You control optional storage on this site
This privacy policy explains inquiry records, advertising identifiers and Consent Mode v2 at Moss Home Goods. You can ask for your information without accepting advertising storage.
You can find the main answers here before reading the full policy
| Who is responsible? | Mosshomesgoods, trading at mosshomesgoods.com; the public store name is Moss Home Goods. |
| Where are we? | 52 Portland St, Morrisville, Vermont 05661, Morrisville, Vermont, United States |
| What is recorded? | Inquiry details, chat conversations, technical request information and consent choices. Advertising links carry click identifiers. |
| How long? | Inquiries and email copies: 18 months. Chats: 12 months. Logs: 60 days. Consent records: 12 months. |
| Who receives it? | The store, hosting and mail providers, and Google, Microsoft and Meta for the advertising purposes described below. |
| What starts denied? | Advertising storage, advertising user data, personalization and analytics storage remain denied until you allow storage. |
| How do I get a copy? | Use the data request instructions. We answer within 7 days. |
| Who can help? | Email the store desk or call 802-851-8461. |
Mosshomesgoods is responsible for the personal information you send through this store website
The controller is Mosshomesgoods, trading at mosshomesgoods.com. Our postal address is 52 Portland St, Morrisville, Vermont 05661, Morrisville, Vermont, United States. Moss Home Goods is the store name used on these pages. Maria, Store Manager since 2026, handles store inquiries.
This policy covers this website and the inquiry and support records created through it. The catalogue is inquiry-only. No account or password is created, nothing is sold through an online checkout, and this site takes no payment or card data. The terms of service explain the separate process for discussing a piece with the store.
We receive the details you submit and technical information associated with your visit
The inquiry form records your name, phone, email, address, the kind of inquiry, your message, the requested specification and your consent tick. You provide either a phone number or an email address so the desk can reply; neither is individually compulsory. Do not include card numbers or sensitive personal documents in a furniture inquiry.
With the inquiry, the server records your IP address, browser user-agent string, referring URL, the moment the form was rendered and the moment it was sent. These records help distinguish a genuine request from repeated or automated submissions. Server and access logs also contain technical request information needed to operate the site.
Support chat keeps the conversation and a token in your browser so you can return to it. Your consent choice is stored under site_consent_v2; no other storage key on this site persists that choice. Cookie and advertising identifiers include gclid, msclkid and fbclid carried on paid links. A referring URL can contain campaign information, so avoid putting private information in a link you send.
We use inquiry details to answer your question rather than create an online account
Your contact information provides a reply route. Your requested specification and message tell the desk which piece you mean and which dimensions or material details need checking. An address supplied in an inquiry helps discuss collection or delivery arrangements; it does not initiate a shipment.
Chat records keep an ongoing conversation intelligible when you return. Technical records support form validation, fault diagnosis and abuse prevention. The consent record preserves your storage choice between visits. Advertising identifiers and permitted measurement help relate visits or inquiries to campaigns and assess advertising performance. Accepting an inquiry-processing checkbox is not permission for advertising storage.
Different uses of personal data depend on different legal grounds under applicable law
US state privacy law applies according to the relevant law’s scope. For visitors from Europe, the following bases explain how we approach processing under the GDPR. A necessary service record does not become an optional advertising record merely because the same browser produced it.
| Purpose | Data involved | Basis |
|---|---|---|
| Answer a requested inquiry | Contact details, message and specification | Steps toward a contract at your request; consent for the submitted inquiry record |
| Continue support chat | Conversation and browser token | Consent and providing the service you request |
| Protect site operation | IP address, user agent, logs and submission times | Legitimate interest in preventing abuse and diagnosing errors |
| Remember privacy choice | Consent state | Legitimate interest in honoring your choice and meeting applicable consent duties |
| Optional advertising and analytics | Click identifiers and permitted measurement data | Consent, subject to opt-out rights |
| Handle a rights request | Request and proportionate identity checks | Legal obligation where applicable |
You may object to processing based on legitimate interest. We consider the reason given and any overriding legal need before deciding whether that processing can continue. Withdrawing optional consent does not prevent the store from replying to an inquiry you have asked it to handle.
Paid advertising links identify the campaign that brought a visitor to our website
Google Ads, Microsoft Advertising and Meta Ads send traffic here today. Google attaches gclid, Microsoft attaches msclkid, and Meta attaches fbclid. These identifiers distinguish advertising clicks; they are not your store account number and do not constitute an order.
The google ads and microsoft advertising measurement routes use the consent state described below. Meta advertising also remains subject to your storage choice and applicable opt-out rights. A click identifier can already be present in the incoming URL before you choose a preference. Its arrival does not give permission to persist it for optional tracking.
Your storage decision controls the consent signals sent to advertising and analytics systems
Consent Mode v2 holds ad_storage, ad_user_data, ad_personalization and analytics_storage denied until you select “Allow Storage.” The consent mode signals are set back to denied the moment you decline or withdraw. Closing a panel, scrolling or continuing to read is not affirmative permission.
Use “Cookie Preferences” in the footer to reopen the choice and select “Decline” to withdraw. Denied storage is not a claim that the server receives no request information or that consent signals cannot be transmitted. Necessary operation and consent-state communication remain distinct from permission to store advertising identifiers. Read the cookie notice for the browser-storage inventory.
Service providers handle specific records needed to run the site and measure permitted campaigns
Google Ireland Ltd / Google LLC provides Google Ads, attaches gclid to advertising clicks and receives consent signals. Microsoft Ireland Operations Ltd provides Microsoft Advertising and attaches msclkid. Its handling is explained at privacy.microsoft.com, the Microsoft privacy statement. Meta Platforms Ireland Ltd provides Meta Ads and attaches fbclid for its campaigns.
