Privacy Policy

Privacy Policy

Effective date: November 5, 2026

This policy explains what personal information Mumbies Inc., a Delaware corporation ("Mumbies," "we," "us"), collects, how we use and share it, and the choices you have. It covers mumbies.com, partners.mumbies.com, our wholesale portal, our emails, and any other service that links to it (the "Services").

1. What we collect

Information you give us

• Contact and account details: name, email, phone number (if you add one), and shipping and billing addresses.
• Orders and subscriptions: what you buy, your Subscribe & save and Mumbies Box items, cadence, your Mumbies Day, skips and changes. Payment card details are collected and processed by Shopify; we don't store full card numbers.
• Your dogs: dog profiles you create, such as name, birthday, photo, breed, weight, chew strength and favorite products.
• Reviews and content: ratings, reviews, photos and videos, questions, "helpful" votes, and messages you send us (including attachments and live chat conversations).
• Marketing preferences: whether you've agreed to marketing email.
• Giveaways: your email address, and if you win, your shipping address.
• Partners (creators, businesses and organizations): application details (name, contact details, country, business or organization name, website and social media profile links, dog name, answers to application questions), referral activity, commissions and Mumbies Cash, sample requests and shipping address, content you submit and your consent choices for it.
• Partner payouts and tax: payouts are handled by Stripe through Stripe Connect. Stripe collects your bank details and tax information (such as a Form W-9 and taxpayer identification number); we receive status information (for example, whether a W-9 is on file) and payout amounts, which we use for tax reporting such as Form 1099.
• Wholesale accounts: business name and type, contacts and buyer details, business addresses and locations, website and social links, orders, and resale or tax-exemption certificates (including any tax ID on them).

Information we collect automatically (subject to your cookie choices — see Section 5)

• Device and usage data: pages viewed, links clicked, referring page and campaign link details, browser and device type, approximate location derived from IP address, and identifiers stored in cookies or local storage.
• Analytics: with your consent, we use PostHog to understand how the Services are used. This can include session recordings of how pages are used, with form inputs masked and recording paused on personal pages such as account areas. With the same consent, Shopify receives page-view analytics from mumbies.com.
• Error and performance data: when something breaks, Sentry receives technical details about the error. On partners.mumbies.com, Sentry may also capture a session replay of the moments around an error and of a sample of sessions.
• Referral and attribution data: if you arrive through a partner's or friend's referral link, we store the referral code in a cookie or your browser's storage so we can credit the right person when you order. At checkout, a Shopify pixel sends your email address and the stored referral code to our partner platform to record that credit.
• Advertising data: only with your consent to marketing cookies, ad-click identifiers (such as Google and Meta click IDs) and advertising cookies are used to measure our ads, as described in Section 3.
• Cookie choices: a record of the choices you make in our cookie banner, linked to a random ID for your browser.

Information from others

• Shopify: order, customer account and subscription details.
• Appstle: details of subscriptions created with our previous subscription app.
• Judge.me: reviews, ratings and photos you left through Judge.me or the Shop app, which we bring into our own review system.
• Partners and friends who refer you: that you were referred and by whom.
• Social media: if you tag or mention @getmumbies on Instagram, we can see that post (username, caption and media) through Instagram's tools. If a partner connects a Facebook or Instagram account, we receive page names and follower counts.
• Public business directories: for wholesale stockists, business listing details from Google Places.

2. How we use it

• To run the store: process orders, ship products, manage subscriptions and Mumbies Box, provide customer accounts and support.
• To run the partner, referral and wholesale programs: review applications, track referrals, pay commissions and Mumbies Cash, send samples and lead gifts, and meet tax reporting obligations.
• To publish and moderate reviews and to give review rewards.
• To run giveaways: verify entries, pick and contact winners, and ship prizes.
• To send transactional emails (orders, subscriptions, account, payouts) and, with your permission, marketing emails.
• To understand and improve the Services, fix errors, and keep them secure.
• With your consent, to measure and improve our advertising on our sites.
• To prevent fraud and abuse (for example, of referral links, giveaways and Mumbies Cash) and to comply with law.

3. Who we share it with

We don't sell your personal information for money. We share it with:

Service providers that process it on our behalf:

Advertising and analytics partners (marketing cookies, only with your consent): on mumbies.com, partners.mumbies.com and our wholesale portal, Google Tag Manager loads only after you accept marketing cookies. Through it we use Google Analytics, Google Ads and the Meta (Facebook) Pixel. With the same consent, we may also send Meta details of product views and add-to-cart events directly from our servers (Meta's Conversions API), together with your IP address, browser details, Meta's cookie IDs and, if you're signed in, your email address and name in hashed (scrambled) form; and ad-click IDs from the ad you clicked are attached to your order. On checkout.mumbies.com, Shopify and the sales-channel apps we use with Shopify (such as Google and Meta) may collect similar information; we pass your cookie choices to Shopify. These companies may combine data from our sites with data from other sites.

