Privacy Policy

1.Who We Are

Morning Glow Ritual ("we," "us," "our," or the "Company") is an online retailer of cosmetics, skin care, hair care, and beauty supply products, operating from Thousand Oaks, California, United States. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website (the "Site"), built and hosted on the Wix platform, and when you make a purchase from us.

We are committed to protecting your privacy and handling your personal data transparently and in compliance with applicable data protection laws, including, where applicable, the General Data Protection Regulation ("GDPR") for visitors and customers located in the European Economic Area ("EEA"), United Kingdom, and Switzerland, as well as applicable U.S. state and federal privacy laws.

By using our Site or making a purchase, you agree to the terms of this Privacy Policy. If you do not agree with these terms, please do not use our Site.

2. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Morning Glow Ritual Thousand Oaks, California, United States Email: [insert email address] Phone: [insert phone number]

3. Personal Data We Collect

We collect personal data that you provide directly to us, data collected automatically through your use of the Site, and data received from third parties. This may include:

3.1 Information You Provide to Us

• Contact information: name, email address, phone number, shipping address, and billing address

• Account information: username, password, and order history (if you create an account)

• Order and transaction information: products purchased, order value, and payment method selected

• Payment information: processed securely by our third-party payment processors (see Section 5). We do not directly collect or store full credit/debit card numbers

• Communications: information you provide when you contact customer support, submit reviews, or respond to surveys

• Marketing preferences: if you subscribe to our newsletter or promotional communications

3.2 Information Collected Automatically

• Device and usage data: IP address, browser type, operating system, device identifiers, referring URLs, pages viewed, and time spent on the Site

• Location data: general geographic location inferred from your IP address

• Cookies and similar tracking technologies: see Section 4 below

3.3 Information from Third Parties

• Information from our dropshipping suppliers and fulfillment partners regarding order status, shipping, and delivery

• Information from payment processors confirming transaction status

• Information from the Wix platform related to Site analytics and hosting services

4. Cookies and Tracking Technologies

Our Site, hosted on Wix, uses cookies and similar tracking technologies (such as web beacons and pixels) to operate the Site, enhance your browsing experience, analyze Site traffic, and support marketing efforts.

Types of cookies we use:

• Essential cookies: necessary for the Site to function, including shopping cart functionality and checkout

• Performance and analytics cookies: help us understand how visitors interact with the Site

• Functional cookies: remember your preferences and settings

• Advertising/marketing cookies: used to deliver relevant advertisements and measure campaign performance

Wix and its third-party partners (which may include analytics and advertising providers) may also place cookies on your device in connection with your use of the Site. You can manage or disable cookies through your browser settings; however, disabling certain cookies may affect Site functionality, including your ability to complete a purchase.

Where required by law (including under the GDPR and the EU ePrivacy Directive), we will request your consent before placing non-essential cookies on your device via a cookie consent banner.

5. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• To process and fulfill your orders, including coordinating with our dropshipping suppliers to ship products directly to you

• To process payments through our third-party payment processors

• To create and manage your customer account

• To communicate with you regarding your orders, inquiries, and customer service requests

• To send marketing communications, promotions, and newsletters (where you have opted in or as otherwise permitted by law)

• To improve, personalize, and optimize our Site and product offerings

• To detect, investigate, and prevent fraudulent transactions and other unlawful activity

• To comply with legal obligations, resolve disputes, and enforce our agreements

• To analyze Site usage and traffic trends

Legal bases for processing (GDPR): Where the GDPR applies, we process your personal data on the following legal bases:

• Performance of a contract — to process and fulfill your orders

• Consent — for marketing communications and non-essential cookies

• Legitimate interests — to improve our Site, prevent fraud, and operate our business, provided such interests are not overridden by your rights

• Legal obligation — to comply with applicable tax, accounting, and legal requirements

6. Third-Party Service Providers

We share your personal data with trusted third parties who assist us in operating our business. These include:

6.1 Dropshipping Suppliers

As a dropshipping business, we do not hold physical inventory. When you place an order, we share the necessary information (such as your name, shipping address, and order details) with our third-party suppliers and manufacturers so that they may fulfill and ship your order directly to you. These suppliers are contractually obligated, where applicable, to handle your data securely and only for the purpose of order fulfillment.

