed
• Complain about our privacy practices
• Request information about service providers processing information outside Canada
• Exercise additional privacy choices provided by applicable regional laws

We may need to verify your identity before responding to a request.

Access, correction or deletion rights may be limited where information must be retained for legal, accounting, fraud-prevention, contractual or dispute-resolution purposes, or where disclosure would reveal another person’s personal information.

We will respond within the period required by applicable law.

16. Children’s Privacy

Our website and products are intended for adults and are not directed to young children.

We do not knowingly collect personal information directly from children without the consent of a parent or legal guardian where such consent is required.

If you believe a child has provided personal information without appropriate authorization, please contact us so that we can investigate and take appropriate action.

17. Business Transfers

If Groovy Moon is sold, merged, reorganized, financed or transferred, personal information may be disclosed to advisers, prospective purchasers or new owners as part of that transaction.

Any transfer will be subject to applicable privacy law and appropriate confidentiality measures.

18. Changes to This Policy

We may update this Privacy Policy to reflect changes to our business, technology, service providers, legal obligations or privacy practices.

The revised Policy will be posted on this page with a new effective date.

Where a change is material, we may provide additional notice through the website, email or another appropriate method.

19. Questions, Complaints and Privacy Requests

To ask a question, submit a privacy request or make a complaint, contact our Privacy Officer:

Privacy Officer
Groovy Moon
Email: jill@groovymoon.com
Mailing address:
3445 Colin Street, RR #2
Aylmer, Ontario, Canada N5H 2R2

Please include enough information for us to understand and respond to your request. Do not send copies of identification unless we specifically ask for verification.

We will investigate privacy complaints and respond as reasonably appropriate.

If you are not satisfied with our response, you may also contact the Office of the Privacy Commissioner of Canada or another privacy regulator with jurisdiction over the matter.