Privacy Policy.

Who we are.

HushedMind, Inc. is a US-based wellness brand that designs and sells the HushedMind breathing trainer for adults with white coat syndrome. We operate this website on the Shopify platform.

For privacy questions, requests, or concerns, contact us at contact@hushedmind.com.

Information we collect.

Information you give us directly

• Order information: name, shipping address, billing address, email, phone number, and items purchased.
• Payment information: credit card or payment details are processed by Shopify Payments, Stripe, PayPal, or similar processors. We do not see or store full card numbers on our servers.
• Account information: if you create an account, your login email and any preferences you set.
• Communications: emails, support tickets, chat messages, or product reviews you send us.
• Marketing preferences: email or SMS subscription status when you opt in.

Information collected automatically

• Device & browser data: IP address, browser type, operating system, screen size, and referring URL.
• Usage data: pages visited, time on site, products viewed, items added to cart, and click behavior.
• Cookies & similar technologies: see Section 04 for details.

Information from third parties

We may receive information from social media platforms (if you interact with our ads), advertising partners, analytics providers, and fraud-prevention services that help us protect your account and our store.

How we use your information.

• Fulfill orders: process payments, ship products, send order confirmations and tracking updates.
• Customer support: answer your questions, process returns, and resolve issues.
• Improve our products and site: understand which pages work, fix bugs, and refine the product experience.
• Marketing (with your permission): send promotional emails, product launches, and offers — you can unsubscribe at any time.
• Fraud prevention & security: detect and block fraudulent orders, abuse, or unauthorized access.
• Legal compliance: meet our obligations under tax, accounting, and consumer-protection laws.

Cookies & tracking technologies.

We use cookies and similar technologies to make the site work, understand how it's used, and (with your consent where required) show you relevant ads.

• Strictly necessary: cart, checkout, login, and security. The site won't work without these.
• Functional: remember your preferences, like region or language.
• Analytics: Google Analytics, Shopify Analytics, and similar tools that show us aggregated usage data.
• Marketing: Meta Pixel, Google Ads, TikTok Pixel, and other ad platforms that help us reach the right audiences and measure campaign performance.

You can disable non-essential cookies through our cookie banner (where shown) or through your browser settings. Disabling them won't break the site, but some features may not work as expected.

Who we share information with.

We do not sell your personal information. We share information only with the service providers who help us run the business, and only as needed to deliver the service you asked for:

• Shopify: our e-commerce platform — hosts the store, processes orders, manages customer accounts.
• Payment processors: Shopify Payments, Stripe, PayPal — process your payment securely.
• Shipping carriers: USPS, UPS, FedEx, DHL, or local equivalents — deliver your order.
• Email & SMS providers: Klaviyo, Shopify Email, or similar — send order updates and (with consent) marketing.
• Analytics & advertising: Google, Meta, TikTok — measure site performance and ad effectiveness.
• Fraud prevention: Shopify and partner services that flag suspicious activity.
• Legal & regulatory bodies: if required by law, court order, or to protect our rights, customers, or the public.

Each of these providers is contractually obligated to handle your data securely and only for the purposes we've authorized.

Data retention.

We keep your information only as long as we need it for the purposes described in this policy, or as required by law.

• Order records: retained for at least 7 years to meet tax and accounting obligations.
• Customer accounts: retained while your account is active. You can request deletion at any time.
• Marketing data: retained until you unsubscribe or request deletion.
• Support communications: retained for up to 3 years for quality and reference.

Data security.

Our store runs on Shopify, which is PCI-DSS Level 1 compliant — the highest standard for payment processing. All payments are encrypted with TLS and processed through Shopify's secure infrastructure. We use industry-standard practices (encryption in transit, restricted access, regular security reviews) to protect your data.

No system is 100% secure. If we become aware of a data breach affecting your information, we will notify you in accordance with applicable law.

Your rights — all users.

Regardless of where you live, you have the following rights with respect to the personal information we hold about you:

• Access: request a copy of the information we hold about you.
• Correction: ask us to correct inaccurate or incomplete information.
• Deletion: ask us to delete your information (subject to legal retention obligations like tax records).
• Portability: request your data in a structured, machine-readable format.
• Unsubscribe: opt out of marketing emails at any time using the link in any email, or by contacting us.

