Privacy policy.
Plain English. What we collect, why, and what you can do about it. Last updated 2026-04-21.
The short version
- We collect what we need to sell you hemp smokes and ship them to you. Nothing more.
- We don't sell your data.
- You can email us and have your account + data deleted at any time.
What we collect
- Account info: name, email, phone, billing + shipping addresses
- Order info: what you bought, when, at what price, shipment tracking
- Payment info: we do not store credit card numbers. Our payment processor (Bankful) handles that under PCI-DSS compliance
- Site analytics: how you got to the site, which pages you viewed, what device and browser, so we can fix what's broken and improve what isn't
- Marketing preferences: whether you opted in to emails or SMS
How we use it
- To process your order, charge your card, and ship your package
- To send you order confirmations, shipping updates, and receipts
- To respond when you email us
- To send you marketing emails only if you opted in. You can unsubscribe at any time with the link at the bottom of every email
- To detect fraud and protect the site from abuse
- To comply with legal and regulatory requirements
Who we share it with
We share data only with the companies we need to run the business:
- Bankful: payment processing
- Klaviyo: email and SMS marketing (if you opted in)
- Shipping carriers: USPS, UPS, FedEx for delivery
- Supabase: our database host
- Netlify: our web host
Each of these has its own privacy commitments. We never sell your data to third parties for their marketing purposes.
Cookies
We use a small number of cookies. An age-gate cookie remembers that you're 21+. A cart session cookie lets us remember what's in your cart between pages. An analytics cookie tells us which pages are most visited. None of them are used for cross-site tracking.
Your rights
Regardless of where you live, you can:
- Ask for a copy of the data we hold about you
- Ask us to correct any incorrect data
- Ask us to delete your account and all associated data
- Opt out of marketing emails or SMS at any time
California residents and EU residents have additional rights under CCPA and GDPR, including the right to know what personal information we sell or share (we don't) and the right to opt out of automated decision-making.
Data sharing opt-out
To opt out of any data sharing or to request deletion, email support@fullmoonsclub.com. We respond within 30 days.
Children
Full Moons Club is 21+. We do not knowingly collect data from anyone under 21. If you believe a minor has used our site, contact us and we will delete the account immediately.
Changes to this policy
We'll update this page if anything material changes. The "Last updated" date at the top of the page will reflect the most recent revision.
Contact
Questions about privacy? Email support@fullmoonsclub.com.