This policy explains what personal information Island Mist collects when you visit islandmist.com, shop with us, or get in touch by phone, mail or email; what we do with it; who we share it with; and the choices you have. We’re a small business on Block Island, Rhode Island, and we collect only what we need to run our shop.
Island Mist is run by Island Mist LLC. This policy takes effect on 4 November 2026.
What we collect
We collect what you give us, and some information your browser sends when you use our site:
- Contact details: your name, email address, phone number, and billing and shipping addresses.
- Orders: what you buy, the prices, shipping and tax, how you pay, and any gift card or discount code you use. We never see or store your full card number.
- Your account, if you create one: your email address, a username we create for you, your password, which is stored scrambled so nobody can read it, your addresses and your past orders.
- Gift cards: when you buy one, the recipient’s name and email address and your message to them, which go on the gift card with your name.
- Reviews: your name, which we publish with your review; your email address, which we don’t; your rating and what you write; and your IP address and browser, which we keep with your review to check it for spam.
- Messages: what you send us through our contact form, by email or by phone, with the name, email address and phone number you give.
- Newsletter: your email address, and which of our forms you signed up with.
- Your device and visits: your IP address, your browser and type of device, the pages and products you look at, what you add to your cart, and how you reached our site, such as from a search, an email or an ad. Some of this comes from cookies (below).
How we use it
- To take, pack and ship your orders, and email you about them.
- To run your account, if you have one.
- To answer your messages and help with your orders.
- To publish your review, with a “Verified buyer” label if you bought the product from us.
- To send our newsletter and offers, only if you’ve signed up.
- To keep our site and your payments safe, and to stop spam and fraud.
- To see how people find and use our site, and to measure our advertising.
- To keep the records the law requires, such as for taxes.
Who we share it with
We don’t sell your name, email address or orders to anyone. We share your information with the companies that help us run our shop, and only what each one needs:
- WordPress.com, run by Automattic, hosts our website in the United States. Your orders, account, reviews and messages are stored there, and in encrypted backups.
- Square processes card payments, Apple Pay and Google Pay. You type your card details into Square’s own form, so they go straight to Square. We send Square your name, email address, phone number, and billing and shipping addresses, with your order’s number, items and amount. Square keeps your contact details in a customer record for our shop, and uses it again when you next pay. If you pay with Apple Pay or Google Pay, Apple or Google handles your payment too.
- PayPal, if you choose to pay with it. You pay on PayPal, and we send PayPal your name, email address, phone number, and billing and shipping addresses, with your order’s number, items and amount.
- The postal service or carrier that delivers your order gets your name, your shipping address and, if you give one, your phone number.
- Mailchimp, run by Intuit, sends our newsletter. When you sign up, we send it your email address and which form you used. Our shop also sends Mailchimp our customers’ names, email addresses, orders and carts, so that what we send subscribers can follow what they’ve bought. We send marketing emails only to people who’ve signed up. Our emails tell Mailchimp when they’re opened and which links are clicked.
- Google Workspace holds our email, so the messages you send us, by email or through our contact form, are kept with Google.
- Akismet, run by Automattic, checks reviews and contact form messages for spam. It receives what you wrote, your name, email address, IP address and browser details.
- Gravatar, run by Automattic. When you’re logged in to your account, our header shows the picture linked to your email address on Gravatar, if there is one. To find it, your browser sends Gravatar a scrambled form of your email address.
- Google and Meta, through the Google Analytics and Meta pixel tags on our site (see Cookies and advertising, below).
Each of these companies handles your information under its own privacy policy: Automattic, Square, PayPal, Intuit (Mailchimp), Google and Meta.
We may also share information when the law requires it, to protect our customers, our business or others, or with a new owner if Island Mist is ever sold.
Cookies and advertising
Cookies are small files a website keeps in your browser. We use them in three ways.
