Privacy policy

Last Updated: November 1, 2026

Store Name: BakeLuna
Legal Business Name: PEYTON MITCHELL RY INC
Website: https://bakeluna.shop
Contact Email: info@bakeluna.shop

BakeLuna is operated by PEYTON MITCHELL RY INC. In this Privacy Policy, “BakeLuna,” “we,” “us,” and “our” refer to the business operating this website.

We operate https://bakeluna.shop and sell baking tools and related products. This Privacy Policy explains what personal information we collect, how we use and share it, how long we retain it, and the privacy choices and rights available to you.

This policy applies to visitors and customers who access our website, communicate with us, or place orders through our store. Our current order fulfillment and shipping services are intended for customers in the 48 contiguous United States.

This Privacy Policy is provided for informational purposes and does not constitute legal advice.

1. Personal Information We Collect

We may collect the following categories of personal information depending on how you interact with our website and services.

Information You Provide Directly

When you place an order, contact us, or create an account, you may provide:

Name
Email address
Shipping address
Billing address
Phone number
Order details and purchase history
Account information, if you create an account
Messages, inquiries, and other information you voluntarily send to our customer service team

Please do not send full payment card numbers or other sensitive payment information through email.

Information Collected Automatically

When you visit our website, we and our service providers may automatically collect certain technical and usage information, including:

Internet Protocol (IP) address
Browser type and version
Device type and operating system
Pages viewed and links clicked
Referring website or traffic source
Approximate location based on your IP address
Website usage information
Cookies and similar tracking technologies

Payment Information

Payments are processed through Shopify and the payment providers made available during checkout.

We do not store full payment card numbers on our website. Payment providers may collect and process payment details, billing information, transaction information, and other data necessary to complete payments, prevent fraud, and meet applicable legal requirements.

Your payment information is handled according to the privacy policies and terms of the relevant payment providers.

2. How We Use Your Personal Information

We use personal information for legitimate business and operational purposes, including:

Processing and fulfilling customer orders
Arranging order handling, packing, and shipping through our U.S.-based third-party fulfillment partners
Sending order confirmations, shipping notifications, and tracking information
Providing customer service and responding to inquiries
Processing returns, refunds, and exchanges
Managing customer accounts, where applicable
Maintaining and improving our website, products, and shopping experience
Understanding website traffic and customer interactions
Detecting, investigating, and preventing fraud, unauthorized transactions, and other suspicious activities
Maintaining website security and preventing misuse
Complying with applicable legal, tax, accounting, and regulatory requirements
Sending promotional or marketing communications when permitted by law and, where required, with your consent

You may unsubscribe from marketing emails at any time by clicking the unsubscribe link included in the email.

Even if you unsubscribe from marketing communications, we may still send necessary transactional messages, such as order confirmations, shipping updates, and customer service communications.

3. How We Share Your Personal Information

We may share personal information with service providers and business partners when reasonably necessary to operate our store, process transactions, fulfill orders, and provide customer support.

The categories of recipients may include:

Shopify

We use Shopify to host and operate our online store, manage checkout, process orders, and support store administration.

Shopify may process personal information in accordance with its own privacy policies and applicable service agreements.

Payment Processors

Payment providers receive and process information necessary to complete transactions, verify payments, prevent fraud, and meet applicable legal requirements.

Fulfillment and Logistics Partners

We work with third-party fulfillment and logistics partners located in the United States to help process, pack, and ship customer orders.

These partners may receive information such as your name, shipping address, order details, and other information necessary to fulfill and deliver your purchase.

Shipping Carriers

We share necessary delivery information with shipping carriers so they can transport and deliver your packages and provide tracking services.

Email and Customer Service Providers

We may use service providers to send transactional emails, respond to customer inquiries, manage customer communications, and send marketing emails when you have opted in or when otherwise permitted by applicable law.

Analytics and Advertising Providers

We may use analytics or advertising-related service providers to understand website activity, measure advertising performance, evaluate marketing campaigns, and improve our services.

Depending on the tools enabled on our website and your privacy choices, these providers may collect information through cookies, pixels, or similar technologies.

Legal and Safety Disclosures

We may disclose personal information when reasonably necessary to:

Comply with applicable laws, regulations, court orders, or valid legal requests
Enforce our policies and agreements
Protect our rights, property, and business operations
Protect customers, service providers, or the public from fraud, security threats, or other harm

We do not sell personal information for money. However, certain disclosures involving advertising or tracking technologies may be considered a “sale” or “sharing” under certain state privacy laws, even when no money is exchanged. Where applicable, you may have the right to opt out of these activities as described in this policy.

4. Cookies and Similar Tracking Technologies

Our website, Shopify, and certain service providers may use cookies, pixels, and similar technologies to support website functionality and understand how visitors interact with our store.

