Privacy Policy

1. Information We Collect

We collect information to provide you with exceptional service, process orders, and improve your experience. The types of information we collect include:

1.1 Information You Provide to Us

• Account Information: Name, email address, phone number, billing and shipping addresses, and password when you create an account
• Order Information: Purchase details, payment information (processed securely through third-party payment processors), shipping preferences, and order history
• Communication: Information you provide when contacting customer service, participating in surveys, or engaging with our team
• Custom Design Details: Preferences, inspiration images, specifications, and communications related to bespoke jewelry orders
• Appointment Information: Details provided when booking consultations or showroom visits

1.2 Information Collected Automatically

When you visit our website, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages viewed, time spent on pages, links clicked, referring URLs, search queries
• Location Data: Approximate geographic location based on IP address
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies (see Section 4 for details)

1.3 Information from Third Parties

We may receive information about you from:

• Payment Processors: Transaction details from Affirm, Klarna, PayPal, or other payment partners
• Social Media: Profile information if you connect through social media platforms
• Marketing Partners: Data from advertising platforms to measure campaign effectiveness
• Fraud Prevention Services: Information to verify identity and prevent fraudulent transactions

2. How We Use Your Information

We use your information for the following purposes:

2.1 Order Fulfillment and Customer Service

• Process and fulfill your orders
• Communicate order status, shipping updates, and delivery confirmations
• Handle returns, exchanges, and warranty claims
• Respond to customer service inquiries
• Provide appointment scheduling and consultation services

2.2 Personalization and Improvement

• Personalize your shopping experience and product recommendations
• Improve our website, products, and services
• Analyze usage patterns and trends
• Conduct research and development

2.3 Marketing and Communications

• Send promotional emails about new collections, sales, and events (with your consent)
• Provide educational content about lab-grown diamonds and jewelry care
• Share your story or testimonial (with your explicit permission)
• Retarget advertising to users who have visited our site

2.4 Legal and Security

• Prevent fraud and ensure transaction security
• Comply with legal obligations and respond to legal requests
• Enforce our Terms of Service and other policies
• Protect our rights, property, and safety, and that of our customers

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Shipping Carriers: FedEx, UPS, DHL for order delivery
• Payment Processors: Stripe, PayPal, Affirm, Klarna for secure payment processing
• Email Service Providers: For sending marketing and transactional emails
• Analytics Providers: Google Analytics and similar services for website analysis
• Marketing Platforms: Facebook, Instagram, Google Ads for advertising
• Customer Service Tools: Zendesk, Intercom, or similar platforms
• Cloud Storage: AWS, Google Cloud, or similar services for data hosting

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

3.2 Legal Compliance

We may disclose your information when required by law or to:

• Comply with legal processes (subpoenas, court orders, government requests)
• Enforce our Terms of Service or other agreements
• Protect against fraud or illegal activity
• Protect the rights, property, or safety of Mystikó, our customers, or others

3.3 Business Transfers

If Mystikó is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and your options.

3.4 With Your Consent

We may share your information with third parties when you explicitly consent, such as:

• Sharing your testimonial or photos on our website or social media
• Participating in partner promotions or collaborations
• Opting into third-party services or integrations

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and analyze site usage.

4.1 What Are Cookies?

Cookies are small text files stored on your device that help websites remember your preferences and track your activity.

4.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality (shopping cart, checkout, account login)
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Marketing Cookies: Track your activity across websites for targeted advertising (Facebook Pixel, Google Ads)
• Preference Cookies: Remember your settings and preferences

4.3 Your Cookie Choices

You can control cookies through your browser settings:

• Block All Cookies: This may prevent certain website features from working
• Delete Cookies: Remove existing cookies from your device
• Third-Party Cookies: Opt out of interest-based advertising through NAI or DAA

Note: Disabling cookies may affect your shopping experience (e.g., items won't stay in your cart).

