Privacy Policy

1. Mystic POD

Mystic POD (“Mystic POD”, “we”, or “us”) recognizes the importance of privacy and this Privacy Statement (or “Statement”) is to help you understand and describe how we collect, use, and disclose your data:

• 2. Collection
• 3. How we use your data
• 4. Sharing your Data
• 5. Privacy
• 6. Cookies
• 7. Security of your data
• 8. Children’s data
• 9. Users outside the US
• 10. Changes and contacting us

2. Collection

• a. We collect data about you directly from you and automatically through your use of our Services. We may combine data automatically collected with other data that we have collected about you including from publicly available sources. In order to help you protect yourself and your data, we encourage you to provide only that data that is necessary for using our Services.
• b. Data collected automatically. Like many websites, technologies to receive and store certain types of data when you interact with us through your device. Using these technologies helps us customize your experience with our Services and improve your experience. improve your experience.
• c. Data retention. Mystic POD will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to meet any legal/regulatory or reporting obligations. In cases of a complaint or if we anticipate potential litigation regarding our relationship with you, we may keep your information for an extended period. When determining the appropriate retention period, we consider factors such as the amount, nature, and sensitivity of the information, the potential risks of unauthorized use or disclosure, the purposes of processing the information, the possibility of achieving those purposes by other means, and any relevant legal/regulatory or other obligations.

3. How we use your data

We may use data that we collect about you to:

a. We will use your data to provide our Services to you; we use the payment data you provide to us in order to alert you of, to allow us to present the billing history, and to perform internal financial processes.

b. Improve our products. Analysis about your use of, or interest in our products.

c. We may send you service emails to ensure the service is working properly.

d. Subject to your preference, we may send you emails about new product features or other news about Mystic POD or on topics we think would be relevant to you.

e. We may contact you to inform you about changes in your services, our service offering and other important service-related notices.

f. We may use your data to comply with applicable legal obligations as well as to protect our rights and interests as well as the rights and interests of our users and any other person.

4. Sharing your data

• a. Mystic POD does not sell personal data as the term “sell” is traditionally defined. But “sell” under the CCPA/CPRA is broadly defined. As described further below, some of our disclosures of personal data may qualify as a “sale” or “sharing” of personal data under CCPA/CPRA. For example, disclosing an analytics or device data to a third party to receive their services may be considered a “sale” under the CCPA/CPRA. During the 12 months leading up to the effective date of this Statement, we have “sold” and “shared” (as those terms are defined under CCPA/CPRA) personal data to third parties that assist us, such as marketing providers and analytics providers. We do not sell your data to any third parties or disclose it in exchange for money or other valuable consideration. We do not share your data with others except as indicated within this Statement, or when we inform you at a subsequent time.
• b. We may share your data as follows: i) With third-party service providers, contractors, or government entities; ii) We use third-party service providers services on our behalf or to assist us with providing services to you such as: to process payment card transactions, sending emails hosting, IT services, or customer service; iii) For search engine optimization (“SEO”) purposes and for serving you the most relevant advertising; iv) With service providers and government entities for legal, security, and safety purposes. This includes sharing data to enforce policies or contracts, address security breaches, and assist in the investigation of fraud, security issues, or other concerns. If we believe that disclosure is reasonably necessary to comply with a law, regulation, legal, or governmental request; to enforce applicable Terms of Service or this Statement.
• c. For search engine optimization (“SEO”) purposes and for serving you the most relevant advertising; iv) With service providers and government entities for legal, security, and safety purposes. This in-cludes sharing data to enforce policies or contracts, address security breaches, and assist in the investigation of fraud, security issues, or other concerns. If we believe that disclosure is reasonably necessary to comply with a law, regulation, legal, or governmental request; to enforce applicable Terms of Service or this Statement.