The hosting provider serves this site and stores the inquiry database. The mail provider carries inquiry notifications to the operator’s inbox, creating email copies of the inquiry. These providers receive the information needed for those functions. The advertising companies can also act under their own privacy terms; they are not all acting solely as processors for the store. Ask the desk for current hosting or mail-provider details rather than assuming an advertising platform stores our inquiry database.
A visit from outside the United States can involve processing across national borders
The store operates in the United States. Sending an inquiry from Europe therefore involves sending information outside your country, and advertising or service providers can process information in other countries through their operations. Local privacy protections may differ from those where you live.
Where European transfer rules apply, a transfer requires an applicable lawful mechanism, such as an adequacy decision or standard contractual clauses with any necessary supplementary safeguards. Your use of the website alone is not a substitute for that mechanism. Contact us for information about the transfer safeguards relevant to your record; this notice does not claim that the store holds a transfer certification.
We keep each category for a stated period rather than leaving records open ended
- Inquiries and their email copies are retained for 18 months.
- Chat transcripts are retained for 12 months.
- Server and access logs are retained for 60 days.
- The record of a consent choice is retained for 12 months.
Browser storage and the server record are separate. Removing a chat token from your browser does not delete the transcript held by the store. Likewise, clearing your browser does not erase an inquiry email already sent. Use the data request route below when you want the underlying record reviewed or removed, not merely the local browser entry.
We limit inquiry handling to its operational purpose and check submissions for misuse
The site uses HTTPS for transmission. Submission validation, timing information and anti-spam fields help reject malformed or automated inquiries. The public website does not offer an account login or a payment form, which avoids collecting passwords or card information for a catalogue inquiry.
Staff and service providers should access records only for their assigned tasks. No internet transmission or storage system is risk-free. If you believe a message exposes somebody else’s information, tell the desk without forwarding unnecessary copies. We will use the details you provide to investigate and take the action required by applicable law.
Visitors from Europe can ask us to apply the rights available under the GDPR
Where the General Data Protection Regulation applies, your gdpr rights include access to personal data, rectification of inaccurate information, erasure, restriction of processing, portability of eligible information and objection to processing. You may withdraw consent at any time without changing the lawfulness of processing that occurred before withdrawal.
Portability applies to eligible information processed by automated means on consent or contract grounds. Erasure and restriction are not unconditional: a legal duty or a need to establish or defend a claim can affect the result. We explain any applicable limitation rather than treating an unsuccessful deletion request as a reason to ignore your other rights.
Applicable state laws provide rights over your data including California sale and sharing choices
California residents have rights under the CCPA/CPRA, subject to its applicability and exceptions. These include knowing or accessing personal information, correcting inaccuracies, requesting deletion and opting out of sale or sharing, including sharing for cross-context behavioral advertising. The ccpa framework also protects eligible requests from unlawful discrimination and provides rights concerning certain uses of sensitive information.
Other US state laws in force can provide access, correction, deletion, portability and opt-outs from targeted advertising or sale, as well as an appeal where required. Advertising disclosures can fall within statutory “sharing” even without a cash payment. To opt out, decline optional storage or contact us; you do not need to purchase anything. If an authorized agent acts for you, we may request evidence of that authority and a proportionate identity check.
Your browser’s Global Privacy Control signal is treated as an opt-out without another prompt
We honor global privacy control through the Sec-GPC header as an opt-out without asking again. This applies to optional advertising sharing and storage covered by that signal. It does not stop the server from delivering a page or prevent you from contacting the store.
A browser signal applies to the browser sending it. To make a request concerning an inquiry already stored, contact us with the reply details used for that inquiry. We do not require you to disable the signal before we answer.
This store website is intended for adults rather than collecting information from children
We do not direct this site to children or knowingly collect their personal information. An adult should handle a household goods inquiry. If you believe a child has submitted personal details, contact the desk so we can identify and remove the record.
Please do not send additional sensitive information about a child to prove the point. Begin with the approximate submission time and the contact route used, and we will explain any further information needed.
You can raise a privacy complaint with us or the appropriate public authority
You may complain to your state Attorney General, and California residents may contact the California Privacy Protection Agency. Visitors from Europe may complain to their competent data protection authority, including the authority where they habitually reside or work or where an alleged infringement occurred.
You do not have to complete a store complaint before contacting an authority. If you ask us to reconsider a rights decision, explain the decision you dispute and any information we missed. We will consider an appeal where applicable law provides one.
You can request a copy or deletion by writing directly to the store desk
Send your data request to [email protected], or write to Mosshomesgoods, 52 Portland St, Morrisville, Vermont 05661, Morrisville, Vermont, United States. We answer within 7 days.
Say whether you want access, correction, deletion or another privacy action. Include the email or phone used for your inquiry and enough context to locate it, such as the item discussed. Do not send identification documents or passwords with the initial request.
We may check that you control the reply address or ask for limited additional information to avoid disclosing a record to the wrong person. If we cannot complete the action, our answer explains why and what can happen next. A browser preference change takes effect separately from a request concerning records already held.
Send a data requestWe identify policy revisions here so you can see which notice currently applies
We publish changes on this page and revise the last-updated date at the top. A material change affecting a consent-based use requires the appropriate notice and, where required, a renewed choice. A revised paragraph alone does not turn an earlier decline into consent.
The date on this policy is not an expiry date for your rights. Keep a copy if you need a record of the wording that applied when you contacted the store.
A person at the store can answer questions about your information and privacy choices
Email [email protected] or call 802-851-8461. The postal address is 52 Portland St, Morrisville, Vermont 05661, Morrisville, Vermont, United States. Identify your message as a privacy question so it is not confused with a stock inquiry.
For a visit or a product question, use Contact & Visit. For browser settings, read the cookie notice. The showroom information explains who handles the goods and the desk.