Privacy Policy

Last updated: September 4, 2025

This Privacy Policy explains how PicPerfectGifts ("we," "us," or "our") collects, uses, discloses, and safeguards personal information when you visit our website, place an order, create an account, interact with our emails/SMS, or otherwise use our services (collectively, the "Services"). By using the Services, you agree to this Policy and our Terms of Service. If you do not agree, please do not use the Services.

We may store and process information in the United States and other countries. If you access the Services from outside the U.S., you understand that your information may be transferred to and processed in the U.S. where data protection laws may differ.

1) The Information We Collect

We collect information directly from you, automatically when you use the Services, and from third parties.

A. Information You Provide

  • Identifiers & contact info: name, email, phone, billing/shipping address.

  • Account info: login credentials, order history, saved addresses.

  • Order/payment details: items purchased, gift messages; payment tokens (we do not store full card numbers—these are processed by our payment providers).

  • User content: photos/images and text you upload for customization, reviews, survey responses, support messages.

  • Marketing preferences: email/SMS opt‑ins and opt‑outs.

B. Information Collected Automatically

  • Device & usage data: IP address, approximate location (derived from IP), device type, OS, browser, pages viewed, referring/exit pages, timestamps, session replay/heatmap data (where enabled), and similar.

  • Cookies & similar tech: pixels, tags, SDKs, local storage, advertising IDs for analytics, personalization, fraud prevention, and ads. See Section 8 for choices.

C. Information From Third Parties

  • Payment and fraud‑prevention providers (e.g., Shopify Payments, PayPal) for risk checks and transaction confirmation.

  • Analytics & advertising partners (e.g., Google, Meta, Microsoft, TikTok, Hotjar, Triple Whale, Elevar, Klaviyo) for insights and ad measurement.

  • Carriers/fulfillment partners for tracking and delivery updates.

  • Social networks when you interact with our posts, ads, or UGC programs.

We may combine information from these sources.

2) How We Use Information (Purposes)

  • Provide the Services (process and fulfill orders; customer support; account features).

  • Customize & improve the Site and your experience (content, layout, recommendations).

  • Fraud/security (detect, investigate, and prevent fraud or misuse).

  • Marketing & advertising (including retargeting/"interest‑based" ads, measuring ad performance, and sending emails/SMS where permitted).

  • Communications (order confirmations, shipping updates, service messages, and—with consent or as allowed—promotions).

  • Legal/compliance (recordkeeping, enforcing terms, responding to lawful requests).

We will use information only for the purposes disclosed (or as compatible with those purposes). If we materially change a purpose, we’ll notify you and, where required, seek consent.

3) SMS/Mobile Messaging

If you opt in:

  • Message frequency varies; message & data rates may apply.

  • Text STOP to cancel; HELP for help. Carriers are not liable for delayed/undelivered messages.

  • We do not sell or share your SMS consent/opt‑in with third parties for their independent marketing. We may share data with vendors that help deliver messages.

4) When We Disclose Information

We disclose personal information to:

  • Service providers/processors: ecommerce platform (Shopify), payment processors, cloud hosting, analytics, customer support, anti‑fraud, fulfillment/print partners, carriers, and marketing service providers.

  • Business transferees: in connection with a merger, acquisition, financing, or sale of assets.

  • Legal & safety: to comply with law, respond to lawful requests, or protect rights, safety, and property.

We do not sell your personal information for money.

We may “sell” or “share” (as defined under U.S. state privacy laws) certain online identifiers and usage data with advertising/analytics partners for cross‑context behavioral advertising. See Section 8 for opt‑out choices and Section 10 for state‑law rights.

5) International Users (EEA/UK/Switzerland)

  • Controller: PicPerfectGifts (see contact in Section 14).

  • Legal bases (GDPR/UK GDPR): contract (to provide the Services), legitimate interests (e.g., site security, analytics, marketing where not consent‑based), consent (where required—e.g., certain cookies/SMS/email), and legal obligation.

  • Transfers: We transfer personal data to the U.S. and other countries using appropriate safeguards (e.g., Standard Contractual Clauses). You may request a copy of the SCCs we rely on.

  • Your rights: access, rectification, erasure, restriction, portability, and objection; withdraw consent at any time; lodge a complaint with your supervisory authority. We do not engage in automated decision‑making producing legal effects.

6) Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact us and we will delete it. We do not knowingly sell/share personal information of consumers under 16.

7) Data Security & Retention

We use administrative, technical, and physical safeguards designed to protect personal information. However, no method is 100% secure.

We retain information only as long as reasonably necessary for the purposes described, including to meet legal, tax, accounting, or reporting requirements, resolve disputes, and enforce agreements. Retention periods vary by data type and context (e.g., order records are typically kept for at least 4–7 years for tax/accounting; marketing preferences until you opt out or your account is deleted).

