Privacy Policy

1. Information We Collect

• Account information — name, email address, and password when you register.
• Order information — for both shops we collect delivery contact details (name, phone, street address, city, state, zip/postal code). ID orders additionally collect a secondary email address for delivery documents.
• Recipient data (ID orders only) — the text fields and uploaded files (PDF, PNG, JPG) you submit for each recipient. Stationery orders do not collect recipient data.
• Payment metadata — the transaction identifier returned by PayPal or OxaPay, and the amount and status of each payment. We do not receive or store your card number, CVV, crypto wallet keys, or bank account details.
• Technical information — your IP address and browser user-agent, session cookies used to keep you logged in.

2. How We Use Your Information

• To create and manage your account.
• To process and fulfil your orders in either shop, including sending recipient documents (ID orders) to the email addresses you provide.
• To send you order confirmations, payment receipts, and shipping updates.
• To send account-related messages such as email-verification links and password-reset links.
• To respond to enquiries and provide customer support.
• To detect, prevent, and investigate fraud and misuse.
• To comply with legal obligations.

3. Third-Party Service Providers

• PayPal — processes card and PayPal payments for both shops. See paypal.com.
• OxaPay — processes cryptocurrency payments for both shops. See oxapay.com.
• Our email service provider — delivers transactional emails.
• Our hosting provider — stores the site and its database.

We do not sell your personal information to any third party.

4. Cookies

We use a single essential session cookie (ECOMSESSID) to keep you signed in and enable the shopping cart. This cookie is HttpOnly, uses SameSite=Lax, and is transmitted only over HTTPS when the site is accessed securely. We do not use advertising, analytics, or third-party tracking cookies.

5. Data Retention

We retain account information for as long as your account is active. Orders and their associated data are retained for as long as needed to provide the service, comply with legal obligations (e.g. tax record-keeping), and resolve disputes. Uploaded recipient files from ID orders may be periodically removed from server storage after the order is complete. Stationery orders retain only line items and delivery address.

6. Your Rights

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data (subject to any legal retention requirements).
• Object to or restrict certain uses of your information.
• Export your data in a portable format.

To exercise any of these rights, please contact us.

7. Security

We take reasonable technical and organisational measures to protect your information, including bcrypt-hashed passwords, prepared SQL statements, CSRF tokens on state-changing forms, and access controls on uploaded files. Please use a strong unique password and notify us immediately if you suspect unauthorised access.

8. Children's Privacy

The service is not directed to children under 18, and we do not knowingly collect information from anyone under 18. If you believe we have collected information from a child, please contact us and we will delete it.

9. International Transfers

Your information may be processed on servers located outside your country. By using the service you consent to any such transfers, subject to the protections described in this policy and applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page.

11. Contact

Questions about this policy or your data? Please contact us.