To run the shop. Cookies keep your cart, your login and your checkout working. While you browse, WooCommerce, our shop software, also notes how you reached us and the type of device you use, and saves that with your order. Square and PayPal set their own cookies at checkout to process payments and prevent fraud.
To remember your choices. Our site remembers in your browser whether you’ve seen our welcome offer or joined our newsletter, so we don’t keep asking. If you choose to save your name and email address when you write a review, your browser keeps them for your next one. These stay on your device.
To measure and advertise. Google Tag Manager loads two tags: Google Analytics, and the Meta pixel from Meta, the company behind Facebook and Instagram. They use cookies to count visits, see which pages and products people look at, add to their cart and buy, and tell us how they reached our site and when an ad led to a sale. Google and Meta can recognize your browser on other websites and over time, and Meta can connect what its pixel records to your Facebook or Instagram account. Our Google Analytics is linked to our Google Ads account, and the Meta pixel sends what it records to Meta, so we can use it to measure our ads and to show them to people who’ve visited our site, which some state laws call targeted advertising. We also use Google signals: if you’re signed in to Google and have let it personalize your ads, Google links what Analytics records here to your Google account, so that we can count visits across your devices and see our visitors’ interests as a group. Google and Meta may use what they collect for their own purposes under their privacy policies. Mailchimp’s plugin for our shop also sets cookies that note which of our emails brought you to our site.
You can block or delete cookies in your browser’s settings. You’ll need the shop’s own cookies to buy from us, but you can block the others and still shop. You can also install Google’s Analytics opt-out add-on, turn off personalized ads from Google in My Ad Center, change your ad preferences in Facebook or Instagram, and opt out of ads based on your visits to other websites from the companies in the Digital Advertising Alliance’s WebChoices.
Do Not Track
Some browsers can send a “Do Not Track” or Global Privacy Control signal. Our site doesn’t currently change what it does when it receives one, so to limit tracking, use the choices above.
Your choices and rights
- Unsubscribe from our emails with the link at the bottom of any of them, or ask us.
- Update your details in My account, or ask us to close your account.
- Ask us for a copy of the personal information we hold about you, or ask us to correct or delete it.
We may need to confirm it’s you before we act, and we keep what the law requires us to, such as order records for taxes. Depending on where you live, the law may give you other rights too. Ask, and we’ll respond as that law requires.
To make a request, email johanna@islandmist.com or call (401) 864-5563. Johanna answers every request within 45 days.
How long we keep it
- Orders: 7 years, for taxes.
- Accounts: until you close yours. We don’t close accounts for going unused.
- Contact form messages: 2 years.
- Reviews: for as long as they’re published. You can ask us to remove yours.
- Newsletter: until you unsubscribe. Mailchimp keeps a note that you unsubscribed, so you aren’t added again by mistake.
- Google Analytics keeps what it records of your visits, linked to your browser, or to your Google account through Google signals, for up to 14 months after your last visit. You can see and delete what Google keeps with your Google account in My Activity.
- Backups of our site keep copies for up to six months, and our host’s server logs, which include IP addresses, for 30 days.
Keeping it safe
Our site uses an encrypted connection (HTTPS). Card details go straight to Square or PayPal, never through our site. The people who manage our shop sign in with two-step verification.
No website or email is completely secure, so we can’t promise your information will never be exposed. If a breach affects your information, we’ll tell you as the law requires.
Children
Our site is meant for adults and isn’t directed to children. We don’t knowingly collect personal information from children under 13. If you think a child has given us their information, contact us and we’ll delete it.
If you live outside the United States
We’re based in the United States and sell only to customers here. Your information is stored and handled in the United States, where privacy law may differ from the law where you live.
Changes to this policy
When what we do with your information changes, we’ll update this page and the date it takes effect. If a change is significant, we’ll also say so on our home page before it takes effect.
Contact us
Island Mist
P.O. Box 448
Block Island, RI 02807
Email johanna@islandmist.com, call (401) 864-5563, or use our Contact us page.