The short version
- We collect what we need to ship your order and answer you. Nothing more.
- Card details go straight to Stripe. We never see your card number.
- We never sell your data. We use the Meta Pixel to measure our Facebook and Instagram ads, and you can turn it off in your ad choices.
- We use Google Analytics to count visits and see which pages people use.
- Ask us any time to see, correct or delete your data.
What we collect
| When | What we collect |
|---|---|
| You place an order | Name, email address, shipping address, the items you bought and your order number. |
| You pay | Your card details go directly to our payment processor, Stripe. We receive only the payment status and the last four digits of the card. |
| You create an account | Name, email address and the grow logs you choose to save in the Grow Dashboard. Passwords are stored hashed, never in plain text. |
| You contact us | Your name, email, order number if given, and your message. |
| You join our email list | Your email address and, if you give it, your first name. |
| You browse the site | Standard server logs (IP address, browser type, pages requested), kept for security. Your cart is saved in your own browser's storage. |
| You browse, add to your bag or buy | Through the Meta Pixel: the pages you view, the products you look at or add to your bag, when you start checkout, and completed purchases (order value, currency and product codes, never your card details), together with your IP address, browser and device details and Meta cookie identifiers. |
| You browse the site | Through Google Analytics: the pages you view, how you reached the site (for example a search engine, a link or an ad), how long you stay, your browser and device type, your approximate location (country and city, worked out from your IP address) and Google Analytics cookie identifiers. |
How we use it
- To process, ship and support your order, including tracking emails.
- To answer your messages.
- To prevent fraud and keep the site secure.
- To send marketing emails, only if you joined our list. Every marketing email has an unsubscribe link.
- To measure how our Facebook and Instagram ads perform, and to show our ads to people who have visited the site and to people with similar interests.
- To understand how visitors use the site, which pages and products they look at, and where they come from, so we can improve it.
Cookies and tracking
We use the Meta Pixel, an advertising tool from Meta, on every page. It sets a first-party cookie (_fbp) and reads Meta's own cookies so we can count visits, bag adds and purchases that come from our ads, and build advertising audiences on Facebook and Instagram. Our US and UK shops report to separate Meta datasets.
We also use Google Analytics, a measurement tool from Google, on every page. It sets first-party cookies (_ga and _ga_RPD097LNGV) so it can tell new visits from repeat ones and report which pages are used. Your ad choices below turn off the Meta Pixel only. To stop Google Analytics on every website, install Google's Analytics opt-out browser add-on. We use no other ad trackers or analytics tools.
The site also uses your browser's local storage for your cart, your sign-in, your region choice, your ad choice and remembering that you closed a pop-up. Fonts are loaded from Google Fonts, which receives your IP address when it serves them.
Your ad choices
Ad tracking is on in this browser.
Your choice is saved in this browser, so repeat it on each browser or device you use. If your browser sends a Global Privacy Control signal, we treat it as an opt-out and the Meta Pixel does not load. You can also manage how Meta uses your data in your Meta ad preferences.
How long we keep it
We keep order records for as long as we need them for accounting and tax purposes, usually up to 7 years. Account data stays until you ask us to delete your account. Email list data stays until you unsubscribe.
Your rights
You can ask us to tell you what personal information we hold about you, correct it, delete it, or send you a copy. Email support@mushrealmcollective.com from the address you used with us. We will verify the request and respond within 30 days, and we will never treat you differently for asking.
California residents have these rights under the CCPA, as amended by the CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information. We share browsing and purchase events with Meta for advertising, and you can opt out of that sharing with your ad choices above or by turning on Global Privacy Control in your browser. UK residents have the equivalent rights under the UK GDPR and the Data Protection Act 2018, including the right to complain to the Information Commissioner's Office.
Security
The site runs over HTTPS, card payments are handled by Stripe, and access to order data is limited to the people who need it to fulfil and support orders.
Children
Our store is for adults aged 18 and over. We do not knowingly collect information from children.
Changes to this policy
If we change this policy we will update the date at the top of this page. Significant changes will be highlighted on the site.
Questions about this policy? Email support@mushrealmcollective.com or use our contact form. A real person replies within 1 business day.
Contact us