To exercise any of these rights, email contact@hushedmind.com. We'll respond within 30 days. We may need to verify your identity before we can act on your request.

California residents (CCPA / CPRA).

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

• Right to know: what personal information we collect, use, disclose, and sell or share.
• Right to delete: request deletion of personal information we collected from you.
• Right to correct: request correction of inaccurate personal information.
• Right to opt out of "sale" or "sharing": we do not sell personal information in the traditional sense, but use of certain advertising cookies may qualify as "sharing" under CPRA. You can opt out at any time by emailing us or using browser-based "Global Privacy Control" signals, which we honor.
• Right to limit use of sensitive personal information: we do not collect sensitive personal information for the purpose of inferring characteristics.
• Right to non-discrimination: we will not deny service, charge different prices, or provide a different quality of service because you exercised your rights.

To submit a request, email contact@hushedmind.com with the subject line "California Privacy Request." You may also designate an authorized agent to make requests on your behalf.

Other US state residents.

As of 2026, residents of the following states also have comprehensive consumer privacy rights under their own state laws:

• Colorado (CPA), Connecticut (CTDPA), Delaware (DPDPA), Florida (FDBR), Indiana (ICDPA), Iowa (ICDPA), Kentucky (KCDPA), Maryland (MODPA), Minnesota (MCDPA), Montana (MCDPA), Nebraska (NDPA), New Hampshire (NHDPA), New Jersey (NJDPA), Oregon (OCPA), Rhode Island (RIDTPPA), Tennessee (TIPA), Texas (TDPSA), Utah (UCPA), and Virginia (VCDPA).

Your rights under these laws

While each state's law has its own nuances, residents of the states listed above generally have the right to:

• Access the personal information we hold about you and confirm whether we process it.
• Correct inaccurate personal information.
• Delete personal information we have collected from you (subject to legal retention obligations).
• Obtain a portable copy of your personal information in a structured, machine-readable format.
• Opt out of the sale of personal information, targeted advertising, and certain types of automated profiling.
• Appeal our decision if we deny your request (most states require us to offer an appeal process).

How to exercise your rights

To submit a request, email contact@hushedmind.com with the subject line "State Privacy Request" and tell us which state you reside in. We will respond within the timeframe required by your state's law (typically 45 days, sometimes with one 45-day extension). We may need to verify your identity before we can act on your request, and we will not discriminate against you for exercising any of these rights.

If you do not see your state listed and believe you have privacy rights under a state law not mentioned here, please contact us — we'll honor any applicable rights you have.

EU & UK residents (GDPR / UK GDPR).

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation:

Data controller

HushedMind, Inc. is the data controller for personal information collected through this website. Contact: contact@hushedmind.com.

Legal bases for processing

• Contract: to process and fulfill your orders.
• Legitimate interests: to improve our products, prevent fraud, and run our business.
• Consent: for marketing emails, non-essential cookies, and similar purposes — you can withdraw consent at any time.
• Legal obligation: to meet tax, accounting, and consumer-protection requirements.

Your rights under GDPR

• Access, correct, delete, restrict, or object to processing of your personal data.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time (without affecting prior lawful processing).
• Lodge a complaint with your local supervisory authority. In the UK, that's the Information Commissioner's Office (ICO). In the EU, find your national authority at edpb.europa.eu.

International transfers

Our service providers (including Shopify) may store and process data in the United States. We rely on appropriate safeguards — including Standard Contractual Clauses — to protect your data during these transfers.

Children's privacy.

HushedMind is intended for adults. Our products and website are not directed to children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we learn that we have collected information from a child without verifiable parental consent, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at contact@hushedmind.com.

Changes to this policy.

We may update this Privacy Policy from time to time. The "Effective" date at the top of this page shows when it was last updated. If we make material changes, we will notify you by email (if you have an account) or by posting a notice on our website. Continued use of the site after changes take effect means you accept the updated policy.

Contact us.

For any privacy question, request, or concern — including data access, correction, deletion, or opting out — reach out and we'll get back to you within 30 days.