Privacy Policy

Last updated: June 8, 2025

This Privacy Policy describes how My Mama Says (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from mymamasays.com (the “Site”) or otherwise communicate with us (collectively, the “Services”). “You” means any customer, visitor, or individual whose information we process under this Policy.

Changes to This Privacy Policy

We may update this Policy from time to time for operational, legal, or regulatory reasons. When we make changes, we will post the updated Policy on the Site, revise the “Last updated” date, and take any steps required by law.

How We Collect and Use Personal Information

We collect personal information over the past 12 months from various sources. The categories and uses depend on how you interact with the Services. In addition to the specific uses below, we may use your information to communicate with you, provide and improve the Services, comply with legal obligations, enforce our terms, and protect our rights and users.

What Personal Information We Collect

Information You Provide Directly

• Contact details such as name, address, phone number, and email.
• Order information such as billing and shipping details, payment confirmation, email, and phone number.
• Account information such as username, password, and security questions.
• Support information you include in messages to us, including through contact forms or customer support channels.

Certain features of the Services may require you to provide specific information. If you choose not to provide it, you may be unable to use those features.

Information Collected Automatically (Usage Data)

We may automatically collect data about your interactions with the Services using cookies, pixels, and similar technologies (“Cookies”). This information can include device and browser details, IP address, network information, and how you use and navigate the Site (for example, pages viewed and links clicked).

Information from Third Parties

• Service providers such as Shopify and other vendors that support the Site and Services.
• Payment processors that handle card or bank details and billing address to process transactions.
• Marketing and analytics partners that collect information via online tracking technologies such as pixels, SDKs, web beacons, and cookies.

We treat personal information received from third parties in accordance with this Policy. For more information on how those third parties handle your data, please refer to their privacy notices. See also Third Party Websites and Links below.

How We Use Your Personal Information

• Providing products and services: To process payments and orders, manage accounts, send transactional notices, arrange shipping, returns, and exchanges. Shopify may process your information in accordance with its Privacy Policy and Consumer Privacy Policy.
• Marketing and advertising: To send promotions, newsletters, or offers and to tailor content and advertising on our Site and on other platforms.
• Security and fraud prevention: To detect, investigate, and act on suspicious, harmful, or unlawful activity. Please keep your account credentials secure and contact us immediately if you suspect any misuse.
• Support and improvement: To provide customer support, respond to your inquiries, and maintain or improve the Services.

Cookies

We use Cookies and similar technologies to operate and improve the Site, remember your preferences, and run analytics. For information about Cookies used in connection with Shopify, please review Shopify Cookies. Most browsers accept Cookies by default, but you can remove or block them in your browser settings. Blocking Cookies may affect the functionality or performance of the Services.

Global Privacy Control (GPC): Our website recognizes GPC signals. If we can associate the device or browser sending the GPC signal with a Shopify account, we will apply the opt out preference to that account. You can learn more at globalprivacycontrol.org. Aside from GPC, we do not currently respond to other “Do Not Track” signals.

How We Disclose Personal Information

We may disclose personal information to third parties when needed to fulfill our contracts, run our business, or comply with the law, as described below:

• Vendors and service providers such as information technology, payment processing, analytics, customer support, cloud hosting, and fulfillment and shipping providers.
• Business and marketing partners that help us with marketing, advertising, or other initiatives. Their use of your information is governed by their own privacy notices.
• At your direction or with your consent such as when you choose to connect with a shipping partner, social login, or social media widget.
• Affiliates within our corporate group that support our operations.
• Transactions and legal purposes: in connection with a merger, acquisition, reorganization, or bankruptcy, or when required by law (for example, in response to subpoenas or court orders), to enforce our terms, or to protect our rights, property, and users.

Categories Disclosed in the Past 12 Months

“Selling” or “Sharing” for Targeted Advertising

In the past 12 months, we may have “sold” or “shared” (as those terms are defined under applicable privacy laws) certain categories of personal information to business and marketing partners for advertising and marketing purposes. This may include identifiers such as name, email address, or phone number, commercial information such as purchase records, and usage data. We do not use or disclose sensitive personal information without your consent or for the purpose of inferring characteristics about you.

Third Party Websites and Links

Our Site may include links or connections to third party platforms and services. Their privacy and security practices apply to their own sites and services. Information you provide on public or third party venues may be visible to others. The inclusion of a link does not mean we endorse the third party, unless we clearly say so.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, a parent or guardian may contact us to request deletion. As of the effective date of this Policy, we do not have actual knowledge that we “sell” or “share” the personal information of individuals under 16 years of age.

Security and Retention

We use reasonable technical and organizational measures to protect personal information, but no method of transmission or storage is completely secure. Information sent to us may not be secure while in transit. Please avoid sending sensitive information through insecure channels such as regular email.

We retain personal information for as long as necessary to provide the Services, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements, or as otherwise permitted by law.

Your Rights

Depending on where you live, you may have some or all of the following rights, subject to certain limits and exceptions under applicable law:

• Access or know how we use and share your personal information.
• Delete personal information we maintain about you.
• Correct inaccurate personal information.
• Data portability for certain personal information.
• Restrict processing in specific situations.
• Withdraw consent where we rely on your consent for processing.
• Appeal a decision if we decline to act on your request.
• Manage communications: unsubscribe from marketing emails at any time. We may still send non marketing transactional or service emails.

You can exercise these rights where tools are provided on our Site or by contacting us using the details in the Contact section below. We will not discriminate against you for exercising your rights. To help protect your privacy, we may need to verify your identity, for example by using your email address or account information, before responding.

You may designate an authorized agent to submit certain requests on your behalf, where permitted by law. We may require proof of the agent’s authorization and may ask you to verify your identity directly as well.

Complaints

If you have concerns about how we process your personal information, please contact us first using the details below and we will try to address them. Depending on your location, you may also have the right to appeal our response or lodge a complaint with your local data protection authority.

International Users

Your personal information may be processed outside the country where you live by our staff, service providers, and partners. For transfers from Europe or the United Kingdom, we rely on recognized transfer mechanisms such as standard contractual clauses, where required, unless the destination country has been deemed to provide adequate protection.

Contact

If you have questions or requests regarding this Policy or our privacy practices, you can contact us at:

Email: nadine@mymamasays.com
Mailing: 4500 Park Granada, Ste 202, Calabasas, CA 91302, US