PRIVACY POLICY
Privacy Policy
Effective Date: August 1, 2025
Business Name: The Mystic District
Contact Email: support@mysticdistrict.co
At The Mystic District, we value the privacy and trust of our community. Whether you are browsing our enchanted listings, planning a magical journey, or promoting your witchy business, we are committed to protecting your personal data.
This Privacy Policy outlines how we collect, use, store, and share your information in compliance with applicable privacy laws such as the General Data Protection Regulation (GDPR) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
Information We Collect
We collect personal data in the following ways:
Information You Provide
- Name, email address, and business details when you submit a listing or fill out a form
- Payment information (processed securely via Stripe)
- Information related to itinerary planning or service inquiries
- Email preferences when you subscribe to our newsletters or SMS marketing
Information We Collect Automatically
- IP address, browser type, and device information
- Site usage data via Google Analytics, including pages viewed, time spent, and referral URLs
- Cookie data and other tracking technologies (see section on cookies)
How We Use Your Information
We use your data to:
- Publish and manage your business listing
- Respond to inquiries or service requests
- Process payments securely
- Send updates, newsletters, or promotional emails (only with your consent)
- Analyze website traffic and improve functionality
We do not sell or trade your personal data. Any third-party access is limited to service providers under contract and bound by strict data protection obligations.
Third-Party Services
We use trusted third-party platforms to support our services:
- Stripe: Processes payment information (we do not store credit card details)
- Google Analytics: Tracks website usage and performance metrics
- Klaviyo: Manages email subscriptions and marketing campaigns
Each provider maintains its own privacy practices, which we encourage you to review.
Lawful Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the context, including:
- Consent – for email marketing, cookie tracking, and newsletters
- Contract – when you purchase a listing or request a service
- Legal obligation – to comply with tax, financial, or regulatory requirements
- Legitimate interests – to operate, grow, and secure our platform (provided those interests do not override your rights)
You may withdraw your consent at any time.
Your Data Rights (GDPR & PIPEDA)
You have the right to:
- Access, update, or correct your personal information
- Request erasure of your data (“right to be forgotten”)
- Restrict or object to processing in certain contexts
- Withdraw consent for marketing communications
- Lodge a complaint with a data protection authority
To exercise any of these rights, contact us at: support@mysticdistrict.co
Cookies & Tracking Technologies
We use cookies and similar technologies to:
- Understand user behavior on our website
- Improve site performance and user experience
- Support secure logins and session functionality
You can manage cookie preferences through your browser settings or by using third-party tools such as:
- Google Analytics Opt-out
- Browser-based cookie controls (Chrome, Firefox, Safari, etc.)
By using our site, you consent to our use of cookies unless you disable them.
Data Storage & International Transfers
Your personal data may be stored or processed in countries outside your own, including the United States and Canada, where our service providers operate. We ensure that appropriate safeguards are in place to protect your data, including adherence to the EU Standard Contractual Clauses where applicable.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purpose it was collected for—such as account management, legal compliance, or resolving disputes. You may request deletion at any time, subject to applicable legal requirements.
Children’s Privacy
Our services are not directed toward individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us for prompt removal.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify users via our website or email. Continued use of the site after changes are posted constitutes acceptance of the revised policy.
Contact Us
For questions about this policy or how your data is handled, please contact: