Privacy policy

Privacy Policy and Data Security

Mamma Mia Covers LLC

Last Updated: July 2026

At Mamma Mia Covers©, we value your trust and are committed to explaining how we collect, use, disclose, and protect personal information. This Privacy Policy applies to our website, www.mammamiacovers.com, and to other interactions you may have directly with Mamma Mia Covers LLC in the United States.

In summary:

Information we collect: contact information, order and transaction information, website and device information, communications, marketing preferences, and privacy preference information.
Why we collect it: to process orders, operate and secure our website, provide customer support, improve our products and services, communicate with you, and support advertising and analytics.
Who receives it: service providers that support our website, payments, fulfillment, communications, security, consent management, analytics, and advertising, as well as other recipients described in this Policy.
Sale and sharing: we do not sell personal information for money. However, certain disclosures to advertising, analytics, and social-media partners may be considered a “sale,” “sharing,” or processing for targeted advertising under applicable U.S. state privacy laws.
Your choices: you may manage cookies through our Cookie Preference Center and opt out of applicable sale, sharing, and targeted advertising through our Your Privacy Choices page.
Security: we maintain administrative, technical, and physical safeguards designed to protect personal information. No security system can guarantee complete security.
Questions: contact our team anytime at support@mammamiacovers.com or 1-855-708-0280.

For more information, please review our Cookie Notice and Your Privacy Choices page.

Note: This Privacy Policy describes our information practices and is not intended to obtain consent for every activity described in it. Where consent or an opportunity to opt out is required, we provide the applicable choice through our privacy notices, Cookie Preference Center, Your Privacy Choices page, or another appropriate mechanism. Your continued use of the Website does not override a cookie selection, Global Privacy Control signal, or other privacy choice that we are required to honor.

For full legal details, please read the sections below.

Who We Are and Scope of This Policy
Definitions
Categories of Personal Information We Collect
How We Collect Personal Information
How We Use Personal Information
Marketing Communications (Email and SMS)
Cookies and Similar Technologies
Disclosure of Personal Information
Sale, Sharing, and Targeted Advertising
Data Security
Data Retention
Processing Locations and International Transfers
Your Rights Under U.S. Privacy Laws
Your Choices and Controls
How to Exercise Your Rights
Third-Party Websites and Services
Non-Discrimination
Accessibility
Changes to This Policy

1. Who We Are and Scope of This Policy

Mamma Mia Covers LLC (“we,” “us,” or “our”) is a limited liability company organized under the laws of the State of Florida, USA.

This Privacy Policy (“Policy”) explains how we collect, use, disclose, retain and protect personal information of individuals who interact with us in the following contexts (collectively, “Users” or “you”):

visit or use www.mammamiacovers.com and its related pages or features (the “Website”);
purchase products directly from us;
create or use a customer account;
communicate with our customer-support team;
subscribe to marketing communications;
participate in a promotion, survey, review, or other interaction with us; or
otherwise provide personal information directly to Mamma Mia Covers.

This Policy applies to all personal information that we process in our capacity as a “business” under applicable U.S. state privacy laws (including, where applicable, the California Privacy Rights Act (CPRA), Colorado Privacy Act (CPA), Virginia Consumer Data Protection Act (VCDPA), Connecticut Data Privacy Act (CTDPA), Utah Consumer Privacy Act (UCPA), Florida Digital Bill of Rights (FDBR) Texas Data Privacy And Security Act (TDPSA) and Nevada privacy laws).

We also sell products through third-party marketplaces, including Amazon and Wayfair. When a marketplace collects or processes personal information under its own terms and privacy notice, that marketplace acts independently from Mamma Mia Covers. This Policy applies only to information that Mamma Mia Covers receives from or processes in connection with those marketplace transactions.

We use service providers and other partners to support our operations, including Shopify, payment providers, fulfillment providers, communications providers, analytics and advertising providers, security providers, and OneTrust, which supports cookie and privacy preference management.

This Policy does not apply to third-party websites, platforms, or services that maintain their own privacy notices.

Personal information is primarily processed in the United States but may also be processed in other locations where our service providers and business partners operate, as described in Section 12.

Our Website and services are intended for U.S. audience only and are not directed to residents of the European Union or other jurisdictions where processing of personal information would be subject to different or additional legal requirements (for example, the EU General Data Protection Regulation (GDPR)).

Information previously collected through our former Canadian website remains subject to the privacy notice that applied when the information was collected. Questions regarding historical Canadian customer information may be submitted to support@mammamiacovers.com.

For questions or concerns regarding this Policy or our privacy practices, you may contact us at:

Email: support@mammamiacovers.com

Phone: 1-855-708-0280

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below. Where applicable, these definitions are intended to align with relevant privacy laws in the United States.

“Business”

Refers to Mamma Mia Covers LLC, a company organized under the laws of the State of Florida, USA, that determines the purposes and means of processing personal information and acts as the “business” under applicable U.S. state laws.

“Personal Information” or “Personal Data”

Means any information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, to an identified or identifiable individual. It does not include aggregated, anonymized, or de-identified data that cannot reasonably be associated with a specific person.

“Processing”

Any operation or set of operations performed on personal information – such as collection, storage, use, disclosure, transfer, retention, or deletion – whether by automated or manual means.

“Service Provider” or “Processor”

A third party that processes personal information on our behalf under a written contract that limits the use of such information to specified purposes and requires appropriate privacy and security protections.

“Contractor”

An independent entity or individual that provides operational services to us (for example, marketing, logistics, or IT support) and that processes personal information under similar contractual restrictions.

