Privacy Policy

We use the information we collect to process and fulfill your orders, including printing your designs, arranging shipping, and sending order confirmations and updates. Your contact details allow us to communicate with you about your purchases, respond to your inquiries, and provide customer support.

With your consent, we may send you promotional emails about new products, design inspiration, special offers, and events. You can opt out of marketing communications at any time by clicking the unsubscribe link in any email or updating your account preferences.

We analyze usage patterns and trends to improve our platform, develop new features, and personalize your experience. This includes understanding which designs and products resonate with our community so we can showcase relevant content on our Inspiration Gallery.

Your information is also used for fraud prevention, security monitoring, and legal compliance. We may verify your identity, screen orders for potential risk, and retain records as required by applicable laws and regulations.

We share your information with trusted third-party service providers who help us operate our business. This includes payment processors (Stripe and PayPal) for payment handling, shipping carriers (UPS, FedEx, USPS, DHL) for order delivery, and print production partners who fulfill your custom apparel orders. These providers are contractually bound to protect your data and use it only for the services they provide to us.

We may disclose your information if required by law, such as in response to a court order, subpoena, or other legal process. We also reserve the right to disclose information to protect our rights, property, or safety, or the rights, property, or safety of others, including fraud prevention and credit risk reduction.

We never sell your personal information to third parties for their own marketing purposes. If our business undergoes a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and a prominent notice on our site of any change in ownership or data use practices.

We use cookies and similar tracking technologies to enhance your experience on YourWishCraft. Essential cookies are necessary for basic functionality — they keep you logged in, maintain your cart items, and ensure secure checkout. These cookies cannot be disabled without affecting site performance.

Analytics cookies help us understand how visitors use our site, which pages are most popular, and where users encounter issues. We use this data to improve our platform and optimize the user experience. These cookies collect anonymized data and do not identify you personally.

Preference cookies remember your choices — such as your preferred language, currency, and design tool settings — so you don't have to set them each time you visit. Marketing cookies (with your consent) allow us to show you relevant content and ads on other platforms based on your interests.

You can control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may affect certain features of our site. We also provide a cookie consent banner on your first visit where you can customize your preferences.

We implement industry-standard security measures to protect your personal information. All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security) technology. Payment information is processed directly by Stripe and PayPal — we never store full credit card numbers, CVV codes, or bank account details on our servers.

Your account password is hashed and salted using bcrypt, a computationally expensive algorithm that resists brute-force attacks. We enforce minimum password strength requirements and recommend using a unique password for your YourWishCraft account.

We conduct regular security audits, vulnerability assessments, and penetration testing on our infrastructure. Access to personal data within our organization is restricted to employees who require it for their job functions, and all access is logged and monitored for suspicious activity.

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you close your account, we will delete or anonymize your data within 30 days, except where we have a legal obligation to retain certain records — such as order history for tax and accounting purposes, which is kept for the period required by applicable law.

Design files you create remain in your account until you delete them or close your account. We recommend downloading any designs you wish to keep before requesting account deletion, as deleted data cannot be recovered.

Usage analytics data is retained in aggregated, anonymized form for up to 24 months. Individual-level analytics data is retained for a maximum of 12 months before being anonymized or deleted.

You have the right to access the personal information we hold about you. You can view and update most of your data directly through your account settings, including your name, email address, shipping addresses, and communication preferences.

You may request correction of inaccurate or incomplete data, deletion of your personal information (subject to legal retention requirements), and restriction of processing in certain circumstances. To exercise these rights, please contact us at [email protected] or use the account deletion option in your settings.

Data portability is available upon request — we can provide your personal data in a structured, commonly used, machine-readable format. You also have the right to withdraw consent at any time where we rely on consent as a legal basis for processing.

If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority. California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to opt out of the sale of personal information (we do not sell your data).

Our platform integrates with third-party services that enhance your experience. Payment processing is handled by Stripe and PayPal, each with their own privacy policies and security practices. We encourage you to review their privacy policies to understand how they handle your payment information.

Our site may contain links to third-party websites, including social media platforms and design inspiration sources. We are not responsible for the privacy practices or content of these external sites. We recommend reviewing the privacy policies of any third-party sites you visit.

With your consent, we use analytics and advertising services from Google, Meta, and other providers to understand site usage and deliver relevant content. These services may use cookies and similar technologies to collect data about your browsing activities across different websites.

YourWishCraft is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete that information promptly.

If you believe a child under 16 has created an account or provided personal information on our platform, please contact us immediately at [email protected] so we can investigate and remove the data.

Your information may be transferred to and processed in countries other than your country of residence, including the United States where our servers are located. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer data from the European Economic Area (EEA) to countries not deemed adequate by the European Commission, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data receives adequate protection.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry standards. When we make material changes, we will notify you by email (if you have an account with us) and by posting a prominent notice on our website before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The “Last updated” date at the top of this page indicates when the policy was most recently revised. Your continued use of YourWishCraft after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to reach out. We are committed to addressing your inquiries promptly and thoroughly.