5. Privacy

• a. Your Privacy Rights. The following disclosures are intended to provide additional information about (1) the categories of Personal data we collect (as defined above), (2) the source of the Personal Data, (3) how we use each category of Personal Data, and (4) how we disclose Personal Data. These disclosures do not limit our ability to use or disclose information as described above. Our practices are designed to align with the privacy laws of jurisdictions such as the General Dat Protection (GDPR) in the EU, Switzerland, and UK as well as laws such as the California Consumer Privacy Act ("CCPA"), the California Privacy Rights Act of 2020 ("CPRA"), and any regulations promulgated under either law, in each case, as amended from time to time, and other US states with similar laws, including but not limited to Colorado and Virginia.
• b. Category of Personal Data:
  • i) Name, e-mail or user ID, profile password, gender, phone number, payment details, date of birth, geolocation, age, profession, and gender.
  • ii) Financial institution and/or payment card details (through our third party payment processor).
  • iii) Purchase and transaction history.
  • iv) IP address, login details, browser session and location data, page view and session statistics, device and network details, sources of acquisition, search queries, browsing behavior, and data on how you interact with our website, including through cookies. Additionally, we gather any information you provide when engaging with interactive features like surveys, contests, promotions, activities, or events.
  • v) Sensitive data: Except as otherwise expressly agreed between the parties in writing, you specifically agrees not to use the Services to collect, store, process or transmit any sensitive personal data. You acknowledge that Mystic POD is not a payment card processor and that the Services are not PCI DSS compliant. You shall be solely responsible for any sensitive personal data it submits to the Services, and you acknowledge that Mystic POD is not subject to any additional obligations that may apply to any sensitive personal data submitted to the Services.
  • vi) Any other content that might be generated by you on the Services or your use of the Services.
• c. Sources of Personal Data:directly from you, third-party sites or sources such as our trusted business partners, analytics tools, and social networks.
• d. Use of Personal Data and Legal Bases for Processing.
  • i) To deliver the Services to you, provide you information and communicate with you about your account and usage such as about your payments or transaction history, provide you promotions, enhance and personalize your user experience. Lastly, to improve our Services as well as build new services in the future.
  • ii) Mystic POD processes your personal data only when we have legal bases to do so under applicable laws. Note that we may process your personal information based on more than one lawful basis depending on the specific purpose. If you need further details on the specific legal basis we rely on for processing your personal information, please feel free to contact us.
• e. Disclosure of Personal Data: our affiliates, our services providers such as for hosting the Service, processing payments, and communicating with you.
• f. To the extent provided for by law, you may have the following privacy rights:
  • i) The right to know what Personal Data we have collected and how we have used and disclosed it;
  • ii) The right to request deletion of your Personal Data;
  • iii) The right to be free from discrimination relating to the exercise of your privacy rights.
  • iv) We do not and will not sell or share (as defined by CPRA) your Personal Data.
  • v) Exercising Your Rights: California residents and those in other US states with similar laws as well those in the EU, Switzerland, and UK can exercise the above privacy rights by emailing us at support@mysticpod.com
• g. Verification: in order to protect your Personal Data from unauthorized access or deletion, we may require you to verify your identity before you can submit a privacy request to know or delete Personal Data.
• h. In order to keep your data accurate and complete, you can log in to review and update your Account data. You may also contact us to:
  • i) request the personal data we have collected from you or request the rectification or deletion of such data. We will do our best to honor your requests subject to any legal and contractual obligations.
  • ii) if you do not wish to receive promotional emails from us, you may opt out at any time by using the link in the email itself. Please note that it may take up to ten (10) days to process your request.
• i. Additional disclosures for California residents.The disclosures in this section apply only to California residents and are intended to supplement the Mystic POD Privacy Statement with information required by California law. The table below describes the categories of personal data we collected in the past 12 months, the purposes for which we may collect and disclose this information, the categories of recipients of disclosures made for business purposes in the past 12 months, and the categories of recipients of disclosures made in the past 12 months that may be considered “sales” of personal information or “sharing” of personal information for cross-context behavioral advertising under CCPA/CPRA:

  Category of Data	Purpose(s) for Collecting and Disclosing	Recipients of Disclosures for Business Purposes	Categories of third parties of "Sales" or "Sharing"
  i) Name, e-mail or user ID, profile password, gender, phone number, payment details, date of birth, geolocation, other location data, age, profession, and gender.	Providing and facilitating delivery of the services; communicating with you about the services and providing customer support; improving the services; sending marketing communications; managing event registrations and attendance; maintaining security of the services; displaying personalized advertisements; carrying out other legitimate business purposes; complying with legal obligations	Service providers; advertising partners; Professional advisors; authorities; and others business partners.	Advertising partners (to facilitate online advertising).
  ii) Financial institution and/or payment card details (through our third party payment processor).	Providing and facilitating delivery of the services; Carrying out other legitimate business purposes Complying with legal obligations	Service providers; advertising partners; Professional advisors; authorities; and others business partners.	None
  iii) Transaction history.	Providing and facilitating delivery of the services; Carrying out other legitimate business purposes Complying with legal obligations	Service providers; advertising partners; Professional advisors; authorities; and others business partners.	Advertising partners (to facilitate online advertising)..
  iv) IP address, login details, browser session and location data, page view and session statistics, device and network details, sources of acquisition, search queries, browsing behavior, and data on how you interact with our website, including through cookies. Additionally, we gather any information you provide when engaging with interactive features like surveys, contests, promotions, activities, or events.	Providing and facilitating delivery of the services; communicating with you about the services; providing customer support; improving the services; sending promotional communications; maintaining security of the services; displaying personalized advertisements; carrying out other legitimate business purposes; complying with legal obligations	Service providers; advertising partners; Professional advisors; authorities; and others business partners.	Advertising partners (to facilitate online advertising).
  v) Sensitive data: Except as otherwise expressly agreed between the parties in writing, you specifically agrees not to use the Services to collect, store, process or transmit any sensitive personal data. You acknowledge that Mystic POD is not a payment card processor and that the Services are not PCI DSS compliant. You shall be solely responsible for any sensitive personal data it submits to the Services, and you acknowledge that Mystic POD is not subject to any additional obligations that may apply to any sensitive personal data submitted to the Services.	N/a.	N/a.	N/a.
  vi) Inferential and profiling: preferences, characteristics, behavior in the Services.	Profiling in order to improve your experience.	Service providers; advertising partners; Professional advisors; authorities; and others business partners.	Advertising partners (to facilitate online advertising).
  vii) Any other content that might be generated by you on the Services or your use of the Services.	Providing and facilitating delivery of the services; communicating with you about the services; providing customer support; improving the services; sending promotional communications; maintaining security of the services; displaying personalized advertisements; carrying out other legitimate business purposes; complying with legal obligations	Service providers; advertising partners; Professional advisors; authorities; and others business partners.	Advertising partners (to facilitate online advertising).

