Privacy Policy

When you browse the site

• Technical information that any web server receives: your IP address, browser and device type, the page you asked for, and the time. Our hosting provider, Cloudflare, processes it to deliver the site and protect it from abuse.
• Usage information from our analytics, Cloudflare Web Analytics: the pages you visit, the site that sent you here, your country (worked out from your IP address), your browser and device type, and how quickly pages load. It uses no cookies and can’t tell whether you’ve visited before.
• We don’t load advertising or social-media tracking pixels, and our fonts are served from our own site rather than a third party.

When you join our email list

The sign-up form asks for your email address and nothing else. We don’t ask for your name, your age, or anything about your hands or health.

• Your email address, and a record that you agreed to hear from us: when you signed up and the exact wording beside the form. We keep the address in Shopify, marked as a waitlist sign-up. If you’ve already ordered from us, we add the mark and your permission to your existing customer record.
• Your IP address, briefly. Cloudflare uses it to limit repeated sign-up attempts. We don’t store it with your sign-up.
• Basic engagement information from our email tool, Shopify Email, such as whether an email was delivered or opened and whether a link in it was clicked.

When you buy a kit

Checkout happens on Shopify’s hosted checkout, at shop.mitziring.com. There we collect:

• your name, email address, shipping and billing addresses, and phone number if you give one
• your order details: product, quantity, price, tax, shipping and order history
• payment information. Card details go straight to the payment processor. We never see or store your full card number.

Before checkout, you tick a box acknowledging that the kit is a general wellness product. When you continue, we record the exact wording you saw, the time, and how many kits were in your cart, and give the record a reference number that’s added to your order. The record itself holds no name, email address or IP address; the reference number on your order is what connects the two.

Shopify also collects information on its own pages, such as the device and IP address used to place an order, to run checkout and prevent fraud. See Shopify’s privacy policy.

When you email us

Whatever you choose to send, such as your name, email address, order number and your question.

Please don’t send us photos of your hand, medical records or other health information. We aren’t a medical provider. We can’t give medical advice or review fit, and we don’t need that information to help with an order.

When you give us a testimonial

We publish your name, words or photo only with your written permission, and only in the way you agreed to. You can ask us to take a testimonial down at any time.

• Fill and ship your order: take payment, ship, send order and shipping emails, and handle returns and replacements.
• Customer support: answer your emails.
• Keep records of what you agreed to: the checkout acknowledgment, and your permission to email you.
• Email you, if you signed up: launch news, restocks and occasional updates. Every email has an unsubscribe link.
• Improve the site: see which pages people read, where visitors come from, and where they leave on the way to checkout. We look at this in aggregate, not person by person.
• Protect the site and shop: prevent fraud, abuse and security incidents.
• Meet legal obligations: tax, accounting, and responding to lawful requests.

We don’t use your information to make automated decisions that have legal or similarly significant effects on you.

We share personal information only with service providers that help us run the business. They may use it only to provide their service to us.

Shopify

Runs our shop, checkout, order records and marketing email. Receives order, customer and email-list data.

Payment processors

Shopify Payments, which processes cards with its partner Stripe, or the payment option you choose at checkout. Receive your payment details.

Shipping carriers, such as USPS or UPS

Deliver your order. Receive your name, shipping address, and phone number if you gave one.

Cloudflare

Hosts the site, runs the sign-up form and the acknowledgment record, measures how the site is used, and protects against abuse. Receives technical and usage information, your email address when you sign up, and acknowledgment records.

Google (Google Workspace)

Hosts our email inbox. Receives email you send us and our replies.

We may also disclose information:

• if the law requires it, or to respond to valid legal process
• to protect the rights, safety or property of our customers, the public or us
• to a buyer or successor if the business is sold or reorganized. This policy would continue to apply to your information.

We do not sell personal information, and we do not “share” it for cross-context behavioral advertising, as California law defines those terms. We haven’t done either in the past 12 months.

• mitziring.com: no cookies. Our analytics works without cookies or any other identifier, so it can’t follow you from one visit to the next or connect what you read to your name, email address or orders.
• shop.mitziring.com: Shopify uses cookies to run the cart and checkout and to prevent fraud. We haven’t turned on advertising cookies or pixels there.
• Global Privacy Control: if your browser sends a Global Privacy Control signal, our site doesn’t load analytics for that browser.

Orders and payment records

7 years after the order, for tax and accounting.

Checkout acknowledgment records

7 years, so they last as long as the orders they belong to.

Email list

Until you unsubscribe. After that we keep only your address and the dates you signed up and left, so we never email you again and can show when you agreed.

Support email

Up to 3 years after the conversation ends.

Analytics data

Cloudflare keeps full detail for 7 days, then a small sample; we can see up to six months of it. None of it identifies you.

Server and security logs

As long as Cloudflare's standard retention.

Wherever you live in the U.S., you can ask us to:

• tell you what personal information we hold about you, and give you a copy
• correct it
• delete it, except what we must keep for legal, tax or fraud-prevention reasons
• stop sending you marketing email. The unsubscribe link in every email works straight away.

Email hello@mitziring.com with your request. We’ll confirm it’s you by matching the request to the email address on your order or sign-up, and we’ll respond within 45 days. Someone you authorize can make a request for you; we may ask for proof that you authorized them. We won’t treat you differently for exercising these rights.

If we turn down a request, reply to our answer to appeal, and we’ll respond to the appeal within 45 days.

Some state laws, including California’s, Colorado’s, Connecticut’s and Virginia’s, give residents specific rights. We extend the rights above to everyone rather than check which law applies.

Many climbers are teenagers, and the kit is for them too. If you’re under 18, a parent or guardian should place the order and read the acknowledgment at checkout. A parent or guardian can contact us at any time to see, correct or delete their teen’s information.

We don’t knowingly collect personal information from children under 13. Our site isn’t directed to them, and they shouldn’t join our email list or email us. If you think a child under 13 has given us information, email us and we’ll delete it.

We don’t publish a testimonial, name or photo of anyone under 18 without written permission from a parent or guardian.

The Mitzi Ring is designed to support general wellness, and we don’t ask about your health. Washington and Nevada define “consumer health data” broadly enough that it can include information about a wellness purchase, so to be careful we apply their rules to information about your order. Our Washington and Nevada Consumer Health Data Privacy Policy explains how. In short: we use it only to provide what you asked for, and we never sell it or use it for advertising or analytics.

We rely on established providers (Shopify, Cloudflare, Google and our payment processors) that encrypt data in transit and protect it with industry-standard safeguards. We limit access to personal information to the people who need it to run the business. No system is perfectly secure. If a breach affects your information, we’ll notify you as the law requires.

When we update this policy, we’ll change the date at the top. If a change materially affects how we use information we already hold, we’ll tell you by email or with a notice on the site before it takes effect.

Mitzi Ring LLChello@mitziring.com