Partners who referred you. If you came to Mumbies through a partner's link, landing page or giveaway, that partner can see in their dashboard your name and email address, that you were referred by them, and the number and total value of your purchases while the referral is active, so they can follow their commissions.

Other people, when you choose: your published reviews, photos and videos (with the name you provide on the review) are public, along with a "verified buyer" badge when we can match the review to an order. Giveaway winners may be announced as described in the Official Rules.

Legal and safety: to comply with law, respond to lawful requests, enforce our terms, or protect rights and safety.

Business transfers: in a merger, acquisition or sale of assets, subject to this policy.

4. "Sale," "sharing" and targeted advertising

Some state laws treat letting advertising partners (like Meta and Google) collect data through cookies on our site for cross-context behavioral advertising as a "sale" or "sharing" of personal information, or as "targeted advertising." We do this only through marketing cookies and the related server-side measurement described in Section 3, and only after you opt in.

You can opt out at any time by turning off marketing cookies in Cookie settings (in the site footer). We also honor Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as a request to opt out of sale, sharing and targeted advertising for that browser, and we keep both analytics and marketing cookies off.

We don't knowingly sell or share personal information of anyone under 16.

5. Cookies and your choices

We use cookies and similar technologies in three categories: necessary, analytics and marketing. Analytics and marketing are off until you opt in. See our Cookie Policy for the details and how to change your choices.

Marketing email: use the unsubscribe link in any marketing email or update your email preferences in My Account. We'll still send transactional emails about your orders, subscriptions and account.

6. Your privacy rights

Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with privacy laws), you may have the right to:

• Know / access the personal information we have about you, and get a copy in a portable format;
• Correct inaccurate information;
• Delete your information;
• Opt out of the sale or sharing of personal information and of targeted advertising;
• Limit the use of sensitive personal information (we don't use or disclose sensitive personal information for any purpose that would give you this right);
• Appeal a decision we make about your request.

We won't discriminate against you for using these rights. Some loyalty-style benefits (for example, Mumbies Cash) depend on information we need to run them.

Notice of financial incentive. We sometimes offer rewards in return for information, such as Mumbies Cash for a review or a referral, a discount for signing up for email, or an entry into a giveaway. Each offer's terms are shown where it's offered. You join by choosing to take part, and you can stop at any time (for example, by unsubscribing). We value the information involved at about the value of the reward we give, which reflects our reasonable estimate of what that information is worth to us, based on the expenses of running the program.

California "Shine the Light": California residents may ask once a year about disclosures to third parties for their direct marketing. We don't share personal information with third parties for their own direct marketing.

7. How to make a request

Email support@mumbies.com with the subject "Privacy request," or write to us at the address in Section 13, and tell us which right you want to use. We'll verify your request by confirming details we already hold, such as access to the email address on your account. You can use an authorized agent; we may ask for proof of their authority and to verify your identity directly. We'll respond within the time the law requires (generally 45 days). If we deny your request, you can appeal by replying to our response; if your appeal is denied, you may contact your state attorney general.

8. How long we keep it

We keep personal information only as long as we need it for the purposes above, then delete or de-identify it:

• Customer account records: while your account is active, plus 2 years. Order records: 7 years, for tax and accounting.
• Subscription records: while the subscription is active, plus 2 years; billing records for 7 years.
• Reviews and media: while published, and up to 3 years after removal.
• Giveaway entries: 3 years after the giveaway ends. Winner records: 7 years.
• Partner records: while you're in the program, plus 2 years. Commission and payout records: 7 years, for tax reporting.
• Wholesale accounts: while the account is active, plus 2 years. Wholesale orders and tax-exemption certificates: 7 years, for sales-tax audits.
• Analytics data: up to 3 years.
• Error-monitoring data: up to 90 days.
• Support messages: 3 years.
• Marketing email data: until you unsubscribe, or after 3 years with no activity.
• Marketing preferences and unsubscribes: kept as long as needed to honor them.

We may keep information longer when the law requires it or to resolve a dispute.

9. Children

The Services are not directed to children under 13, and we don't knowingly collect personal information from them. If you think a child has given us information, email support@mumbies.com and we'll delete it.

10. Security

We use reasonable safeguards, including encryption in transit, access controls and limiting staff access, to protect personal information. No system is perfectly secure, so we can't guarantee security.

11. Where we process data

We're based in the United States, and we and our service providers process data mainly in the United States. Some service providers may process data in other countries where they or their subcontractors operate. If you use the Services from outside the US, your information will be transferred to the US.

12. Changes to this policy

We'll post any changes here with a new effective date. If we make material changes, we'll tell you by email (if we have your address) and/or a notice on the site before they take effect.

13. Contact us

Mumbies Inc. 9924 Monarch Drive, Unit 5202 Franklin, WI 53132 support@mumbies.com