“Third Party”

Any entity that is not a Business, Service Provider, or Contractor, and that may receive personal information for its own independent purposes (for example, advertising partners or social-media platforms).

“Sale” or “Selling”

Means the disclosure or making available of personal information to a third party for monetary or other valuable consideration, where the applicable U.S. state privacy law defines the activity as a sale. We do not sell personal information in exchange for money, but certain advertising or analytics disclosures may be considered a sale under some laws.

Means disclosing or making personal information available to a third party for cross-context behavioral advertising, as that term or a similar term is defined under applicable law.

“Targeted Advertising”

Means displaying advertising selected based on personal information obtained or inferred from an individual’s activities over time and across nonaffiliated websites, applications, or services. The meaning may vary under applicable state law.

“Sensitive Personal Information”

Includes data such as government identifiers, financial account numbers, precise geolocation, racial or ethnic origin, health data, or any information considered sensitive under applicable laws. We generally do not collect such information unless required for specific purposes (e.g., fraud prevention or payment verification).

“De-identified” or “Anonymized Information”

Information that cannot reasonably be used to identify an individual, directly or indirectly. We take reasonable measures to ensure such information cannot be re-identified.

“Consumer Rights” or “Data Subject Rights”

The rights granted to individuals under applicable privacy laws – including the rights to access, correct, delete, restrict use, opt out of certain processing, or obtain information about our practices.

“Cookies and Similar Technologies”

Small text files or other technologies (such as pixels, tags, SDKs, or local storage) used to recognize devices, remember preferences, analyze traffic, and support advertising or analytics.

“Website”

Our official website, www.mammamiacovers.com, and any sub-domains or mobile versions operated by Mamma Mia Covers LLC.

“Applicable Privacy Laws”

Collectively refers to all U.S. federal and state privacy laws that apply to our operations including CPRA, CPA, VCDPA, CTDPA, UCPA, TDPSA, FDBR, Nevada privacy laws and any other state privacy and data-protection laws that apply to a particular processing activity or privacy request.

“Opt-Out Preference Signal”

Means a qualifying browser- or device-based signal, such as Global Privacy Control (“GPC”), that communicates a user’s request to opt out of certain processing, including sale, sharing, or targeted advertising.

“Privacy Preference Information”

Means information relating to a user’s privacy selections, including cookie category selections, opt-out requests, GPC signals, preference timestamps, applicable browser or device information, and records used to document or honor those choices.

3. Categories of Personal Information We Collect

We collect different types of personal information depending on how you interact with us – for example, when you visit our website, place an order, contact our support team, or shop through Amazon or Wayfair. Below is a summary of the categories of personal information that Mamma Mia Covers LLC (“we,” “us,” or “our”) may collect and process.

3.1 Identifiers and Contact Information

Information that allows us to identify and communicate with you, such as:

Full name
Email address
Telephone number
Shipping and billing address
Account login information (if applicable)
Order ID or customer reference number

(Collected via Shopify checkout, Amazon or Wayfair order information, customer accounts, and support communications.)

3.1.1 Audio and Customer Support Information

When you contact our customer-support team by telephone, we may collect:

an audio recording of the call, where you have agreed to recording;
the telephone number used to place or receive the call;
the date, time, and duration of the call;
call-routing and agent information;
voicemail messages;
notes created by our customer-support representatives; and
call transcripts or summaries, if those features are enabled.

Call recordings may include information that you choose to provide during the conversation, such as your name, contact information, order details, product questions, and information relating to returns, warranties, or customer-support requests.

Please do not provide passwords, Social Security Numbers, full payment-card numbers, or other unnecessary sensitive information during a recorded call.

3.2 Commercial and Transactional Information

Details related to your purchases and interactions with our products or services, including:

Products purchased or viewed
Purchase dates, order history, and payment status
Returns, exchanges, and warranty requests
Shopping cart contents and preferences

(Collected to fulfill orders, manage returns, and improve product offerings.)

3.3 Payment and Financial Information

Information required to process payments securely:

Partial payment card data (last four digits, expiration date)
Payment method type and authorization tokens
Billing address

Usually, we do not store full credit or debit card numbers. If you wish, our third-party payment solution will store your credit card information for you in a password-protected account, which will allow you to checkout more easily next time you order from us. We never share your credit card number or use it for any purpose besides fulfilling your order.

3.4 Device, Technical, and Internet Activity Information

Automatically collected data when you interact with our website or marketing communications:

IP address and general location (city/state level)
Browser type and operating system
Device identifiers and session data
Pages viewed, time spent, referring URLs
Clicks on ads, links, or marketing emails
Cookies, pixels, tags, SDKs, and similar tracking technologies

(Used for site performance, fraud prevention, and analytics.)

3.5 Geolocation Data

Approximate geographic information derived from your IP address or shipping address. We do not collect precise GPS location.

3.6 User-Generated Content and Communications

Any information you voluntarily provide when contacting us or interacting with our brand, such as:

Messages sent to customer service or via online chat
Product reviews and ratings
Social-media comments, photos, or other submissions related to our products

3.7 Marketing and Communication Preferences

Information about your marketing subscriptions and preferences:

Newsletter and SMS opt-in/opt-out status
Interaction history with emails or SMS (open/click data)
Participation in promotions, referral, or loyalty programs

3.8 Privacy Preference Information

We may collect and maintain information about your cookie and privacy choices, including:

cookie category selections;
sale, sharing, and targeted-advertising opt-out selections;
Global Privacy Control or other qualifying opt-out preference signals;
the date and time of a selection;
an associated consent or preference identifier;
browser, device, and approximate location information used to apply the appropriate privacy experience; and
the version of the privacy notice or consent configuration associated with the selection.

