Last Updated: May 12, 2026
GOODSTONE operates this store and website to provide you with a curated shopping experience. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using our services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
We collect personal information that identifies or can reasonably be linked to you. Personal information does not include information that is collected anonymously or de-identified. Depending on how you interact with our Services, where you live, and as permitted or required by applicable law, we may collect or process:
Contact details including your name, address, billing address, shipping address, phone number, and email address.
Financial information including credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, and payment confirmation.
Account information including your username, password, security questions, preferences and settings.
Transaction information including items you view, add to cart, add to wishlist, purchase, return, exchange or cancel, and your past transactions.
Communications with us including information you provide when sending a customer support inquiry.
Mobile/SMS Information including your phone number collected for SMS communications, opt-in consent status, and SMS messaging history.
Device information including information about your device, browser, network connection, IP address, and other unique identifiers.
Usage information including information regarding your interaction with our Services, including how and when you interact with or navigate the Services.
We collect personal information from the following sources:
Directly from you when you create an account, visit or use our Services, communicate with us, or provide us with your personal information.
Automatically through the Services from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies.
From our service providers when we engage them to enable certain technology and when they collect or process your personal information on our behalf.
From our partners or other third parties.
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for delivery, or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only. If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time by contacting us at hello@goodstoneinc.com.
Depending on how you interact with us, we may use personal information for the following purposes:
Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, process your payments, fulfill your orders, remember your preferences, send account notifications, create and maintain your account, arrange shipping, facilitate returns and exchanges, and create a customized shopping experience.
Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing communications by email, text message or postal mail, and to show you online advertisements based on items you previously purchased or your activity on our Services. *No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Security and Fraud Prevention. We use your personal information to authenticate your account, provide a secure payment and shopping experience, detect and investigate fraudulent, illegal, unsafe, or malicious activity, and protect public safety.
Communicating with You. We use your personal information to provide customer support, be responsive to you, and maintain our business relationship with you.
Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, and to enforce or investigate potential violations of our policies.
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:
With Shopify, vendors and other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
With SMS service providers (such as Gorgias) to send you order updates, shipping notifications, and customer service messages. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent information will not be shared with any third parties.
With business and marketing partners to provide marketing services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements. You can exercise your rights to opt-out of those uses on our website.
When you direct, request, or consent to our disclosure of information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
With our affiliates or within our corporate group.
In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations, and to protect or defend our Services and rights.
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify's data storage, databases and applications. They store your data on a secure server behind a firewall.
Payment
If you choose a direct payment gateway to complete your purchase, Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that, your purchase transaction information is deleted. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. For more information, you can read Shopify's Terms of Service at https://www.shopify.com/legal/terms or Privacy Statement at https://www.shopify.com/legal/privacy.
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. However, certain third-party service providers, such as payment gateways and payment transaction processors, have their own privacy policies. We recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers. Some providers may be located in a different jurisdiction than you or us. If you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction where that service provider or its facilities are located.
Our website may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including on third-party social networking platforms may also be viewable by other users without limitation as to its use by us or by a third party.
Here is a list of cookies that we use:
_session_id, unique token, sessional. Allows Shopify to store information about your session (referrer, landing page, etc.).
_shopify_visit, no data held, persistent for 30 minutes from last visit. Used by our website provider's internal stats tracker to record the number of visits.
_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day. Counts the number of visits to our store by a single customer.
cart, unique token, persistent for 2 weeks. Stores information about the contents of your cart.
_secure_session_id, unique token, sessional.
storefront_digest, unique token, indefinite. If the shop has a password, this is used to determine if the current visitor has access.
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. If you provide us with credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.
How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, provide you with Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.
Our Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us to request that it be deleted.
As of the date of this Privacy Policy, we do not have actual knowledge that we 'share' or 'sell' personal information of individuals under 16 years of age.
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you have given us your consent to allow any of your minor dependents to use this site.
Depending on where you live, you may have some or all of the following rights in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances, and in certain cases we may decline your request as permitted by law.
Right to Access/Know. You may have a right to request access to personal information that we hold about you.
Right to Delete. You may have a right to request that we delete personal information we maintain about you.
Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
Right to Opt out of Sale or Sharing for Targeted Advertising. Depending on where you reside, you may have a right to opt out of the 'sale' or 'share' of your personal information or to opt out of processing for 'targeted advertising' as defined in applicable privacy laws.
Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders.
If you reside in the UK or European Economic Area, you may also exercise the following additional rights:
Objection to Processing and Restriction of Processing. You may have the right to ask us to stop or restrict our processing of personal information for certain purposes.
Withdrawal of Consent. Where we rely on consent to process your personal information, you have the right to withdraw this consent. Withdrawal will not affect the lawfulness of processing based on your consent before its withdrawal.
You may exercise any of these rights by contacting us at hello@goodstoneinc.com or by mailing us at the address below. We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. We will respond to your request in a timely manner as required under applicable law.
If you reside in the EEA, you may have the right to lodge a complaint with your local data protection authority.
We may transfer, store and process your personal information outside the country you live in. If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, unless the data transfer is to a country that has been determined to provide an adequate level of protection.
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated. If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
If you would like to access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information, please contact us:
Email: hello@goodstoneinc.com
Mail: GOODSTONE, 1400 South Congress Avenue, Suite B340, Austin, TX 78704, US
For the purpose of applicable data protection laws, GOODSTONE is the data controller of your personal information.
