Privacy Policy

Depending on how you use the site, we may collect:

• Contact and RSVP information, such as your name, email address, phone number, message, interests, role selections, and documents you choose to submit.
• Order and transaction information, such as products, quantities, prices, shipping and contact details, order status, and transaction identifiers.
• Email engagement information, such as subscription status and whether marketing messages are delivered, opened, or clicked.
• Device and usage information, such as IP address, browser and device type, pages viewed, referring pages, approximate location derived from IP address, and interactions with the site or advertisements.

We collect this information when you provide it, when you use the site, and from service providers that help us operate the site and fulfill your requests.

We use information to:

• respond to questions, access requests, and career or product RSVPs;
• process orders, provide order communications, prevent fraud, and support customers;
• send marketing communications when you have asked to receive them;
• operate, secure, troubleshoot, and improve our website and services;
• measure site traffic, email engagement, and advertising performance;
• personalize and evaluate advertising; and
• comply with law and protect our rights, users, and business.

Stripe processes checkout and payment transactions for us. Payment-card details are submitted to and handled by Stripe rather than stored by Gracious. We receive transaction details needed to fulfill and support an order, such as payment status, amount, customer and shipping information, and transaction identifiers. Stripe processes information under its own privacy policy.

We use Klaviyo for email marketing and automation. If you consent to receive marketing or product updates, we may provide Klaviyo with your email address, subscription choices, relevant order or RSVP information, and email engagement data. Klaviyo helps us send messages, manage consent and suppression records, and measure delivery, opens, and clicks.

You can unsubscribe through the link in any marketing email. We may retain a suppression record so that we can honor your choice. Unsubscribing from marketing does not prevent necessary transactional or service messages, such as order communications.

We and our providers use cookies, pixels, scripts, and similar technologies to keep the site working, understand how it is used, measure campaigns, and support advertising.

Google Analytics collects device and usage information to help us understand traffic and improve the site. You can limit Google Analytics by using browser controls or the Google Analytics Opt-out Browser Add-on.

Meta Pixel helps us measure visits and actions associated with ads and may help Meta deliver or evaluate advertising. Meta may use information from the pixel under its own privacy policy. You can manage ad preferences in your Meta account and use browser controls that block or delete cookies. Industry opt-out tools such as YourAdChoices may provide additional choices.

Browser settings can block or delete cookies, but some site features may not work as intended. Your choices are browser- and device-specific and may need to be repeated.

We do not sell payment-card details. We may share information with service providers that perform work for us, including payment processing, ecommerce, email delivery and marketing, analytics, advertising measurement, hosting, storage, security, and customer support. These providers receive information according to the services they perform and their applicable terms.

We may also disclose information when reasonably necessary to comply with law or legal process; protect rights, safety, and security; investigate fraud or abuse; or support a merger, financing, acquisition, reorganization, or sale of assets.

We retain information for as long as reasonably needed for the purposes described in this policy, including providing services, honoring marketing choices, maintaining business and transaction records, resolving disputes, enforcing agreements, and meeting legal obligations. Retention periods vary by the type of information and our operational or legal needs.

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No internet transmission or storage method is completely secure, so we cannot guarantee absolute security.

You may unsubscribe from marketing emails, use browser and provider controls for cookies and advertising, or contact us about your information. Depending on where you live and subject to applicable exceptions, you may have rights to request access, correction, deletion, or a copy of personal information, or to object to or restrict certain processing. You may also have the right to appeal a decision or lodge a complaint with a privacy regulator.

To make a request, contact us using the details below. We may need to verify your identity and may retain information where permitted or required by law. Authorized agents may submit requests where applicable, subject to verification of their authority.

Our site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can review and address the request.

Gracious is based in the United States. Information may be processed and stored in the United States and other places where our service providers operate. Privacy laws in those locations may differ from those where you live.

We may update this policy as our practices, services, or legal obligations change. We will post the revised policy here and update the effective date. Material changes may also be communicated through another appropriate channel.