Privacy Policy
Last updated: May 26, 2026
This Privacy Policy describes how spanish-moss (“we,” “us,” or “our”) collects, uses, and shares information about you when you visit our website, place an order, contact us, or otherwise interact with our services (collectively, the “Services”). By using the Services, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect information in the following ways:
- Information you provide directly. When you create an account, place an order, request a quote, or contact customer support, we collect details such as your name, email address, shipping and billing address, telephone number, and order contents.
- Payment information. Card details are collected by our PCI-compliant payment processor and are not stored on our servers. We receive a tokenized reference, the last four digits of the card, and the authorization result.
- Information collected automatically. We collect device, browser, and usage information (such as IP address, pages visited, referring URL, and timestamps) using cookies and similar technologies to operate and improve the Services.
- Information from third parties. We may receive information from shipping carriers, fraud-prevention providers, marketplaces, and authentication providers in connection with order fulfillment, account access, or risk assessment.
2. How We Use Information
We use the information we collect to:
- process, fulfill, ship, and support orders;
- create and authenticate accounts;
- provide customer service and respond to your inquiries;
- send transactional messages (order confirmations, shipping updates, receipts);
- send marketing communications where permitted by law and your preferences;
- detect, prevent, and respond to fraud, abuse, or security incidents;
- operate, analyze, and improve the Services; and
- comply with legal obligations and enforce our terms.
3. How We Share Information
We do not sell your personal information. We share information only with parties that help us run our business or as required by law, including:
- Service providers such as payment processors, shipping carriers, hosting and infrastructure providers, email delivery services, and analytics providers, each under contractual obligations limiting their use of your data.
- Marketplaces and fulfillment partners when you place an order through a connected channel or have it drop-shipped by a vendor.
- Legal and safety recipients when we believe in good faith that disclosure is required to comply with applicable law, legal process, or a lawful request; to protect rights, property, or safety; or in connection with a merger, acquisition, or sale of assets.
4. Cookies and Tracking
We use cookies and similar technologies to keep you signed in, remember your cart, measure site performance, and understand how the Services are used. You can control cookies through your browser settings; disabling some cookies may break features such as the cart or checkout.
5. Data Retention
We retain personal information for as long as necessary to provide the Services, comply with our legal obligations (including tax and accounting requirements), resolve disputes, and enforce our agreements. Order and tax records are typically retained for at least seven years.
6. Security
We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and audit logging. No system is perfectly secure, and we cannot guarantee the security of information transmitted over the internet.
7. Your Choices and Rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to opt out of certain processing, or to lodge a complaint with a data protection authority. You can update your account information, manage email preferences, or contact us using the details below to exercise these rights. We will respond consistent with applicable law.
8. Children's Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.
9. International Users
The Services are operated from the United States. If you access them from outside the United States, your information may be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your jurisdiction.
10. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date above and, where required, by additional notice. Your continued use of the Services after an update constitutes acceptance of the revised policy.
11. Contact Us
Questions about this Privacy Policy or our data practices can be sent to our privacy contact through the support address listed on the Services. We will route your request to the appropriate team and respond within a reasonable time.