Privacy Policy

GYPSY GYM — a brand of GYPSY GEMS LLC

Effective date: [insert date] · Last updated: [insert date]

This Privacy Policy explains how GYPSY GEMS LLC ("GYPSY GYM", "we", "us", or "our") collects, uses, shares, and protects your personal information when you visit, interact with, or make a purchase from gypsygym.com (the "Site"). By using the Site, you agree to the collection and use of information in accordance with this policy.

This Site and all orders are operated by GYPSY GEMS LLC, 2576 Saint Paul Street, Indianapolis, IN 46203, United States. Our store is hosted on Shopify Inc., which provides the online ecommerce platform that allows us to sell our products to you.

1. Information We Collect

Information you provide to us

When you place an order, create an account, contact our support team, or sign up for marketing, you may provide us with:

• Your name, billing address, and shipping address.
• Your email address and phone number.
• Payment information (such as your credit card details), which is processed securely by our payment providers — we do not store full card numbers.
• Order details and the contents of any messages you send us.

Information we collect automatically

When you browse the Site, we automatically collect certain information about your device and activity, including:

• Your IP address, browser type, operating system, and device identifiers.
• Your time zone and, in some cases, approximate location.
• The web pages or products you view, the websites or search terms that referred you, and how you interact with the Site.
• Cookies and similar tracking technologies (see Section 4).

We refer to this automatically-collected information as "Device Information."

2. How We Use Your Information

We use the information we collect to:

• Process, fulfill, and deliver your orders, including arranging shipping and confirming payment.
• Communicate with you about your order, account, or inquiries, and provide customer support.
• Send you marketing communications, if you have opted in, including promotions, new products, and offers.
• Detect, prevent, and investigate fraud, abuse, and security risks.
• Screen orders for potential risk or fraud.
• Improve and optimize the Site, our products, and your shopping experience.
• Comply with our legal obligations and enforce our terms.

3. Legal Bases for Processing (EU/EEA/UK Visitors)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: to perform the contract we have with you (for example, to fulfill your order); for our legitimate interests (such as improving our store and preventing fraud), provided these are not overridden by your rights; to comply with legal obligations; and on the basis of your consent, where applicable (for example, for marketing emails).

4. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Site, remember your preferences, keep your shopping cart, understand how visitors use the Site, and support marketing. Cookies are small data files stored on your device.

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site, including your ability to complete a purchase.

5. How We Share Your Information

We share your personal information with trusted third parties only as needed to operate our business, including:

• Shopify — to power our online store and process transactions.
• Payment processors — to securely handle payments.
• Shipping and fulfillment partners — to deliver your orders.
• Analytics and marketing providers — to help us understand and improve the Site (for example, analytics services and email platforms).
• Professional advisors and service providers — such as accountants or IT support, where necessary.

We may also disclose your personal information to comply with applicable laws and regulations, to respond to a lawful request (such as a subpoena, warrant, or government demand), or to otherwise protect our rights, property, and safety, or that of others.

We do not sell your personal information for money.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including to maintain your order records, comply with our legal, accounting, and reporting obligations, and resolve disputes. When we no longer need your information, we will delete or anonymize it, unless we are legally required to keep it. You may request deletion of your information at any time (see Section 9).

7. Data Security

We take reasonable administrative, technical, and physical measures to protect your personal information against loss, theft, misuse, and unauthorized access. Payments are processed through Shopify's PCI-DSS compliant, encrypted checkout. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Marketing Communications

If you have subscribed to our marketing emails, you can unsubscribe at any time by clicking the "unsubscribe" link in any of our emails, or by contacting us at support@gypsygym.com. You may continue to receive transactional messages relating to your orders even after opting out of marketing.

9. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• The right to access the personal information we hold about you.
• The right to correct inaccurate or incomplete information.
• The right to delete your personal information.
• The right to data portability (to receive your data in a portable format).
• The right to object to or restrict certain processing, including direct marketing.
• The right to withdraw consent where processing is based on consent.

To exercise any of these rights, email us at support@gypsygym.com. We may need to verify your identity before fulfilling your request. We will respond within the time required by applicable law.

10. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, and the purposes for collecting it; to request deletion of your personal information; to correct inaccurate information; and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information for monetary value. You will not be discriminated against for exercising any of these rights. To make a request, contact us at support@gypsygym.com.

11. International Data Transfers

We are based in the United States, and the information we collect is processed in the United States and other countries where our service providers operate. If you are accessing the Site from outside the United States, please be aware that your information may be transferred to, stored in, and processed in a country with different data-protection laws than your own. Where required, we use appropriate safeguards for such transfers.

12. Children's Privacy

Our Site is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us at support@gypsygym.com, and we will take steps to delete that information.

13. Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. Because there is no consistent industry standard for responding to DNT signals, our Site does not currently change its behavior in response to them.

14. Third-Party Links

The Site may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

16. Contact Us

If you have any questions about this Privacy Policy, or would like to exercise your privacy rights, please contact us:

GYPSY GEMS LLC (trading as GYPSY GYM)
2576 Saint Paul Street
Indianapolis, IN 46203
United States

Email: support@gypsygym.com
Website: www.gypsygym.com