We use OneTrust and related website technologies to record, apply, and document these choices.

3.9 Inferences and Advertising Information

We or our advertising and analytics partners may derive information about interests, product preferences, likelihood of engagement, advertising audiences, or similar characteristics from browsing, transaction, and interaction information.

We use this information for analytics, personalization, advertising measurement, and targeted advertising, subject to the choices described in this Policy and on our Your Privacy Choices page.

3.10 Information from Third Parties

We may receive limited information from:

Amazon and Wayfair (order details, shipping data, customer service updates)
Payment and logistics providers (payment confirmation, tracking numbers)
Marketing and analytics partners (aggregated performance metrics, ad campaign results)

We use information received from third parties for the purposes described in this Policy, including order fulfillment, customer support, fraud prevention, analytics, personalization, advertising measurement, and targeted advertising, subject to applicable privacy choices.

3.11 Sensitive Personal Information

We do not seek to collect sensitive personal information beyond what is reasonably necessary to complete transactions, secure customer accounts, prevent fraud, comply with law, and provide requested services.

Payment-card information is generally processed directly by payment providers. We do not intentionally collect Social Security Numbers, government identification documents, precise geolocation, health information, or biometric identifiers.

Although customer-support calls may contain a person’s voice, we do not use call recordings to create voiceprints or derive biometric identifiers for identification or authentication.

3.12 De-identified or Aggregated Information

We may collect and use data that has been de-identified or aggregated so that it no longer identifies any individual. Such information may be used for analytics, business intelligence, and product improvement.

3.13 Categories Collected During the Preceding 12 Months

During the preceding 12 months, we collected the following categories of personal information: Identifiers; Customer records information; Commercial information; Internet or other electronic network activity; Approximate geolocation; Audio, electronic or similar information; Inferences; Sensitive personal information.

Examples: name, email address, telephone number, postal address, IP address, account identifier, cookie or device identifier; contact details, billing information, shipping information and limited payment-related information; products purchased, viewed or considered, cart activity, order history, returns and preferences; browsing activity, page interactions, referral information, advertising interactions and website usage; general location derived from an IP address or delivery address; customer-service calls, chats, messages and other communications, where applicable; product interests, advertising audiences, preferences and similar characteristics; limited payment or account information processed as necessary to complete transactions, prevent fraud or provide requested services.

The sources of this information are described in Section 4, the purposes for which we use it are described in Section 5, and applicable retention periods or criteria are described in Section 11.

4. How We Collect Personal Information

We collect personal information from you and about you in several ways – directly when you provide it to us, automatically when you interact with our digital services, and from third parties such as marketplaces or service providers. Below we explain the main sources and methods of collection.

4.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you interact with us, including when you:

Place an order on our website mammamiacovers.com;
Purchase products through our stores on Amazon or Wayfair;
Create an account or save preferences on our website;
Contact our customer support team by email, phone, or chat;
Subscribe to our newsletter or SMS updates;
Participate in surveys, product reviews, giveaways, or promotions;
Engage with us through social media or other communication channels.

This information typically includes your name, contact details, shipping and billing addresses, payment method, and any other details necessary to fulfill your order or respond to your inquiry.

We also collect information directly from you when you contact our customer-support telephone line. Where call recording is enabled, we provide a recording notice and obtain the applicable consent before recording the conversation.

4.2 Information Collected Automatically

When you visit our website, open our emails, or interact with our digital content, we automatically collect certain information about your device and browsing activity through cookies and similar technologies.

This may include:

IP address and approximate location (city/state level);
Browser type, device identifiers, and operating system;
Pages visited, time spent, referring URLs, and links clicked;
Date, time, and frequency of your visits;
Interactions with emails (opens, clicks);
Session data used to ensure site security and prevent fraud.

We use this information for purposes such as improving website performance, measuring marketing effectiveness, detecting security risks, and providing a personalized shopping experience. You can manage or disable cookies through your browser settings.

We also use OneTrust to detect and record cookie selections, privacy opt-outs, and qualifying browser-based preference signals. OneTrust may process browser and device information, IP-derived approximate location, preference identifiers, selection status, and the date and time of a selection to display the appropriate privacy notice and apply or document your choices.

Additional information about these technologies is available in our Cookie Notice. You may review or change your selections by opening Cookie Preferences.

4.3 Information from Third Parties

We may also receive personal information about you from third-party sources, including:

Amazon and Wayfair, for orders placed through their platforms (e.g., customer name, order details, shipping address, and tracking information);
Payment processors, confirming successful transactions and preventing fraud;
Shipping and logistics providers (e.g., UPS, FedEx, USPS) to update delivery or return statuses;
Marketing and analytics partners that help us measure campaign performance or improve ad relevance (for example, analytics, advertising, communications, and measurement providers, which may include Google, Meta, Microsoft Advertising, TikTok, Pinterest, Klaviyo, and other providers identified in our Cookie Notice);
Customer service tools that assist in managing communications or support requests.
Freshworks / Freshcaller, which provides our cloud telephone and call-management services and may process call recordings, voicemail messages, telephone numbers, call metadata, customer-support notes, and related information on our behalf.

We use information received from these partners only for legitimate business purposes – such as fulfilling orders, providing customer support, or improving our operations – and according to the contracts that govern our relationships with these partners.

4.4 Combined and Derived Information

We may combine information collected from the sources above (for example, linking order data with website usage patterns) to better understand customer preferences, personalize experiences, and improve our products and marketing efforts. We do not use automated decision-making or profiling that produces legal or similarly significant effects without human involvement.

