Our store will be closed until the end of the week for [Thanksgiving/Christmas/New Year]. We are happy to inform you that all of your emails will be answered once we are back on [date].
But this absence of basic travel cybersecurity is a problem. Email is the number one threat vector for socially engineered attacks. An automatic reply message not only sends the information to designated contacts, but it also bounces back to people who send phishing emails. Threat actors use any details found in OOO messages to craft targeted social engineering messages. Well-targeted messages build trust that threat actors take advantage of.

“You have reached [Sandy and Bill’s] voice mail. Please leave your message after the beep so we can call you back if we want to.”
I was recently on the receiving end of a very perplexing out of office message. It simply said, “I am currently out of the office.” No indication of when they would be back or who to contact in the meantime. Fortunately in my case this was someone I cc’ed on an email as an FYI and did not need any response from, but still–who does that? IMO a good out of office message says how long you’re out and who to contact in the interim if things can’t wait, no more and no less.