Privacy Policy

1. Information We Collect & Principle of Data Minimization

In compliance with global data privacy principles, we practice strict data minimization. We only collect information strictly required to manufacture, process, and ship your memorial artwork:

• •
  Order & Shipping Details: Your name, shipping address, and phone number (required by USPS/UPS delivery carriers to deliver your physical package).
• •
  Contact Information: Your email address, used exclusively to send your order receipt, proof notifications, and package tracking updates.
• •
  Custom Memorial Details: Pet name, breed silhouette, lifespan dates, and chosen tribute inscription required to generate your custom fine art print file.
• •
  Payment Data (Zero Raw Storage): Payment processing is handled via direct end-to-end 256-bit encrypted connections with certified PCI-DSS Level 1 payment processors. We never see, store, or transmit your credit card number or CVV code on our servers.
• •
  Technical Session Data: Local browser storage for cart persistence and rate-limiting cookies to prevent automated abuse of our free AI quote generator.

2. We Do Not Sell or Share Your Personal Information

Under the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and European GDPR, selling or sharing personal information includes transferring data to third parties for monetary value or cross-context behavioral advertising.

Paw & Keepsake has never sold, does not sell, and will never sell or share customer personal information. We do not participate in advertising data exchanges, nor do we build behavioral profiles for third-party monetization.

3. Authorized Service Providers & Fulfillment

We partner exclusively with reputable, enterprise-grade infrastructure providers under strict confidentiality and data protection agreements:

4. Security & Encryption Standards

We implement comprehensive technical and organizational safeguards to protect customer data from unauthorized access, loss, or disclosure:

• ✓TLS 1.3 / 256-Bit SSL: All data transmitted between your browser and our servers is encrypted in transit.
• ✓HSTS Enforced: HTTP Strict Transport Security ensures all connections are automatically upgraded to secure HTTPS.
• ✓Strict Access Controls: Only authorized studio staff have access to order management dashboards.
• ✓Log Sanitization: Internal server logs redact customer emails and phone numbers to eliminate accidental exposure.

5. Your Global Privacy Rights (CCPA / GDPR / LGPD)

Regardless of where you reside, Paw & Keepsake extends the highest global privacy standards to all customers:

• •Right to Know & Access: You may request a complete copy of all personal information we hold regarding your account or orders.
• •Right to Deletion ("Right to be Forgotten"): You may request permanent deletion of your customer record, draft designs, or order history (excluding records mandated by tax law).
• •Right to Correction: You may correct inaccurate shipping details or contact information before production begins.
• •Right to Non-Discrimination: We never deny service, charge different prices, or provide different quality to customers exercising their privacy rights.

To submit an access, deletion, or privacy request, email us directly at pawkeepsake@gmail.com. We process and confirm all verified requests within 48 hours.

6. Children's Online Privacy (COPPA Compliance)

Our services are intended strictly for adult pet parents and gift buyers aged 18 and older. We do not knowingly solicit, collect, or store personal information from children under the age of 13. If you believe a minor has submitted personal information to our site, please contact us immediately for prompt deletion.

7. Email Communications & CAN-SPAM Act

We adhere strictly to the CAN-SPAM Act:

• •Transactional Emails: Order receipts and tracking numbers are sent solely to complete your purchase.
• •Opt-In Marketing: Promotional or remembrance emails require explicit consent and include a clear, instant 1-click "Unsubscribe" link in every footer.

8. Data Retention Schedule

Order invoices and transaction logs are retained for up to 7 years solely to satisfy statutory US tax and financial audit requirements. Generated high-resolution print files are securely archived for 90 days after delivery to honor our 100% Lifetime Memory Guarantee, after which they are automatically purged.