Effective and last updated: October 30, 2026
This policy explains how Maker & Moss (“we”, “us”) collects, uses and shares personal information, online and offline: when you visit makerandmoss.com, shop through our checkout at shop.makerandmoss.com, contact us, apply to our trade program, or work with us on a design project. It also explains the choices and rights you have.
Maker & Moss is an interior design studio and furniture shop at 2800 Van Ness Ave, San Francisco, CA 94109. For privacy questions or requests, email design@makerandmoss.com or call (415) 928-1287.
You don’t have to give us personal information, but if you don’t, we may not be able to answer your inquiry, process your order or review your trade application.
When you use our site and emails, we and our partners collect:
Some of this is always collected because the site can’t work without it. For example, your IP address and browser information reach our hosting and delivery providers, and your cart and searches are processed by Shopify. The rest (analytics and marketing) depends on your choices in Your Privacy Choices.
We don’t collect, use or sell personal information to train large language models. We don’t use automated processing alone to make decisions about you that have legal or similarly significant effects.
Cookies are small files a website stores in your browser. We and our partners also use similar technologies, such as pixels, scripts and browser storage. We group them by purpose:
In Your Privacy Choices, at the bottom of any page, you can turn Analytics, Marketing and Preferences on or off, and opt out of the sale or sharing of your personal information. Required technologies can’t be turned off there.
How the defaults work:
You can also block or delete cookies in your browser settings. If you block Required cookies, the cart, checkout and account may not work.
When you make or change a choice in the cookie banner or in Your Privacy Choices, or when Shopify applies a Global Privacy Control signal, our server keeps a record of it in private storage at Cloudflare. A record holds details such as your consent ID (a random identifier that Shopify stores in your browser), your choices before and after the change, your approximate region, where and when the choice was made, and the version of our site. It doesn’t include your name, email address or IP address. Shopify issues a new consent ID each time you visit, so we can link a record to you only if you give us the consent ID your browser held when you made that choice.
We keep these records so we can show what you chose and when. European data protection law requires us to be able to show this, and Google’s EU user consent policy requires us to keep these records. We delete each record after 3 years.
When Marketing is allowed, other companies, including Meta, Google and Pinterest, may use cookies, pixels, web beacons and other storage technologies to collect or receive information from our site and elsewhere on the Internet, over time and across different websites and apps. They use it to provide measurement services and to target and deliver ads. Third-party vendors, including Google, show our ads on sites across the Internet, and use cookies to show you ads based on your earlier visits to our site or other sites. Google receives information about your use of our site through the Google Ads tag and Google Analytics; see How Google uses information from sites or apps that use our services.
You can opt out:
We share personal information with these companies and people, only as needed for the purposes above:
We do not share personal information with other companies for their own direct marketing.
We don’t sell personal information for money. But some U.S. state laws call certain advertising uses a “sale”, “sharing” (California’s term for using information for cross-context behavioral advertising) or “targeted advertising”, even when no money changes hands.
When Marketing is allowed, we let three advertising platforms, Meta Platforms, Inc., Google LLC and Pinterest, Inc., collect identifiers (such as cookie IDs and IP address), internet activity (pages and products you view and items you add to your cart) and approximate location from our shop pages. On our checkout, the Facebook & Instagram app, which Meta provides for Shopify stores, sends Meta your checkout and purchase events, with your name, email address, phone number and city, state and ZIP code in hashed (scrambled) form. The Pinterest app also sends Pinterest your checkout and purchase events. If you have opted out of sale or sharing, including with Global Privacy Control, Shopify doesn’t run either app’s pixel during your checkout. To also cover what is sent to Meta from Shopify’s servers, opt out by email as described below. We do this to measure our ads and to show you ads on Facebook, Instagram, Google and Pinterest. We treat this as “sharing” and “targeted advertising”, and as a “sale” where a state defines it that way. Shopify also uses information from our store, together with information from other Shopify stores, for services that include targeted advertising (Shopify Network Intelligence). If you opt out of sale or sharing, Shopify doesn’t use your activity on our store for advertising through those services. Meta, Google, Pinterest and Shopify are the only companies we sell or share personal information with. We will update this policy before we add any other.
How to opt out
Opting out on our site, or with GPC, applies to the browser and device you’re using. We act on it immediately. We act on requests by email or phone within 15 business days. You don’t need to verify your identity to opt out. An authorized agent can opt out for you with your signed permission.
We don’t knowingly sell or share the personal information of anyone under 18, or use it for targeted advertising.
Browsers’ “Do Not Track” setting has no agreed standard, so we do not respond to it. We do honor Global Privacy Control as described above.
You can ask us to:
We won’t discriminate or retaliate against you for using these rights. You can also review and update your name, addresses and other details yourself by signing in to your account.
How to ask. Email design@makerandmoss.com or call (415) 928-1287.
What happens next.We’ll respond within 45 days. If we need more time, we’ll tell you why within those 45 days and may take up to 45 more. To protect you, we verify requests to know, correct or delete by matching at least two pieces of information you give us (for example, your email address and a recent order number) with what we hold. If you have an account, we may ask you to sign in. We don’t need to verify opt-out requests.
Appeals. If we decline your request, you can appeal by replying to our decision, or by emailing design@makerandmoss.comwith the subject “Appeal”. We’ll respond in writing within 60 days and explain our decision. If you disagree, you can contact your state attorney general.
Maker & Moss is the controller of your personal information. We rely on these legal bases:
You have the right to access, correct, delete, restrict or object to our use of your personal information, and to receive a copy of it in a portable format.
Your right to object. Where we rely on legitimate interests, you can object at any time on grounds relating to your situation. You can object to direct marketing at any time, including by unsubscribing.
Meta.When Marketing is allowed, Meta’s tools on our shop pages and checkout (the Meta Pixel, Meta’s Conversions API and the Facebook & Instagram app) collect information about your visit and send it to Meta. For that collection and transmission, we and Meta are joint controllers: Meta Platforms Ireland Limited under Meta’s Controller Addendum or, if you live in the UK, Meta Platforms, Inc. under Meta’s UK Controller Addendum. We are responsible for asking for your consent and for telling you about it here; Meta is responsible for answering your requests about the data once it has it, and for what it does with it afterwards, as described in Meta’s Privacy Policy. You can exercise your rights about this joint processing with us or with Meta.
Complaints.You can complain to your local data protection authority; in the UK, the Information Commissioner’s Office; in Switzerland, the Federal Data Protection and Information Commissioner.
We’re based in the United States. If you use our site from outside the U.S., we collect your information directly in the U.S., where we and our service providers store and process it; some providers also process it in other countries. U.S. law may not protect personal information in the same way as the law where you live.
We use safeguards such as encrypted connections (HTTPS), access controls, and private storage for uploaded files and records of your privacy choices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Our site is not directed to children under 13, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
Our site links to other websites, such as Instagram, Pinterest and our returns portal. Their own privacy policies apply when you visit them.
We may update this policy. When we do, we will change the date at the top. If the changes are significant, we will tell you on our site.