Privacy policy

Privacy Policy

Last updated: October 1, 2026

Miracle Tree (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit or make a purchase from www.miracletree.org.

---

1. Information We Collect

Personal Information You Provide

We may collect:

• Name, billing and shipping address

• Email address and phone number

• Payment information (processed securely by third-party providers; we do not store full payment details)

• Account credentials

• Communications with us (email, SMS, contact forms)

Automatically Collected Information

When you browse our site, we may automatically collect:

• IP address

• Browser type and device information

• Pages visited, referring URLs, and interaction data

• Cookies and similar tracking technologies

---

2. How We Use Your Information

We use your information to:

• Process orders, payments, subscriptions, pre-orders, and returns

• Provide customer support

• Send transactional and marketing communications (email/SMS, where permitted)

• Improve website functionality and user experience

• Prevent fraud and ensure platform security

• Comply with legal and regulatory obligations

---

3. Cookies & Tracking Technologies

We use cookies and similar technologies for:

• Essential site functionality

• Analytics and performance

• Marketing and advertising (where consent is required)

You can manage cookie preferences through your browser settings. Disabling cookies may affect site functionality.

---

3A. Cookie Consent & EU Compliance

For users in the European Economic Area (EEA), United Kingdom, and similar jurisdictions:

• We display a cookie consent banner prior to placing non-essential cookies
• You may accept, reject, or customize preferences at any time
• Essential cookies remain active as required for site operation

---

3B. Do Not Track Signals

Some browsers provide a legacy “Do Not Track” (DNT) signal. There is still no universally accepted technical standard for how a site should interpret DNT, so our website does not respond to the DNT header specifically. We may update this if a standard emerges.

This does not apply to the Global Privacy Control (GPC). GPC is a different and standardised signal, and we do honour it as an opt-out of the sale or sharing of personal information wherever the law recognises it — see Section 4A. If you want to opt out using a browser signal, use GPC rather than DNT.

---

4. Sharing Your Information

We may share your information with trusted third parties, including:

• Shopify (e-commerce platform)

• Payment processors (e.g., Stripe, Shopify Payments)

• Shipping and fulfillment partners

• Email and SMS service providers

• Analytics platforms (e.g., Google Analytics)

• Advertising and marketing partners (e.g., Meta, Google Ads, TikTok)

Service providers and processors may only use your information to perform services on our behalf. Advertising partners are different: as described in Section 4A, they also use the online identifiers we disclose to them for their own advertising and measurement purposes.

We do not sell personal information for monetary consideration.

---

4A. Sale and Sharing (CPRA Disclosure)

Under CPRA, “sale” and “sharing” are defined broadly and include disclosing personal information for cross-context behavioral advertising, whether or not money changes hands.

• We do not sell personal information for monetary value
• We do share online identifiers — such as cookie identifiers, device identifiers, and IP address, together with the pages you view and the purchases you make on our site — with advertising and measurement partners including Meta, Google, and TikTok, so that advertising can be targeted and measured across other websites and apps
• Under CCPA/CPRA this is a “sale” and/or “sharing” of personal information; comparable laws in other US states treat it as targeted advertising

Your right to opt out

You may direct us to stop this sharing at any time, free of charge and without any effect on the price or quality of anything you buy from us.

To opt out, use any of these:

• The Your Privacy Choices page, linked from the footer of every page on this site, and submit the opt-out form there
• Browsing with the Global Privacy Control (GPC) preference signal enabled. Where you are in a jurisdiction that recognises it, we treat a GPC signal as a request to opt out of the sale or sharing of personal information for the browser and device you are using
• Emailing hello@miracletree.org with the subject line “Do Not Sell or Share My Personal Information,” including the email address associated with your orders so that we can locate your record
• Rejecting, blocking, or clearing advertising and non-essential cookies in your browser or device settings, which prevents the identifiers used for this sharing from being set on that browser or device

We do not require an account to submit an opt-out request, we do not charge for it, and we will not discriminate against you for making one. An authorized agent may submit a request on your behalf.

California residents may:

• Opt out of the “sale” or “sharing” of personal information
• Request access, correction, or deletion
• Exercise rights without discrimination

Requests can be submitted to hello@miracletree.org.

---

5. SMS & Email Marketing

By opting in to email or SMS communications, you consent to receive messages from us.

• Message frequency varies

• Message & data rates may apply

• You may opt out at any time by clicking “unsubscribe” or replying STOP to SMS messages

Consent is not a condition of purchase.

---

6. Data Retention

We retain personal information only as long as necessary to:

• Fulfill contractual and legal obligations

• Resolve disputes

• Enforce policies

Retention periods vary depending on data type and legal requirements.

Typical Retention Periods:

• Orders & transactions: up to 7 years
• Customer accounts: duration of account + reasonable period
• Support communications: 2–3 years
• Marketing data: until opt-out or withdrawal of consent
• Analytics data: 12–26 months

---

6A. Data Minimization

We retain only the data necessary for defined purposes and securely delete or anonymize data when no longer required.

---

7. Security

We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no method of transmission over the Internet is 100% secure.

---

8. Your Rights (GDPR & International Users)

Depending on your location, you may have the right to:

• Access your personal data

• Correct or delete your data

• Restrict or object to processing

• Data portability

• Withdraw consent

Requests may be submitted to hello@miracletree.org.

---

8A. Legal Basis for Processing (GDPR)

We process data under:

• Contractual necessity (orders, payments)
• Legitimate interests (security, analytics, improvement)
• Consent (marketing, cookies where required)
• Legal obligations

---

8B. Automated Decision-Making & Profiling (GDPR)

We may use automated processing (including profiling) for:

• Fraud detection and prevention
• Marketing personalization and advertising optimization

These processes do not produce legal or similarly significant effects on individuals.
You may object to such processing by contacting us.

---

9. California Privacy Rights (CCPA / CPRA)

California residents have the right to:

• Know what personal information we collect and why

• Request access or deletion of personal information

• Correct inaccurate personal information

• Limit the use of sensitive personal information, where applicable

• Opt out of the sale or sharing of personal information for cross-context behavioral advertising

• Non-discrimination for exercising privacy rights

As explained in Section 4, we do share online identifiers with advertising partners for targeted advertising, which CCPA/CPRA treats as a “sale” and/or “sharing.” To opt out, use the Your Privacy Choices page linked in our footer, browse with the Global Privacy Control (GPC) signal enabled, or email hello@miracletree.org with the subject line “Do Not Sell or Share My Personal Information.” Our full Privacy Notice for California Residents describes these rights and how to exercise them in more detail.

Requests may be submitted to hello@miracletree.org.
We may verify your identity before processing requests, and we respond within 45 days (extendable to 90 days where permitted).

---

9A. Sensitive Personal Information (CPRA)

We do not use or disclose sensitive personal information (as defined under CPRA) for purposes beyond:

• Providing requested services
• Processing transactions
• Ensuring security and fraud prevention
• Complying with legal obligations

We do not use sensitive personal information for profiling or behavioral advertising.

---

10. Children’s Privacy

Our website is not intended for individuals under the age of 13. We do not knowingly collect personal information from children.

---

11. International Transfers

If you access our site outside the United States, your information may be transferred to and processed in the U.S. or other jurisdictions with different data protection laws.

---

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last Updated” date. Continued use of the site constitutes acceptance of the updated policy.

---

13. Contact Us

Miracle Tree
1000 5th St., Ste. 200-E9
Miami Beach, FL 33139, USA
📧 hello@miracletree.org
📞 +1 (888) 590-1555