Privacy Policy & Disclaimers

Welcome to Moss & Fawn (“we,” “us,” or “our”). We respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit https://mossandfawn.com (the “Site”), make a purchase, join our email list, or otherwise interact with us. It also describes privacy rights that may apply to you under laws such as the California Consumer Privacy Act as amended by the CPRA (“CCPA”), other U.S. state privacy laws, and the Children’s Online Privacy Protection Act (“COPPA”).

Depending on where you live and the size of our business, some rights described below may not apply. We describe them so you know how to reach us. Utah’s Consumer Privacy Act generally applies only to businesses that meet specific revenue and data-volume thresholds. If those thresholds apply to us, Utah residents may also exercise the Utah rights listed in Section 6.

Privacy contact: hello@mossandfawn.com  
General support: orders@mossandfawn.com  
Location: Utah, United States

If a section below conflicts with an older version of this page, this version controls.

Notice at Collection

We collect the categories below when you visit the Site, create an account, check out, contact us, or interact with our ads.

Identifiers. Examples include name, email, phone, billing and shipping address, IP address, and account login. We use these for orders, support, accounts, and fraud prevention. We may share them with analytics and advertising partners. We typically keep account data for the life of the account plus 30 days, and IP or log data for a shorter period.

Customer records. Examples include name, address, phone, and order details. We use these for fulfillment, returns, and tax records. We do not sell this information for money. We typically keep order records for 7 years.

Commercial information. Examples include products viewed, cart contents, purchases, and registry items. We use these for fulfillment, product improvement, and marketing. We may share them if advertising pixels are active. We typically keep order records for 7 years and marketing data for 2 years after last interaction.

Internet and device activity. Examples include pages visited, referral URL, device and browser type, and cookie IDs. We use these for site function, analytics, security, and ads. We may share them with analytics and advertising partners. We typically keep this data for about 2 years after last interaction.

Payment information. Examples include billing address and payment method type. Full card numbers are handled by our payment processors and are not stored by us for ongoing use. We use this information for checkout. We do not share it for advertising. Retention follows the processor and tax rules.

Inferences. Examples include interest or lookalike segments created by ad platforms. We use these for advertising measurement. They are shared unless you opt out, and they last until you opt out or the partner’s data expires.

Parent-provided child context. Examples include an age band, feeding stage, or similar notes you choose to give us. We use this only to fulfill an order or answer a support question. We do not use it to profile a child or for advertising to a child. Support records are typically kept 3 years; related order records are kept 7 years.

We do not collect Social Security numbers, precise geolocation, or government ID in the ordinary course of running this store.

You are not required to provide personal information. If you do not provide information needed to complete an order, we cannot fulfill that order.

1. Information We Collect

1.1 Information you give us
- Name, email address, phone number, billing and shipping address
- Account username and password, order history, and any registry details you create
- Messages, reviews, photos, or other content you submit
- Information a parent or caregiver voluntarily shares about a child, such as an age range or feeding stage, so we can help with a product question

1.2 Payment data
Checkout is processed by Shopify and its payment partners (for example Shopify Payments, Shop Pay, or similar). We receive confirmation that a payment succeeded, the billing address, and limited payment details such as card brand or last four digits. We do not store full credit or debit card numbers on our own servers.

1.3 Information collected automatically
When you use the Site we may collect pages visited, links clicked, referral URLs, search terms, device type, browser type, operating system, date and time stamps, IP address, and cookie or pixel identifiers.

1.4 Information from service providers
Shopify, shipping carriers, email or SMS tools, review apps, and advertising platforms may provide us information about how their tools were used on our Site or whether an order was delivered.

2. How We Use Your Data

Orders and transactions. Process purchases, send confirmations, arrange shipping, handle returns and exchanges, and provide customer support.

Communication. Respond to inquiries and send order updates. Send marketing emails or newsletters only where permitted, including with your consent where required. You can unsubscribe from marketing at any time. We may still send transactional messages about an order.

Improvement and analytics. Understand how the Site is used, improve products, and measure marketing.

Advertising. Show or measure ads that may be relevant to you, including on other sites and apps, unless you opt out as described below.

Security and legal. Detect and prevent fraud, enforce our terms, keep the Site secure, and comply with tax, accounting, and legal requirements.

We do not use sensitive personal information to infer characteristics about you, except as permitted by law. We do not use parent-provided notes about a child to build a profile of that child or to target ads to a child.