4.5 Children’s Privacy

We do not knowingly collect, use, or disclose personal information from children under the age of 13. Our website and services are intended for a general audience and are not directed to children.

If we become aware that we have inadvertently collected personal information from a child under 13, we will delete such information promptly.

If you are a parent or guardian and believe your child has provided personal information to us without your consent, please contact us at support@mammamiacovers.com, and we will take steps to remove the information.

We do not sell or share personal information of individuals under 16 years of age.

5. How We Use Personal Information

We use the personal information we collect to operate our business, provide our products and services, improve your shopping experience, and comply with applicable laws. The purposes for which we use personal information include the following:

5.1 Order Processing and Fulfillment

We use your information to:

Process and confirm your orders placed through our website, Amazon, or Wayfair;
Communicate order status, shipping updates, and returns;
Manage payments, refunds, and chargebacks through secure, PCI DSS–compliant providers;
Provide post-purchase support;
Provide digital receipts and maintain purchase records for accounting purposes.

5.2 Customer Service and Support

We use personal information to:

Respond to questions, feedback, complaints, and customer-support requests;
Provide assistance through telephone, email, chat, or other communication channels;
Identify orders and customer accounts;
Process returns, exchanges, warranty claims, and replacement requests;
Document communications and commitments made during a support interaction;
Monitor and improve the quality of customer service;
Train and evaluate customer-support personnel;
Investigate disputes, suspected fraud, misuse, or security incidents; and
Comply with applicable legal obligations.

Where you have agreed to call recording, we may record customer-support calls for customer service, quality assurance, training, dispute resolution, security, and compliance purposes.

We do not use call recordings to create voiceprints, identify individuals through biometric voice recognition, or make decisions producing legal or similarly significant effects unless we provide additional notice and obtain any consent required by law.

5.3 Website Functionality and Performance

We use automatically collected data to:

Operate, maintain, and secure our website and digital platforms;
Detect and prevent security incidents, fraudulent activity, or abuse;
Monitor website performance and user experience;
Ensure compatibility with browsers and devices.

5.4 Marketing, Promotions, and Personalization

With appropriate consent where required, we use your information to:

Send marketing emails, newsletters, or SMS updates about new products, offers, and promotions;
Deliver personalized product recommendations or retargeting ads;
Analyze engagement with campaigns and optimize marketing performance;
Manage referral or loyalty programs, giveaways, and promotions.

You may opt out of receiving promotional communications at any time by following the unsubscribe instructions included below, in our emails or texts, or by contacting us directly.

Subject to applicable privacy choices, we may use identifiers, commercial information, internet or network activity, approximate location, and inferences to create or match advertising audiences, measure advertising, attribute transactions to campaigns, personalize advertising, and deliver targeted advertising.

5.5 Analytics and Business Improvement

We use aggregated and anonymized data, as well as limited identifiable information, to:

Analyze sales trends and customer behavior;
Improve website usability and product design;
Develop new offerings and enhance inventory management;
Conduct internal research to better serve our customers.

5.6 Compliance, Legal, and Safety Obligations

We may use or retain personal information as necessary to:

Comply with applicable U.S. laws, tax, and accounting requirements;
Respond to lawful requests by regulators, law enforcement, or courts;
Enforce our Terms of Service, policies, or agreements;
Protect our company, customers, and the public from fraud, misuse, or illegal activities.

5.7 Security and Fraud Prevention

We use information to maintain the security and integrity of our systems by:

Monitoring, detecting, and mitigating fraudulent transactions or unauthorized access;
Using device, network, and behavioral signals to prevent abuse;
Coordinating with payment processors and anti-fraud vendors.

5.8 Business Transfers and Corporate Transactions

If Mamma Mia Covers LLC is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to confidentiality and data-protection safeguards.

5.9 Consent and Limitation

We do not use your personal information for purposes materially different from those described in this Policy without first notifying you or obtaining your consent where required by law.

5.10 Privacy Preference and Consent Management

We use personal information to:

display the privacy notice applicable to a visitor;
record and apply cookie and privacy preferences;
recognize and process qualifying opt-out preference signals;
communicate supported preference selections to our Website and e-commerce technologies;
maintain records demonstrating that a selection or request was received and processed; and
comply with applicable privacy requirements.

6. Marketing Communications (Email and SMS)

6.1 Use of Contact Information and Communications Preferences

The personal information that we collect may include your contact information – your name, postal and e-mail addresses, and telephone number. We may use your contact information for a variety of purposes, including:

Fulfilling your order and notifying you of its status.
Sending you Mamma Mia Covers© catalogs, notices about new products, and special offers we think you’ll find valuable;
Administering a contest or promotion that you have entered on our website;
Sending you complimentary gifts for completing a customer survey on our website;
Setting up your personal password-protected shopping account on our website;
Notifying you occasionally about important changes to our website or services.

Placing an order online will automatically create your account with MammaMiaCovers.com if you select a password during checkout. You may also choose not to have us remember your information. However, having an account will make future checkout quicker and easier.

If you prefer not to receive our special e-mail offers and updates, please do not enter your e-mail address on the catalog request page.

If you are already receiving our special offers and wish to stop, click the unsubscribe link at the bottom of any e-mail you receive, and you will be promptly removed from our list. You may also call us at 1-855-708-0280 or email support@mammamiacovers.com, and we will remove you manually.

We do not sell email addresses in exchange for money. We may disclose limited contact identifiers to service providers or advertising partners for the purposes described in this Policy, subject to applicable contractual restrictions and privacy choices.

If you wish, you can opt out of certain types of communications while continuing to receive others. For example, you may opt out of promotional e-mails while still receiving printed catalogs.

