Privacy policy

Who is responsible

The controller of your data is [OWNER: the seller’s company name, registration number and address]. Write to us about your data at support@embroiderednames.com.

What we collect and why

• Your order: the child’s name to stitch, the items and colours, the delivery address, the name on the parcel and a phone number for the courier. We need them to make and deliver your order (our contract with you).
• Your email address: the payment page collects it and passes it to us, so we can send your order confirmation and delivery updates (contract).
• Payment: card and wallet payments are handled by our payment provider, Whop. We never see your card details; we get the order number, the amount and your email address.
• The Black Friday wheel: your email address, your discount code, your language and whether you want our emails. We use them to send and check your code (the offer’s rules) and, only if you said yes, to send you our news (your consent).
• Security: to stop abuse, our server counts requests from each visitor for 10 minutes, using a scrambled (hashed) form of the IP address, then deletes the count. Our web host also keeps standard server logs for [OWNER: how long Hostinger keeps access logs]. (Our legitimate interest in keeping the shop safe.)
• Accounting: invoices and payment records, because accounting and tax law require them (legal obligation).

The child’s name

We use the child’s name only to make the item and to show your order to you. It goes to the maker who stitches it, never to the payment provider or to analytics and advertising tools. We never ask for the child’s age, photo or any other detail.

Cookies and storage in your browser

Your cart and your cookie choice are saved in your own browser, because the shop can’t work without them. Analytics and advertising tools load only if you accept them in the cookie banner. You can change your choice at any time with “Cookie settings” at the bottom of each page.

Who gets your data

• The maker, who makes the item and sends the parcel: the child’s name, the items and colours, the name on the parcel, the address and the phone number. The maker is in China, outside the EU, so we protect this transfer with [OWNER: the safeguard, e.g. the EU standard contractual clauses signed with the maker].
• Whop, our payment provider: your email address and payment details, under its own privacy policy. Whop is in the USA; [OWNER: the transfer basis for Whop, from a lawyer].
• The carrier that delivers the parcel: the name on the parcel, the address and the phone number.
• Our web host, which keeps the website, the orders and our email: [OWNER: host name and the data centre country chosen in hPanel].
• Analytics and advertising tools (Google, Microsoft, Meta, TikTok, Pinterest): only if you accept them, and never with your child’s name.

We never sell your data.

How long we keep it

• Unpaid orders: deleted automatically after 7 days.
• Paid orders: [OWNER: how long paid orders and the names in them are kept, e.g. until the 2-year legal guarantee ends]. Invoices and payment records: as long as accounting law requires.
• The wheel: if you didn’t ask for our emails, your email address and code are deleted 2 months after the offer ends.
• Our emails: until you unsubscribe, with the link in every email.
• The visitor counts for security: 10 minutes.

Your rights

You can ask to see your data, to correct or delete it, to limit its use, to get it in a portable form, or object to its use, and you can withdraw a consent at any time. Write to support@embroiderednames.com. Some data, such as invoices, we must keep by law.

You can also complain to a data protection authority: in Latvia the Data State Inspectorate, in Lithuania the State Data Protection Inspectorate, in Estonia the Data Protection Inspectorate.

Who the shop is for

The shop is for adults buying for children. The Black Friday wheel is for people aged 18 and over. If we change this policy, we post the new version here with a new date.