3. Legal Bases for Processing (where applicable)

If a law such as the GDPR applies because you are in the EEA or UK:

Consent, for marketing communications and non-essential cookies or pixels.

Contract, for processing your order and providing the services you request.

Legal obligation, for tax, accounting, and other legal requirements.

Legitimate interests, for improving the Site and products, preventing fraud, and maintaining security, where those interests are not overridden by your rights.

4. Sharing & Disclosure of Data

We share personal information with the following types of parties.

Service providers who help us run the store, including:
- Store and checkout: Shopify. You can read Shopify’s policy at https://www.shopify.com/legal/privacy
- Payment processors used at checkout
- Shipping carriers
- Email, SMS, and customer-support tools
- Analytics providers, including Google Analytics. Google’s policy: https://www.google.com/intl/en/policies/privacy/ . Opt out: https://tools.google.com/dlpage/gaoptout
- Review, registry, or similar store apps we install

These parties may use your information only to perform work for us, except where their own policies apply to data they collect directly (for example Shopify or Google).

Advertising partners such as Meta / Facebook and Google, so we can measure and deliver ads. That sharing can be a “sale” or “share” under California law even when no one pays us cash for your name. See Section 5.

Legal authorities when we believe disclosure is required by law, a court order, or to protect Moss & Fawn, our customers, or the public.

Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, with notice where required.

We do not sell personal information for money.

5. Sale, Sharing, and Targeted Advertising

We do not sell personal information for monetary consideration.

We do share certain identifiers, commercial information, and internet/device information with advertising and analytics partners for cross-context behavioral advertising. Under California law that sharing can be a “sale” or “share.”

How to opt out:
- Use the “Do Not Sell or Share My Personal Information” or “Your Privacy Choices” link in the Site footer
- Email hello@mossandfawn.com with the subject line “Do Not Sell or Share”
- Use your browser or device ad settings
- Facebook: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Industry opt-out: https://optout.aboutads.info/
- Where required by law, we will treat a recognized opt-out preference signal such as Global Privacy Control (GPC) as a request to opt out of sale/share for that browser

Opting out does not stop all ads. You may still see ads that are not based on this kind of sharing. It also does not stop order, shipping, or other transactional messages.

Minors. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

We do not change our collection practices solely because a browser sends a generic “Do Not Track” signal. GPC is treated separately as described above.

6. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights:

Know / access. Confirm whether we process your personal information and receive a copy, or receive the categories we collect, use, and share.

Correct. Request that we fix inaccurate personal information.

Delete. Request deletion, subject to exceptions such as completed orders, tax records, fraud prevention, or other legal obligations.

Portability. Request a copy of personal information you provided to us in a portable format.

Opt out of sale, sharing, or targeted advertising.

Limit the use of sensitive personal information, if we collect it.

Non-discrimination. We will not deny goods, charge a different price, or provide a different quality of service because you exercised a privacy right.

Authorized agent. A California resident may use an authorized agent. We may still need to verify the consumer and the agent’s authority.

Utah residents. If the Utah Consumer Privacy Act applies to our processing of your data, you may request to know/access, delete, or opt out of sale and targeted advertising.

How to submit a request:
Email hello@mossandfawn.com and put “Privacy Request,” “CCPA Request,” or “UCPA Request” in the subject line. Tell us which right you want to exercise and the email or order details we should search.

We may need to verify your identity, for example by matching the email or order information you provide to our records. We will respond within 45 days, or tell you if we need more time (up to an additional 45 days where allowed). If we deny a request, you may email us to appeal and we will explain next steps.

Marketing opt-out is simpler: use the unsubscribe link in any marketing email, or email hello@mossandfawn.com.

Nevada. We do not exchange personal information for money so that another party can license or sell it. Nevada residents may still email hello@mossandfawn.com with “Nevada Do Not Sell” in the subject line to record an opt-out preference.

7. Children’s Privacy (COPPA) and Baby-Product Context

Moss & Fawn makes products for babies. This Site is for adults — parents, caregivers, and gift-givers.

We do not knowingly collect personal information from children under 13.

A parent or caregiver may give us information about a child (for example “6 months” or “starting solids”) so we can fulfill an order or answer a question. We use that only for that purpose.

We do not use that information to profile a child or to target advertising to a child.

We do not sell or share personal information of anyone we actually know is under 16.

If you believe a child under 13 submitted personal information to us, email hello@mossandfawn.com. We will delete it promptly.

8. Data Retention

Order and payment records: 7 years (tax and audit).

Account profile data: until you delete the account, plus 30 days.