You may update your contact information by calling or emailing our support team. If you have a password-protected account, you can update your information online at any time.

6.2 SMS and Text Message Communications

By subscribing to Mamma Mia Covers© text notifications, you agree to receive automated marketing text messages from us about our products and services at the phone number you provided when you subscribed. Messages may be sent using an automatic telephone dialing system or other technology, and message frequency may vary.

Consent is not a condition of purchase. Message and data rates may apply depending on your mobile carrier. You can opt out of receiving text messages at any time by replying with one of the following commands: STOP, END, CANCEL, UNSUBSCRIBE, or QUIT.

After you send an opt-out request, you may receive a confirmation text message to verify your decision. For assistance, reply HELP or contact our customer support at 1-855-708-0280 or support@mammamiacovers.com.

Please note that attempting to opt out by any other method than texting one of the commands above is not considered a valid or reasonable means of opting out, and your request may not be processed.

Crucial Carrier Compliance Addendum: We do not sell, rent, or share text-messaging originator opt-in data or consent with third parties for their own marketing or promotional purposes. This restriction does not prevent us from disclosing information to service providers that support our text-messaging program, solely as necessary to provide those services and subject to contractual restrictions.

7. Cookies Policy and Similar Technologies

We use cookies and similar technologies, including pixels, tags, web beacons, local storage, software development kits, and device identifiers, to operate and secure the Website, remember selections, understand performance, provide optional functionality, and support advertising.

We use the following OneTrust categories:

Strictly Necessary Cookies;
Performance Cookies;
Functional Cookies; and
Targeting Cookies.

Strictly Necessary Cookies are required for core Website functions and cannot be disabled through our Cookie Preference Center. The other categories may be controlled through the Preference Center.

We use OneTrust to display cookie notices, record and apply selections, and process qualifying browser-based opt-out preference signals. Depending on your location and the applicable configuration, optional technologies may remain disabled until you make a selection.

You can review or change your selections at any time by opening Cookie Preferences.

Where required by applicable law, we process qualifying opt-out preference signals, including Global Privacy Control, as a request to opt out of applicable sale, sharing, or targeted advertising. Such choices generally apply to the browser or device transmitting the signal or on which the selection was made.

For information about cookie categories, providers, purposes, and durations, review our Cookie Notice. To opt out of applicable sale, sharing, and targeted advertising, review our Your Privacy Choices page.

You can also control cookies and tracking preferences in the following ways:

Browser Settings: Most browsers allow you to block or delete cookies. Note that disabling certain cookies may affect the site’s functionality.
Advertising Opt-Out: To manage interest-based advertising, you may visit optout.aboutads.info;
Do Not Track and Global Privacy Control (GPC): We recognize browser-based opt-out signals where required by law (e.g., California).

Cookies have varying lifespans: some expire when you close your browser (session cookies), while others remain for a defined period (persistent cookies). We take appropriate security measures to protect cookie data and ensure it is used only for the purposes described in this Policy.

8. Disclosure of Personal Information

We disclose personal information to service providers, contractors, marketplaces, advertising and analytics partners, and other recipients for the purposes described below. Some advertising-related disclosures may be considered a sale, sharing, or targeted advertising under applicable state privacy laws, as explained in Section 9.

8.1 Disclosure to Service Providers and Contractors

We share personal information with trusted service providers and contractors who perform functions on our behalf and according to our instructions. These entities are contractually required to:

Use the information only for the specific purpose for which it was disclosed;
Implement appropriate privacy and security safeguards; and
Not sell or use the information for their own benefit.

These providers may process personal information on our behalf, including customer contact information, communications, call metadata, and call recordings, only as reasonably necessary to provide the contracted services and subject to applicable contractual restrictions.

Examples include:

Shopify, Inc. – e-commerce platform hosting and order processing;
Payment processors – such as Shop Pay, Shopify Payments, PayPal, Stripe, Apple Pay, Google Pay or Amazon Pay;
Fulfillment and logistics partners – such as UPS, FedEx, USPS, and warehouse providers;
Customer service providers;
Marketing and analytics vendors – such as Klaviyo, Google Analytics, or Meta Ads Manager;
IT and security partners;
Freshworks / Freshcaller – cloud telephone, call routing, voicemail, customer-support call recording, call-management, and related support services.
OneTrust and other consent or privacy preference management providers.

8.1.1 Advertising, Analytics, and Social-Media Partners

We may disclose identifiers, internet or network activity, commercial information, approximate location, and inferences to advertising, analytics, measurement, and social-media partners.

These partners may use the information to measure advertising, attribute transactions, create or match audiences, personalize advertising, or provide targeted advertising. Depending on applicable law and the partner’s role, these disclosures may be considered a sale, sharing, or targeted advertising.

Details about applicable browser-based choices are available on our Your Privacy Choices page.

8.2 Disclosure to Independent Marketplaces

When you purchase through Amazon or Wayfair, those marketplaces act as independent “data controllers” or “businesses” responsible for processing your personal information under their own privacy policies. We receive limited order-related data (such as name, shipping address, email, and purchased products) solely to fulfill your order, provide customer service, and manage returns or warranties. We do not control how Amazon or Wayfair use customer data collected on their platforms.

8.3 Legal and Regulatory Disclosures

We may disclose personal information if required to do so by law or in good faith belief that such action is necessary to:

Comply with legal obligations, court orders, or governmental requests;
Enforce our Terms of Service or other agreements;
Protect our rights, property, or safety, or those of our customers, employees, or the public;
Detect, investigate, and prevent fraud, misuse, or illegal activity.

8.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, personal information may be transferred as part of that transaction, subject to confidentiality and data-protection safeguards. If such a transfer occurs, you will be notified in accordance with applicable laws.