6.2 Payment Processors

We use the following third-party payment processors to securely handle transactions:

• PayPal

• Credit/debit card processors (processed via Wix's integrated payment infrastructure)

• Apple Pay

These processors collect and process your payment information directly in accordance with their own privacy policies. We do not store your full payment card details on our servers.

6.3 Website Hosting and Platform Services

Our Site is built, hosted, and operated using Wix.com. Wix provides the underlying infrastructure, e-commerce functionality, and may process certain data on our behalf, including analytics and security-related data, in accordance with Wix's own privacy and data processing policies.

6.4 Other Service Providers

We may also share data with:

• Shipping and logistics carriers

• Email marketing and customer communication platforms

• Analytics providers (e.g., website traffic and behavior analysis tools)

• Customer support and helpdesk software providers

• Fraud prevention and security services

We require our third-party service providers to implement appropriate technical and organizational measures to protect your personal data and to process it only for the purposes we have authorized.

We do not sell your personal data to third parties.

7. International Data Transfers

Morning Glow Ritual is based in the United States, and our Site and associated services (including Wix hosting, payment processing, and supplier fulfillment) may involve the transfer, storage, and processing of your personal data outside of your country of residence, including in the United States and other countries where our service providers operate.

If you are located in the EEA, UK, or Switzerland, please note that these countries may not provide the same level of data protection as your home jurisdiction. Where we transfer personal data outside of the EEA, UK, or Switzerland, we take steps to ensure an adequate level of protection is applied, which may include:

• Relying on the European Commission's Standard Contractual Clauses (SCCs) with our service providers

• Confirming that our third-party providers (such as Wix, PayPal, and applicable payment processors) maintain their own GDPR-compliant safeguards for international transfers

• Relying on other legally recognized transfer mechanisms where applicable

By using our Site and providing your personal data, you acknowledge that your data may be transferred to and processed in the United States and other countries.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• For the duration of your customer relationship with us and as needed to provide our products and services

• As necessary to comply with our legal, tax, and accounting obligations (typically up to 7 years for financial records under U.S. law)

• To resolve disputes and enforce our agreements

• For marketing purposes, until you withdraw your consent or opt out

Once personal data is no longer necessary for these purposes, we will securely delete, anonymize, or otherwise dispose of it in accordance with applicable law.

9. Your Rights Under GDPR

If you are located in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you

• Right to rectification — request correction of inaccurate or incomplete data

• Right to erasure ("right to be forgotten") — request deletion of your personal data, subject to certain legal exceptions

• Right to restrict processing — request that we limit how we use your data

• Right to data portability — request your data in a structured, commonly used, machine-readable format

• Right to object — object to our processing of your data, including for direct marketing purposes

• Right to withdraw consent — where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal

• Right to lodge a complaint — see Section 10 below

To exercise any of these rights, please contact us using the details provided in Section 2. We will respond to your request within the timeframe required by applicable law (generally within one month under the GDPR). We may need to verify your identity before fulfilling your request.

10. Right to Lodge a Complaint with a Supervisory Authority

If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state, UK, or Switzerland where you reside, work, or where the alleged infringement occurred.

A list of EU supervisory authorities can be found at: https://edpb.europa.eu/about-edpb/board/members_en

UK residents may contact the Information Commissioner's Office (ICO) at https://ico.org.uk.

We encourage you to contact us first at the details in Section 2 so that we may try to resolve your concern directly.

11. Data Security

We implement appropriate technical and organizational measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes reliance on Wix's platform security measures and encrypted, PCI-compliant payment processing through PayPal, Apple Pay, and our credit/debit card processing partners. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our Site is not directed to individuals under the age of 16, and we do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will take steps to delete such information promptly.

13. Your California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale or sharing of personal information. We do not sell your personal information. To exercise your California privacy rights, please contact us using the details in Section 2.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the revised policy on this page with an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically. Continued use of the Site after any changes constitutes your acceptance of the revised policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Morning Glow Ritual Thousand Oaks, California, United States Email: [insert email address] Phone: [insert phone number]