1. What we collect
When you begin a design we keep the answers you give us about the event: the occasion, the honoree's and host's first names, the date, the venue and the feeling you are after, along with a random identifier in a cookie so that we can keep your three directions for you. If you leave your email, we keep that too.
When you place an order we collect your name, email address, shipping address and the details of the order. Payment is handled by Stripe; we never see or store your full card number. If you choose our mail-my-invites service, we keep your guest list only for as long as it takes to address and post the envelopes.
We also collect the ordinary technical information that any website receives, such as your browser type and the pages you visit, and we keep a log of the emails we send you and whether they were delivered.
2. How we use it
To draft your directions, prepare your proof, produce and deliver your order, and write to you about it. To answer your questions. To keep the site working and secure. To understand, in aggregate, how the site is used so that we can improve it. If you have said we may, to write occasionally with news from the studio; you can stop that with one click in any such note.
We do not sell your information, and we do not use your event details, photographs or guest addresses for advertising or to train models.
3. Who helps us process it
A small number of service providers act on our instructions: Stripe for payment, Resend for email, our print and mailing partners for producing and posting your order, Cloudflare and Vercel for hosting and storage, Neon for our database, and PostHog for aggregate product analytics. Each receives only what it needs for its part. We do not record your screen or your sessions.
We may disclose information where the law requires it, or to protect the rights and safety of our customers and the studio.
5. How long we keep it
A design you begin without ordering is kept for thirty days, then deleted. Order details, proofs and print files are kept so that you can return to them and so that we can reprint if something goes wrong; after seven years we remove personal details from them. Guest lists given for mail-my-invites are deleted once the envelopes have been posted. Email logs are kept for one year.
6. Your choices and rights
You can see and change your account details at any time, and you can ask us to send you a copy of your information or to delete it. We will do so within thirty days, keeping only what the law requires us to keep, such as a record of a paid order. You can decline our occasional notes without affecting anything about your order.
If you live somewhere that gives you particular rights over your information, such as California or the European Union, we honour them. Write to us and we will help.
7. Children
The site is for adults planning an occasion. We do not knowingly collect information from anyone under sixteen. A baby shower is about the baby; the account belongs to the host.
8. Security
Your information is sent over encrypted connections and stored with providers who take care of it. You can sign in with a link sent to your email or with a password; a password is stored only as a one-way hash, never in a form we could read. No system is perfect; if something goes wrong that affects you, we will tell you promptly.
9. Changes to this page
If we change how we handle your information in a way that matters, we will update this page and, where the change affects an existing order or account, write to tell you.
10. Writing to us
Questions about privacy can be sent to hello@petalandquill.com or through the contact page.