8.5 Aggregated or De-Identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify any individual. This data may be used for research, analytics, product development, and improving our services.

9. Sale or Sharing of Personal Information

We do not sell personal information in exchange for money. However, we use advertising, analytics, measurement, and social-media technologies that disclose personal information to third parties. Under some U.S. state privacy laws, these disclosures may be considered a “sale,” “sharing,” or processing for targeted advertising.

We do not knowingly sell or share the personal information of individuals under 16 years of age.

We do not use or disclose sensitive personal information for the purpose of inferring characteristics about an individual or for targeted advertising. We use limited sensitive information only for purposes such as completing transactions, preventing fraud, providing requested services, and complying with legal obligations.

9.1 No Direct Sale of Personal Information

We do not:

Sell or rent customer lists, contact details, or payment information to any third party;
Exchange personal data for financial benefit;
Share sensitive personal information (such as payment details or account credentials) except as necessary to complete a transaction or comply with law.

9.2 Sharing for Advertising and Analytics Purposes

We may share limited personal information with third-party partners who provide advertising, marketing, and analytics services – for example, Meta (Facebook / Instagram), Google Ads, TikTok Ads, Pinterest, and Klaviyo.

These partners use technologies such as cookies, pixels, and tags to collect information about your interactions with our website and marketing content to:

Deliver relevant advertisements across platforms;
Measure and improve campaign performance;
Understand aggregated customer behavior and preferences.

Such data sharing may be classified as a “sale” or “sharing” under the CPRA. You may opt out at any time by:

Managing your cookie preferences on our website;
Enabling a Global Privacy Control (GPC) signal in your browser – which we honor where required by law;
Following the opt-out instructions described in Section 13 – Your Privacy Rights.

9.3 Disclosures to Service Providers

When we share personal information with Service Providers or Processors (e.g., Shopify, payment gateways such as Shop Pay, Apple Pay, Google Pay, PayPal, or Amazon Pay, logistics partners, or email service vendors), such disclosure is strictly limited to performing services on our behalf. These entities are contractually prohibited from:

Using the information for their own marketing;
Selling or disclosing it outside the scope of our instructions.

Therefore, these disclosures are not considered a “sale” under applicable laws.

10. Data Security

At Mamma Mia Covers©, protecting your information is a priority. We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards are reviewed and adjusted based on the nature of the information, the risks involved, and available security practices.

No method of transmission, storage, or security is completely secure, and we cannot guarantee that unauthorized access or disclosure will never occur.

10.1 Organizational and Administrative Safeguards

We have internal privacy and data-protection policies that define how personal information is collected, stored, and accessed. Only authorized personnel and service providers who need access to perform their duties may handle personal information, and they are required to maintain its confidentiality. Employees receive training on privacy, security awareness, and responsible data handling. We also evaluate our vendors’ privacy and security practices to ensure they meet our standards and contractual obligations.

10.2 Payment Security

When you make a purchase on our website or through third-party platforms, your payment information is processed using secure, industry-standard encryption technologies. We rely on reputable payment providers that comply with applicable payment-card security requirements and we do not intentionally store full payment-card numbers on our own systems. Payment information is generally processed and retained by the applicable payment provider under its own security and compliance obligations. These providers are responsible for safeguarding transaction data and ensuring secure payment authorization.

10.3 User Responsibility

While we take steps to protect your personal information, no online or electronic system is entirely secure. You are responsible for maintaining the confidentiality of your account credentials and for protecting your own devices and networks from unauthorized access. If you believe your account or personal information has been compromised, please contact us immediately at support@mammamiacovers.com.

10.4 Data Breach Notification

In the unlikely event of a data breach involving your personal information, we will take prompt action to investigate and mitigate the incident. If we determine that your information was affected, we will notify you as soon as reasonably possible, consistent with applicable U.S. state privacy laws.

Our notification will include:

a description of the incident;
the categories of information involved;
steps we have taken to protect your data; and
guidance on what you can do to minimize potential risks.

We may also report the incident to relevant regulators or law enforcement authorities where required by law.

11. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including to complete transactions, provide support, comply with our legal and tax obligations, and protect our business and customers. When personal information is no longer needed, we delete or anonymize it in a secure manner. When determining how long to retain data, we consider:

The amount, nature, and sensitivity of the information;
The potential risk of harm from unauthorized use or disclosure;
The purposes for which we collected and processed the data and whether those purposes can be achieved in another way;
Legal, regulatory, and accounting requirements that apply to our operations.

In practice, we retain:

Order and transaction data for the time necessary to meet tax, accounting, and record-keeping requirements – generally up to seven years after your last purchase or interaction.
Customer-account information for as long as the account remains active and up to twelve months after its closure, unless longer retention is required by law.
Payment information: Full payment-card information is generally processed and retained by the applicable payment provider. We may retain limited payment-related information, such as payment method, transaction status, authorization token, billing address, or the last four digits of a card, when reasonably necessary for transaction records, refunds, fraud prevention, and legal compliance.
Marketing and communications data until you withdraw consent or unsubscribe from our emails or texts.
Customer-service records such as support tickets and return requests for approximately three years after the issue is resolved.
Cookies and analytics data retention periods vary depending on the technology. The expected duration of identified cookies is described in our Cookie Notice.
Privacy preference and consent records are retained for as long as reasonably necessary to apply and document your choices, demonstrate compliance, resolve disputes, and meet applicable legal obligations.
Customer-support call recordings: We retain call recordings only for as long as reasonably necessary for customer service, quality assurance, training, dispute resolution, security, and legal compliance. The retention period may depend on the nature of the call, whether the customer-support matter remains open, whether the recording is relevant to a dispute or legal obligation, and our configured retention settings. When a recording is no longer reasonably necessary, it is deleted or de-identified, unless longer retention is required or permitted by law.
Call metadata and support notes: We may retain call dates, durations, telephone numbers, routing information, agent notes, and related support records for a longer period when reasonably necessary to maintain customer-service history, resolve disputes, prevent fraud, or comply with legal requirements.