8) Cookies, Ads, and Your Choices

  • Cookies/SDKs help us operate the Site, remember cart contents, analyze traffic, and show relevant ads.

  • Browser controls: you can set your browser to block or delete cookies; site features may not work as intended.

  • Ad choices: opt out of interest‑based advertising via YourAdChoices and NAI tools (optout.aboutads.info; optout.networkadvertising.org) and platform settings (Google, Meta, Microsoft, TikTok). Mobile users can reset the device’s advertising ID or limit ad tracking.

  • Email: use the unsubscribe link at the bottom of our emails.

  • SMS: text STOP to opt out.

  • Global Privacy Control (GPC): when detected, we treat GPC as a request to opt out of sale/sharing/targeted advertising for that browser.

You can also submit a state‑law Do Not Sell/Share or Targeted Advertising Opt‑Out request—see Section 10.

9) Shopify, Payments, and Hosting

Our store is hosted on Shopify. Shopify provides the ecommerce platform and data storage. Your data may be stored through Shopify’s databases and general application. Shopify stores data on secure servers behind a firewall. For details, see Shopify’s Terms and Privacy.

If you use Shop Pay or another payment method, the provider may process your payment information under its own terms. We do not store full payment card details; payments are encrypted and processed by compliant providers (e.g., PCI DSS).

10) U.S. State Privacy Rights (CA/CO/CT/UT/VA and similar)

Depending on where you live, you may have the right to (i) know/access, (ii) correct, (iii) delete, (iv) portability, (v) opt out of sale, sharing, or targeted advertising, and (vi) limit the use/disclosure of sensitive personal information. You also have the right to non‑discrimination for exercising your rights.

A. How to Exercise Your Rights

Email support@picperfectgifts.com with your request, or use any self‑service privacy links we provide on the Site (e.g., “Do Not Sell or Share My Personal Information”). We will verify your identity (e.g., by confirming control of your email/phone or asking for limited order info). You may authorize an agent; we may require proof of authorization.

B. Categories We Collect (12 months)

Category (CPRA) Examples Collected Sold/Shared for Advertising Disclosed to Service Providers
Identifiers name, email, IP address, phone, device IDs Yes Shared (online identifiers) Yes
Customer records billing/shipping address, order history, limited payment info (token/last 4) Yes No Yes
Protected classes characteristics under law No No No
Commercial info products viewed/purchased, interactions Yes Shared (online activity) Yes
Internet/network activity browsing history, pages viewed, clicks Yes Shared Yes
Geolocation coarse location from IP Yes Shared (coarse only) Yes
Audio/visual user‑submitted photos for customization, support calls (if any) Yes No Yes
Professional/education employment/education details No No No
Inferences preferences/interests derived from usage Yes Shared Yes
Sensitive PI precise geolocation, gov’t ID, financial account w/ credentials No (not collected for marketing) No Processed only as necessary for payment/fraud where applicable

We do not knowingly sell/share personal information of consumers under 16.

C. Right to Appeal (CO/CT/VA)

If we deny your request, you may appeal by replying to our decision email. If your appeal is denied, you may contact your state attorney general.

11) Notice of Financial Incentive (CA)

We may offer discounts, coupons, or rewards when you sign up for emails/SMS or participate in referrals. Participation is voluntary and you can opt out at any time (unsubscribe link or STOP for SMS). We value this data based on the cost of the incentive, anticipated revenue, and expected expenses related to the program.

12) Do Not Track

There is no industry consensus for responding to browser Do Not Track signals. We currently do not respond to DNT, but we honor GPC signals as described in Section 8.

13) Changes to This Policy

We may update this Policy from time to time. The “Last updated” date indicates the effective date. Material changes will be posted on the Site and, where required, we will provide additional notice.

14) Contact Us (and EU/UK Representative, if applicable)

Questions, requests, or complaints:

PicPerfectGifts
Email: support@picperfectgifts.com
Mail: PicPerfectGifts, Site volt Marketing LLC, 312 adelaide ave sw, Hartville, Ohio 44632

If you are in the EEA/UK and we designate a representative, we will publish that contact information here.

Additional Disclosures (Nevada)

We do not sell personal information for monetary consideration. Nevada residents may still submit a “do not sell” request to support@picperfectgifts.com.

Summary: We collect what we need to fulfill your orders and improve your experience; we share with service providers and (for ads/analytics) may “share” online identifiers/usage data. You can opt out of sale/sharing/targeted ads, unsubscribe from emails, and STOP SMS at any time. This Policy is designed to align with GDPR and major U.S. state privacy laws as of September 4, 2025.