6. Cookies

• a. Our Services use cookies and other similar device identification technologies (collectively cookies) to provide our services, to understand how they are used, and for analytics, personalization, customization and marketing purposes. Personal data, such as your email address, may be collected through the cookies.
• b. Cookies may also be set by the Services feature to enable it to function properly. Information collected by these cookies is governed by the privacy notice of the company that created it.
• c. What are cookies? We use the term “cookie” to refer to all technologies which store and access information on the device that you use to access our services, such as your computer, tablet, or mobile phone. For example, we use HTTP cookies (web/browser cookies), which are small data files (typically made up of numbers and letters) that are downloaded when you access our services and allow us to recognize your device.
• d.Cookies enable websites to recognize your device and are often used to help the website function properly and to provide information to the owner(s) of the site. Cookies are necessary to recognize or “remember” anything about visitors.
• e. We use cookies for the following purposes:
  • i. Essential Cookies: These cookies are necessary for the operation of our website. They allow you to navigate the site and use essential features, such as accessing secure areas.
  • ii. Performance Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often. This data helps us improve our website's functionality and user experience.
  • iii. Functional Cookies: These cookies enable the website to remember your preferences, such as your username, language, or region, and provide enhanced, more personalized features.
  • iv. Targeting/Advertising Cookies: These cookies are used to deliver ads relevant to you. They also help measure the effectiveness of advertising campaigns. These cookies may be placed on our site by third-party advertising networks with our permission.
  • v. Analytics Cookies: We use analytics cookies to understand how users engage with our website. These cookies help us improve our services by providing aggregated information about site usage.
• f. We may allow third-party service providers to place cookies on your device for the following purposes:
  • i. Analytics Providers: These providers help us analyze how users interact with our website. They collect aggregated data to provide insights into website usage and performance.
  • ii. Advertising: We partner with advertising networks that use cookies to deliver personalized ads based on your interests and browsing behavior.
  • iii. Social Media: Cookies may be set by social media platforms when you interact with content on our site, such as sharing a page or clicking a social media link. These cookies may be used to enhance your profile on those platforms or contribute to the data they collect.
• g. Further information:
  • i. When you visit our sites or otherwise interact with our Services, we and our service providers acting on our behalf automatically collect certain data using tracking technologies like cookies, and similar technologies. We use this data to understand how visitors to our websites are using them and which pages and features of the websites are most popular. This helps us understand how we can improve our websites and track performance of our advertisements. You may be able to manage or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality and performance of our website.
  • ii. In addition, we use tracking technologies to help improve the navigation experience on our Services.

7. Security of your data

We take reasonable and appropriate steps to protect the data entrusted to us and treat it securely in accordance with this Statement. We implement safeguards designed to protect your data from accidental/unlawful destruction, loss, alteration, and unauthorized dissemination. We will retain your data as needed to fulfill the purposes for which it was collected or as needed to fulfil our business needs or legal requirements.

8. Children’s data

Our Services are directed to serve adults-only. You must be at least eighteen (18) years of age to use the Services, unless the age of majority in your jurisdiction is greater than eighteen (18) years of age, in which case you must be at least the age of majority in your jurisdiction (e.g., twenty-one (21)). If you are under the applicable age of majority, you shall not use and are not permitted to use the Services and you must immediately leave the Services. By Using the Services, you represent and warrant that you have reached at least the age of eighteen (18) and the age of majority in your jurisdiction. We maintain a zero-tolerance policy for any minors on the Services. We do not knowingly collect Personal Data from anyone under the age of 18. If we discover that a person below 18 years of age or younger has provided Personal Data to us, we automatically delete such information. If you are a parent or guardian of a minor under the age of eighteen (18) and believe he or she has disclosed Personal Data to us, please contact us at support@mysticpod.com

9. Users outside the US

If you are an individual located in another jurisdiction outside of the US with laws governing data processing that differ from US laws, please be aware that data we collect will be processed and stored in the US States or in other countries where we or our service providers have operations. By submitting your data to Mystic POD, you understand and acknowledge to have your data transferred to, US or another jurisdiction which may not offer the same level of privacy protection as those in the country where you are located.

10. Changes and contacting us

This Statement is current as of the Effective Date set forth above and if any changes are made, we’ll post them on this page. If you continue to use Mystic POD after those changes are in effect, you agree to the changes. This Statement may change if there is a material change to the way data is processed by Mystic POD. If you have any questions or comments about this Statement, please contact us at support@mysticpod.com.