Privacy Policy

Bold & Gray (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website, make a purchase, join our newsletter, or interact with us online. It also outlines your rights under U.S. law and the EU General Data Protection Regulation (GDPR). If you do not agree with the terms of this Privacy Policy, please discontinue use of our site and services.

We may collect the following types of information:

1.1 Personal Information You Provide

• Contact information: name, email address, mailing address, phone number

• Order information: billing address, shipping address, order history

• Payment information: processed securely by third-party payment processors (we do not store full credit card details)

• Newsletter sign-ups: name and email address

• User submissions: messages sent through contact forms or email

1.2 Automatically Collected Information

We may collect certain data automatically when you visit the site, including:

• IP address

• Browser type and version

• Device type

• Pages viewed and referring URLs

• Time spent on the site

• Cookies and similar tracking technologies

1.3 Cookies

We use cookies and similar technologies to:

• Improve website performance

• Analyze engagement

• Enable e-commerce functionality

• Remember user preferences
  You may disable cookies in your browser settings.

We use the information collected to:

​

• Process and fulfill merchandise orders

• Send order updates and transactional emails

• Provide customer support

• Operate and improve our website

• Send newsletters and promotional communications (with your consent)

• Analyze website performance and user behavior

• Comply with legal obligations

We do not sell or rent your personal information. Legal Basis for Processing.

If you reside in the European Union or EEA, we process your information under the following legal bases:

• Contract performance: fulfilling orders, delivering services

• Consent: newsletter subscriptions, optional cookies

• Legitimate interests: website analytics, security, fraud prevention

• Legal obligation: tax, accounting, and regulatory requirements We may share your information with trusted service providers who help us operate our business, including:

• Payment processors (e.g., Stripe, PayPal, Wix Payments)

• Email marketing platforms (e.g., Mailchimp, Wix)

• Website hosting and analytics services

• Shipping carriers

• Customer support tools

These providers only access your information as necessary to perform their services and must protect it according to applicable laws.

We may also disclose information if required by law, regulation, or court order. We retain your information only as long as necessary to:

• Fulfill the purpose for which it was collected

• Comply with legal, tax, and accounting obligations

• Maintain accurate business records

• Newsletter data is retained until you unsubscribe.6.1

U.S. Users may request:

• Access to your information

• Correction of inaccurate data

• Deletion of your account

• Opt-out of promotional communications

EU/EEA users have the right to:

• Access your personal data

• Correct inaccurate or incomplete data

• Request deletion (“right to be forgotten”)

• Restrict or object to processing

• Withdraw consent

• Receive a copy of your data in a portable format (data portability)

To exercise rights, email us at: vincent@creatorattorney.com

When you sign up for our newsletter, you consent to receive emails about:

• Yoga offerings

• New content

• Events

• Merchandise updates

• Wellness insights

You may unsubscribe anytime using the link in any email.

Our site is not intended for individuals under 16. We do not knowingly collect data from children. If you believe a child has provided personal information, please contact us.

Because we operate from the United States, your information may be transferred to and processed in the U.S.

We take appropriate steps to protect information during international transfers, including using GDPR-compliant agreements with service providers. We use administrative, technical, and physical safeguards to protect your data. While no system is 100% secure, we work to maintain the security of your information and prevent unauthorized access.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.

If you have questions, requests, or concerns about this Privacy Policy, please contact us at: Vincent@creatorattorney.com