Marketing and analytics data: 2 years after last interaction, or sooner if you opt out.

Support and correspondence: 3 years.

Reviews and public comments: until you ask us to remove them, unless we must keep a record.

We may keep information longer if the law requires it, or in a limited form if we need it to resolve a dispute or prevent fraud.

9. Security Measures

We use commercially reasonable measures to protect personal information, including HTTPS/TLS encryption for data in transit, Shopify-hosted checkout, and access limited to people who need it for their job. We collect only what we need for each purpose.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

10. International Transfers

We are based in the United States. If you visit the Site or order from outside the United States, your information will be processed in the United States and may be processed in other countries where our providers operate, including by Shopify. Those countries may have different data-protection laws than your own. By using the Site or submitting information, you understand that transfer. We use providers we believe have appropriate contractual and security controls.

11. Reviews, User Content, and Third-Party Links

If you post a review, photo, or other public comment, other people can see it and we cannot control how they use it. Do not include a child’s full name, a child’s face if you do not want it public, or other sensitive details in a public review.

The Site may link to third-party websites, apps, or social platforms. Their privacy practices are their own. Review their policies before you provide information there.

12. Cookies & Tracking Technologies

We use cookies, pixels, tags, and similar tools.

Essential cookies are required for cart, checkout, and security. These cannot be turned off if you want to use the Site.

Analytics cookies help us understand traffic and product performance.

Advertising cookies help us measure and deliver ads. Opt out as described in Section 5.

You can also block or delete cookies in your browser. If you block all cookies, some parts of the Site may not work.

13. Changes to This Policy

We may update this Privacy Policy when our practices or the law change. For material changes we will post the updated policy here with a new Effective Date and, where required, provide additional notice such as an email or a site banner. Please review this page periodically.

Product Safety & Usage Disclaimers

Choking hazard. All Moss & Fawn products are intended for use under adult supervision. Never leave your child unattended with any feeder, teether, or accessory. Discontinue use immediately if pieces become damaged or detached.

Age recommendations. Our products are intended for babies 4 months and older, or once they demonstrate good head control. Always follow the “first foods” guidelines recommended by your pediatrician.

Material compliance. Crafted from food-grade, FDA-approved silicone and BPA-/PVC-/phthalate-free plastics, our products meet or exceed CPSIA and European EN-71 safety standards.

Cleaning & care
- Before first use: wash with warm, soapy water; rinse thoroughly
- After each use: wash with warm, soapy water; rinse thoroughly. 
- Inspect before each use; discard at first sign of wear or damage.

Proper use. Do not heat in a microwave or oven. 

Promotions & Coupon Terms

Eligibility & application. Coupons and discount codes (“Promotions”) apply only to regularly priced merchandise on mossandfawn.com. Unless otherwise noted, Promotions cannot be combined, cannot be applied to gift cards, and are one-time use per customer.

Validity period. All Promotions expire no sooner than 30 days after issuance. The exact expiration date will be stated in the Promotion terms.

California consumers. Under California law, promotional offers valid for fewer than 30 days may be deemed unfair. We therefore guarantee a minimum 30-day redeemable period for any coupon or discount code issued to California residents.

Modifications & termination. Moss & Fawn may modify or terminate any Promotion at any time. Changes will not affect Promotions already issued.

Void where prohibited. Promotions are void where restricted or prohibited by law.

“Shine the Light” Notice (California Residents)

Under California Civil Code § 1798.83, California residents may request information about disclosures of their personal information to third parties for those third parties’ direct marketing purposes in the prior calendar year.

To request a free report, email hello@mossandfawn.com with “California Shine the Light Request” in the subject line. Include your name, mailing address, and a way for us to verify you (order email is enough; date of birth is not required). We will respond within 30 days.

Because many advertising disclosures are now handled through the CCPA “Do Not Sell or Share” process in Section 5, that opt-out is usually the faster way to limit marketing-related sharing.

Gift-with-Purchase & Free Sample Terms

While supplies last. Gifts and samples are limited in quantity. No rain checks or substitutions.

Eligibility. One gift or sample per qualifying order. Qualifying criteria (for example minimum spend or a specific SKU) will be stated in the Promotion details.

Non-transferable. Gifts and samples have no cash value and are not redeemable for cash or credit.

Shipping. Gift-with-purchase items ship with the qualifying order at no additional cost and cannot ship separately.

Returns. Gifts and samples are final sale and cannot be returned or exchanged.

Last reviewed: September 24, 2026