We may retain some information longer if required to comply with legal or regulatory duties, to resolve disputes, or to enforce our agreements. Once the applicable retention period expires, the data is securely deleted or irreversibly anonymized. Aggregated or statistical information that cannot identify you may be kept for business and research purposes.

12. Processing Locations and International Transfers

Mamma Mia Covers is based in the United States. Personal information is primarily processed in the United States but may also be processed in other locations where our service providers, contractors, marketplaces, or business partners operate.

Privacy and data-protection laws in those locations may differ from the laws of your state. Where required, we use contractual, organizational, and technical measures designed to protect personal information disclosed to service providers acting on our behalf.

Marketplaces, advertising platforms, and other independent third parties may process personal information under their own privacy notices and legal obligations.

You may contact us at support@mammamiacovers.com for additional information about our processing locations.

13. Your Rights Under U.S. Privacy Laws

Depending on your state of residence, the nature of our processing, and whether the applicable law applies to Mamma Mia Covers, you may have one or more of the following rights:

to confirm whether we process your personal information;
to access personal information we maintain about you;
to correct inaccurate personal information;
to request deletion of personal information;
to obtain a portable copy of certain personal information;
to opt out of the sale of personal information;
to opt out of sharing for cross-context behavioral advertising;
to opt out of targeted advertising;
to opt out of certain profiling used for decisions that produce legal or similarly significant effects;
to limit certain uses or disclosures of sensitive personal information, where applicable;
to obtain information about categories or, where applicable, specific third parties to which personal information was disclosed;
to appeal a decision we make regarding a privacy request, where applicable; and
to exercise privacy rights without unlawful discrimination or retaliation.

Subject to applicable law, a privacy request may also apply to identifiable customer-support call recordings and related call information. To help us locate a relevant recording, we may request the telephone number used, the approximate date of the call, and other limited information reasonably necessary to identify the interaction.

These rights are subject to definitions, exceptions, thresholds, and verification requirements under applicable law.

13.1 California Residents (CPRA)

To the extent that the California Consumer Privacy Act applies to Mamma Mia Covers and to the relevant personal information, California residents may have the following rights:

Right to Know - You may request information about the categories of personal information we collect, the sources from which it is collected, the purposes for which we use it, and the categories of third parties with whom we share it.
Right to Access – You may request a copy of the personal information we have collected about you.
Right to Delete – You may request that we delete personal information we have collected from you, subject to certain exceptions (for example, when required for legal or accounting purposes).
Right to Correct – You may request that we correct any inaccurate personal information we maintain about you.
Right to Opt Out of Sale or Sharing – You may opt out of any “sale” or “sharing” of your personal information for cross-context behavioral advertising purposes.
Right to Limit Certain Uses or Disclosures of Sensitive Personal Information – Where applicable, you may request that we limit uses or disclosures of sensitive personal information that go beyond purposes permitted without a right to limit.
Right to Non-Discrimination – We will not discriminate against you for exercising your privacy rights.

The categories of personal information collected are described in Section 3. Sources are described in Section 4, purposes are described in Section 5, disclosures are described in Sections 8 and 9, and retention is described in Section 11. Instructions for exercising these rights are provided in Section 15.

California “Shine the Light” Law. California Civil Code Section 1798.83 may permit California customers to request information regarding personal information disclosed to third parties for their own direct-marketing purposes. We do not disclose customer contact information to third parties for their own direct-mail or email marketing purposes without the applicable permission. However, if you are a California resident and wish to make such an inquiry, please send an email to support@mammamiacovers.com with "California Shine the Light Request" in the subject line.

California residents may exercise these rights as described in Section 15 – How to Exercise Your Rights. If you use an authorized agent to submit a request, we may require verification of both your identity and the agent’s authority.

We do not sell or share the personal information of individuals under the age of 16.

14. Your Choices and Controls

We believe you should have meaningful control over how your personal information is used. You can manage, limit, or withdraw your consent for certain types of data collection and communications at any time.

14.1 Marketing and Promotional Communications

You may choose not to receive our promotional emails or text messages by:

Clicking the “unsubscribe” link at the bottom of any email;
Replying STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to a marketing text message; or
Contacting us directly at support@mammamiacovers.com or 1-855-708-0280.

Even if you opt out of marketing messages, we may still send you transactional or service-related communications, such as order confirmations or updates.

14.2 Cookie Preferences

You may review or change optional cookie selections at any time by opening Cookie Preferences. Strictly Necessary Cookies remain active because they support core Website functions.

Additional information about cookies, providers, purposes, and durations is available in our Cookie Notice.

14.3 Sale, Sharing, and Targeted Advertising

You may opt out of applicable sale, sharing, and targeted advertising through our Your Privacy Choices page.

Where required by applicable law, we also process qualifying opt-out preference signals, including Global Privacy Control. A browser- or device-level choice generally applies only to that browser or device.

Email and text-message opt-outs do not automatically change cookie or targeted-advertising preferences. Cookie and advertising opt-outs do not automatically unsubscribe you from email or text messages.

14.4 Account and Profile Settings

If you maintain an account with us, you may update, correct, or delete certain personal information by logging into your account or contacting our customer support team. You may also close your account at any time, after which we will delete or anonymize your information in accordance with our Data Retention policy.

