Privacy Policy

We collect information you provide directly to us when you create an account, design a cup, or make a purchase. This includes your name, email address, shipping address, and the contents of the designs you upload.

If you join our email list, we store your email address, signup source, consent wording and time, unsubscribe preference and welcome-offer usage. We use Resend to send your welcome email and marketing messages you have agreed to receive. Every marketing email has an unsubscribe link. Unsubscribing does not affect order updates or an unused welcome offer. We retain a suppression record to honour opt-outs and prevent repeat first-order discounts. The browser where you request the offer stores its code for up to 180 days so it can follow you from the storefront to checkout. We also remember signup completion and dismissals locally. These preferences do not enable analytics or advertising.

We use the information we collect to fulfill your orders, communicate with you about your orders, and improve our services. We use analytics tools to understand how our website is used and to enhance the user experience. A session cookie keeps campaign labels, such as the referring channel, for up to 24 hours across our store and design editor. When you request a quote or begin checkout, those labels can be saved with the enquiry or purchase so we can understand which channels bring customers. We do not put your artwork, messages, email address or full referring URL into these campaign labels. On the website, campaign collection requires the analytics choice in Privacy choices.

With analytics permission, we also measure shopping sessions in our own reporting system across the store and editor. Sessions end after 30 minutes without measured activity. These records contain an anonymous reference, activity times, shopping page, campaign labels, device category and country when available. Our advisors see aggregate performance reports, not your artwork or contact details. Turning analytics off stops new session measurement.

We use PostHog session replay to diagnose problems with browsing, cup design and checkout. Recordings can include clicks, navigation, cup artwork and uploaded photos displayed in the editor. Form inputs and account details are masked, and payment frames and private gift pages are excluded. Our current replay retention setting is 30 days; deletion may take a short time after expiry. Website replay follows your separate analytics choice and stops when you turn it off.

We use Stripe to process payments. We do not store your full credit card information on our servers. Your payment information is securely transmitted directly to Stripe.

We share information with service providers such as shipping carriers and Stripe to fulfill your order, and PostHog to help us understand and improve the shopping experience as described above. With advertising permission, we also share the limited information below with Meta Platforms for advertising measurement, matching and personalised ads. Providers may process information overseas, including in the United States.

Use the Privacy choices link on the store or editor at any time. Analytics and session replay (PostHog) and advertising (Meta Pixel and Conversions API) have separate controls. Rejecting either does not prevent shopping. Essential privacy preferences and checkout storage stay available. We remember choices across the website and browser editor for 180 days, or ask again if the purposes or vendors change. Browser Do Not Track and Global Privacy Control turn off both optional categories.

Where trusted country detection places you outside the EEA/UK, analytics and session replay start by default unless you have turned them off. You can turn them off at any time in Privacy choices. Advertising stays off until you enable it separately. EEA/UK visitors, and visitors whose country is unknown, conflicting or unverified, are asked before optional tracking starts. Closing a choice prompt does not give consent. A regional analytics default is not recorded as your consent, and an existing refusal is always respected.

When advertising is enabled and allowed, Meta receives public shopping visits, product views, checkout starts, confirmed purchases with AUD value and bundle identifiers, and accepted bulk quote requests. We send permitted browser and ad-click identifiers, kept here for up to 24 hours, and a SHA-256 hash of the buyer email from our server for matching. Hashing is not anonymisation. Browser requests also disclose ordinary network information such as IP address and browser information to Meta. We do not send your uploaded artwork, photos, personalisation, gift messages, shipping or card details, private gift URLs, or replay recordings to Meta. Automatic form matching and automatic event detection are disabled.

Meta may combine event information with information from its services and elsewhere to measure advertising, match accounts and personalise ads. Its Business Tools Terms describe event-data retention for up to two years. Our unsent conversion matching data is kept for at most 24 hours, removed after acceptance or suppression, and minimal delivery records are retained for 30 days. Turning advertising off stops future collection and unsent deliveries once the choice reaches our server; it does not recall information already sent. If saving a choice fails, the page keeps optional tracking off and retries. You can also review Meta’s privacy and advertising controls at facebook.com/privacy/policy and facebook.com/adpreferences, or industry choices at youronlinechoices.eu.

Contact us through the contact page for access, correction, deletion or a privacy concern. These website advertising controls cover desktop and mobile browsers; no Meta advertising SDK is installed in our native app.