These technologies may be used to:

Remember items in your shopping cart
Maintain your shopping session and account preferences
Support checkout and essential website functions
Measure website traffic and visitor activity
Understand how customers interact with products and pages
Evaluate marketing and advertising performance
Improve website functionality and the shopping experience

You can manage or block cookies through your browser settings. However, disabling certain cookies may affect shopping cart functionality, account access, checkout, or other parts of our website.

Where required by applicable law, we will provide appropriate cookie consent and preference controls for non-essential cookies and similar technologies.

Your cookie preferences may also be managed through the privacy controls made available on our website.

5. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

The nature of the information collected
The purpose for which the information was collected
Whether you have an active customer account
Order fulfillment and customer service requirements
Tax, accounting, and recordkeeping obligations
Fraud prevention, security, and dispute resolution needs
Applicable legal requirements

When personal information is no longer reasonably necessary for these purposes, we will take reasonable steps to delete it, de-identify it, or otherwise handle it in accordance with applicable law.

You may request access to, correction of, or deletion of your personal information, subject to applicable legal exceptions and recordkeeping obligations.

6. Data Security

We use Shopify and other service providers to support the operation and security of our website and checkout process.

We take reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no website, online service, or method of electronic transmission or storage can be guaranteed to be completely secure.

If you create an account, please use a strong password and keep your login credentials confidential.

7. Children's Privacy

Our website and products are intended for a general audience and are not directed to children under the age of 13.

We do not knowingly collect personal information from children under 13.

If you believe that a child under 13 has provided personal information to us, please contact us at info@bakeluna.shop.

We will review the request and take reasonable steps to delete the information when appropriate and as required by applicable law.

8. Your Privacy Rights and Choices

Depending on your state of residence and applicable privacy laws, you may have certain rights regarding your personal information.

These rights may include:

The right to know whether we process your personal information
The right to request access to personal information we maintain about you
The right to request a copy of certain personal information
The right to request correction of inaccurate personal information
The right to request deletion of personal information, subject to applicable exceptions
The right to opt out of certain processing activities, including targeted advertising, the sale of personal information, or certain forms of profiling, where applicable
The right to withdraw consent where processing is based on your consent
The right to appeal certain decisions regarding your privacy requests, where required by applicable law

Not all rights apply in every state or to every business. The availability of these rights depends on applicable law, eligibility requirements, and legal exceptions.

California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).

Subject to applicable legal requirements and exceptions, these rights may include:

The right to know what categories of personal information we collect, use, disclose, sell, or share
The right to request access to specific personal information
The right to request correction of inaccurate personal information
The right to request deletion of personal information
The right to opt out of the sale or sharing of personal information
The right to limit certain uses and disclosures of sensitive personal information, where applicable
The right not to receive discriminatory treatment for exercising your privacy rights

BakeLuna does not sell personal information for money. However, certain advertising or tracking activities may qualify as “sharing” under California law, even if no money is exchanged.

Where applicable, you may opt out of the sale or sharing of personal information through the privacy controls provided on our website or by contacting us.

Residents of Other States

Residents of other states may have additional privacy rights under applicable state privacy laws, including laws in states where BakeLuna does business or offers products.

Depending on the applicable law and your eligibility, these rights may include access, correction, deletion, data portability, and the ability to opt out of targeted advertising, certain profiling, or the sale of personal data.

We will handle eligible privacy requests in accordance with the laws that apply to the request.

Global Privacy Control and Opt-Out Preference Signals

Where required by applicable law, we recognize and process supported universal opt-out preference signals, such as Global Privacy Control (GPC), in accordance with applicable requirements and our website privacy settings.

The effect of an opt-out signal may depend on the applicable law, the browser or device transmitting the signal, and the privacy controls supported by our website.

How to Submit a Privacy Request

To submit a privacy request, please email:

info@bakeluna.shop

Use the subject line:

Privacy Request

Please include enough information for us to understand your request, but do not send sensitive personal information or full payment card details.

We may need to verify your identity before processing certain requests. Where permitted by law, an authorized agent may submit a request on your behalf, and we may request proof of authorization or identity verification.

We will review and respond to eligible privacy requests within the timeframes required by applicable law.

If we cannot fulfill a request, we will explain the reason when required by law. Where applicable, you may also have the right to appeal our decision by replying to our response.

We will not unlawfully discriminate against you for exercising privacy rights available under applicable law.

9. Third-Party Websites and Services

Our website or emails may contain links to third-party websites, applications, or services, including payment providers and shipping carriers.

These third parties operate independently from BakeLuna and have their own privacy policies and practices.

We are not responsible for the privacy practices, security, or content of third-party websites or services.

We encourage you to review their privacy policies before providing personal information to them.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, website features, service providers, or applicable legal requirements.

When we make changes, we will update the “Last Updated” date at the top of this page.

If a change materially affects how we handle personal information, we will provide additional notice or obtain consent where required by applicable law.

We encourage you to review this policy periodically to stay informed about how we protect your information.