15. How to Exercise Your Rights

We are committed to helping you exercise your privacy rights in a clear and transparent manner. Whether you are in the United States, you can submit a privacy request using any of the methods described below.

15.1 How to Submit a Request

You may submit a privacy request through one of the following methods:

Online: through the request form on our Your Privacy Choices page;
Email: support@mammamiacovers.com; or
Phone: 1-855-708-0280.

To help us identify the relevant records, please provide your name, email address, state of residence, the type of request, and other reasonably necessary information.

Do not submit passwords, Social Security Numbers, full payment-card numbers, or government identification documents unless we specifically request information through a secure method.

15.2 Verification Process

We may verify access, correction, deletion, or portability requests by matching information supplied with information we maintain and, where appropriate, requesting additional confirmation.

We will not require identity verification for a browser-level opt-out of sale, sharing, or targeted advertising unless reasonably necessary to prevent fraud. A browser-level opt-out may not apply to information associated with another browser, device, account, or offline record.

15.3 Response Time

We will confirm and respond to privacy requests within the period required by applicable law. Many applicable U.S. state laws provide an initial response period of 45 days and permit an extension when reasonably necessary.

Requests to opt out of sale or sharing will be processed as soon as reasonably feasible. Where the California Consumer Privacy Act applies, such requests will be processed no later than 15 business days after receipt.

If we require an extension or additional information, we will notify you as permitted by applicable law.

15.4 Limitations and Exceptions

Certain laws permit or require us to retain or withhold information in specific circumstances, including:

When disclosure would reveal trade secrets, proprietary information, or the personal data of another individual;
When retention is required for legal, accounting, or compliance purposes; or
When deletion would prevent us from completing a transaction or fulfilling a service you requested.

If we deny your request, we will explain the reasons and provide instructions on how to appeal the decision (where applicable).

15.5 Authorized Agents

Where permitted by applicable law, an authorized agent may submit a request on your behalf. We may request reasonable evidence of authorization and may contact you directly to confirm the authorization.

We will not require authorization documents for an ordinary browser-level cookie or advertising opt-out made directly through our Website.

15.6 Appeals

If we deny a privacy request and applicable law provides a right to appeal, you may submit an appeal through our privacy request form or email support@mammamiacovers.com with the subject line “Privacy Rights Appeal.”

Please include the reference number or details of the original request and explain why you believe the decision should be reconsidered.

We will respond within the period required by applicable law. If an appeal is denied, we will provide information about contacting the appropriate state regulator where required.

16. Third-Party Websites and Services

Our Website may integrate with third-party platforms, applications, and technologies, including Shopify, payment providers, OneTrust, customer-support tools, product-review tools, analytics providers, advertising platforms, and social-media services.

Some providers process personal information only on our behalf, while others may process information for their own purposes under their own privacy notices. The role of a provider may depend on the service and applicable law.

16.1 Independent Privacy Practices

These third parties have their own privacy policies, terms of service, and data-handling practices, which may differ from ours. We are not responsible for the privacy, security, or information practices of these entities, and we encourage you to review their respective privacy notices before providing any personal information.

16.2 Embedded and Linked Services

Our website may include embedded content or features (such as product reviews, videos, or “share” buttons) that allow interaction with external platforms. When you engage with such features, your information may be collected directly by the third party – not by Mamma Mia Covers©.

For example, if you click on a social-media link or interact with an ad, the respective platform may collect information about your visit and use it according to its own policies.

16.3 Payment and Fulfillment Partners

Orders placed through Shopify, Amazon, or Wayfair are processed and fulfilled in part by those platforms. Each of these partners is independently responsible for the personal information they collect during checkout, payment processing, or order management. Please refer to their privacy policies for details about how they handle your data.

16.4 External Links Disclaimer

Links to other websites or platforms are provided for your convenience and do not imply endorsement or control of their content or privacy practices. Accessing those sites or using their services is at your own discretion and subject to their respective terms.

17. Non-Discrimination

Deny you access to our products or services;
Charge you different prices or rates for goods or services;
Provide you with a different level or quality of service; or
Suggest that you may receive a different price or level of service if you exercise your privacy rights.

However, as permitted by law, we may offer certain financial incentives, discounts, or promotional programs that relate to the collection or use of personal information. Participation in such programs is entirely voluntary, and you may opt in or opt out at any time. When we offer these programs, we will provide a clear explanation of their terms, the categories of personal information involved, and how the value of your data is reasonably related to the offer.

Exercising a browser-level opt-out or rejecting optional cookies will not prevent you from purchasing products or using the core functions of our Website. Some optional personalization, analytics, embedded content, or advertising features may become unavailable or operate differently.

18. Accessibility

We are committed to making our privacy practices accessible and understandable to all individuals, including those with disabilities.

If you require assistance in reviewing this Privacy Policy or need it in an alternative format, please contact us at support@mammamiacovers.com or 1-855-708-0280, and we will make reasonable efforts to accommodate your request.

We continually work to improve the accessibility and usability of our website and digital content so that everyone, regardless of ability, can have a positive experience. If you encounter any accessibility barriers or have feedback about how we can improve, we encourage you to contact us using the details above.

19. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

When we make material changes, we will update the “Last Updated” date at the top of this page and, where required by law, notify you by email or through a notice on our website before the changes take effect.

We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

Changes to this Policy become effective when posted, unless another date is stated or applicable law requires a different process.

When required, we will provide additional notice or obtain consent before applying a material change to information previously collected.

We encourage you to review the “Last Updated” date periodically.