5. Data Security

We take your security seriously and implement industry-standard measures to protect your information:

• Encryption: SSL/TLS encryption for data transmission (look for "https" in our URL)
• Secure Payment Processing: PCI-DSS compliant payment processors
• Access Controls: Restricted access to personal information within our team
• Regular Security Audits: Ongoing monitoring and testing for vulnerabilities
• Secure Storage: Encrypted databases and secure cloud storage

Important: No system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. Please use strong passwords and protect your account credentials.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

6.1 Access and Portability

• Request a copy of the personal information we hold about you
• Receive your data in a structured, machine-readable format

6.2 Correction and Updates

• Update or correct inaccurate information in your account settings
• Contact us to update information we hold

6.3 Deletion

• Request deletion of your personal information (subject to legal obligations)
• Delete your account at any time

6.4 Marketing Opt-Out

• Unsubscribe from marketing emails via the link in any promotional email
• Adjust email preferences in your account settings
• Contact us to opt out of all marketing communications

6.5 Do Not Sell My Information

We do not sell your personal information to third parties.

6.6 California Residents (CCPA Rights)

California residents have additional rights under the California Consumer Privacy Act (CCPA). See Section 9 for details.

6.7 EU/UK Residents (GDPR Rights)

EU and UK residents have rights under GDPR, including the right to object to processing and lodge complaints with supervisory authorities.

To Exercise Your Rights: Email us at customerservice@mystiko.com with your request. We'll respond within 30 days.

7. Data Retention

We retain your information for as long as necessary to:

• Fulfill the purposes described in this Privacy Policy
• Comply with legal, accounting, or regulatory requirements
• Resolve disputes and enforce agreements

Typical Retention Periods:

• Account Information: As long as your account is active, plus 7 years after closure for legal compliance
• Order Information: 7-10 years for tax, accounting, and warranty purposes
• Marketing Data: Until you unsubscribe or request deletion
• Analytics Data: Aggregated data may be retained indefinitely in anonymized form

8. International Data Transfers

Mystikó is based in 200 Continental Drive, Suite 401 Newark, DE 19713. If you're located outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers operate.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Privacy Shield certification (where applicable)
• Adequacy decisions by relevant authorities

By using our services, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

9. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

9.1 Right to Know

You can request:

• Categories of personal information we collect
• Specific pieces of personal information we hold
• Sources from which we collect information
• Business purposes for collection
• Categories of third parties with whom we share information

9.2 Right to Delete

You can request deletion of your personal information (subject to exceptions for legal compliance, fraud prevention, etc.)

9.3 Right to Opt-Out

We do not sell personal information. If our practices change, we will update this policy and provide an opt-out mechanism.

9.4 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

9.5 Authorized Agent

You may designate an authorized agent to make requests on your behalf. We may require proof of authorization.

To Exercise CCPA Rights: Email customerservice@mystiko.com. We'll verify your identity and respond within 45 days.

10. Children's Privacy

Our website and services are not intended for children under 16. We do not knowingly collect personal information from children. If we learn we've collected information from a child under 16, we will delete it immediately.

If you believe we've collected information from a child, please contact us at customerservice@mystiko.com.

11. Third-Party Links

Our website may contain links to third-party websites (e.g., social media, payment processors, review platforms). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. When we make material changes:

• We'll update the "Last Updated" date at the top of this page
• We'll notify you via email (for significant changes)
• Continued use of our services after changes constitutes acceptance

We encourage you to review this Privacy Policy regularly.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Mystikó
Email: customerservice@mystiko.com
Phone: 680-MYSTIKO (680-697-8456)
Business hours: Mon to Fri: 9:30AM to 5:30PM EST

We're committed to transparency and will respond to all inquiries within 30 days.

14. Consent

By using our website, creating an account, or making a purchase, you acknowledge that you have read, understood, and agree to this Privacy Policy.

If you do not agree with this Privacy Policy, please do not use our services.

Your privacy matters to us. Thank you for trusting Mystikó.