Privacy Policy
Last updated:
Personalised gifts mean we handle something more personal than most shops: the names of your children, the year a couple met, the name of a pet who has passed, sometimes a family photo. This Privacy Policy explains what information Merry Wrap collects when you visit merrywrap.shop or place an order, why we need it, who we share it with, how long we keep it and what you can ask us to do with it. Merry Wrap, 4317 NE 66th Ave, Vancouver, WA 98661, US, is responsible for the information described here. Questions go to support@merrywrap.shop.
Privacy in one glance
- What we collect: your contact and delivery details, your order, the personalisation wording in your order notes, any photo you email us, and basic technical data from your browser.
- Why: to make and deliver your gifts, answer your questions, process returns and keep the site working and secure.
- Customer photos: deleted 30 days after your order is delivered.
- Selling data: we do not sell or rent your personal information.
- Your choices: ask to see, correct or delete your information by email at any time.
1. The information we collect
1.1 What you give us
- Order and contact details: your name, email address, billing address, shipping address and, if you enter one, a phone number for the carrier.
- Personalisation wording: the names, dates and short messages you type in the order notes box at checkout, such as “Stocking: Biscuit” or “Ornament: Sam & Jordan 2026”. These often name other people, including children, so we treat them with particular care.
- Photos: if a design uses a photo, you email it to us. Photos can show faces of family members.
- Account details: if you create an account, your login email and a password, which is stored in encrypted form and never visible to us.
- Messages: anything you send to our support address, including return requests and photos of damaged items.
1.2 What is collected automatically
When you browse the site, our servers and the services that deliver the site record standard technical information: your IP address, browser type, device type, pages visited, the page you came from, and the date and time. Cookies remember what is in your cart and keep you logged in. See section 4.
1.3 What we receive from others
Our payment provider tells us whether a payment succeeded and gives us a transaction reference. We never receive or store your full card number. Carriers send us tracking and delivery updates for your parcel.
2. How we use it
| Information | What we use it for | Basis |
|---|---|---|
| Name, email, addresses | Processing, shipping and tracking your order; order emails; returns and refunds | Needed to fulfil the order you placed |
| Order notes wording | Personalising your items exactly as written; checking a claim if wording is wrong | Needed to fulfil the order |
| Emailed photos | Making the photo item you ordered | Needed to fulfil the order; deleted 30 days after delivery |
| Support messages | Answering you and keeping a record of what was agreed | Our legitimate interest in good service |
| Technical data and cookies | Running the cart and checkout, security, preventing fraud, understanding which pages work | Needed for the site to work; legitimate interest |
| Purchase records | Accounting and legal record keeping | Legal obligation |
We only send marketing emails if you have clearly opted in, and every marketing email has an unsubscribe link. Order emails (confirmation, shipping, refund) are part of your purchase and are not marketing.
3. Who we share it with
We share information only with the services that help us run the shop, and only what each one needs:
- Payment provider: processes your payment. It handles your card or account details directly under its own privacy policy.
- Carriers and postal services: receive the recipient’s name, delivery address and, if you gave one, phone number, so they can deliver the parcel.
- Production partners, where one helps make an item: receive the personalisation wording and photo needed to make your item, but not your payment details.
- Hosting, security and email services: store the site and its data, protect it from attacks and send our emails.
- Authorities: where the law requires it, for example a valid legal request, or to protect customers from fraud.
We do not sell your personal information, rent customer lists, or share your information with advertisers for their own use.
4. Cookies
Cookies are small files a website stores in your browser. Merry Wrap uses cookies that the shop needs to work: to keep items in your cart while you browse, to remember that you are logged in, and to protect the checkout from abuse. Our hosting and security layer may set a cookie to tell real visitors apart from automated traffic. If we add optional analytics or advertising cookies in future, we will update this page and ask for your consent where the law requires. You can delete or block cookies in your browser settings, but the cart and checkout will not work without the essential ones.
5. How long we keep information
| Information | How long |
|---|---|
| Photos you email for an order | Deleted 30 days after the order is delivered |
| Order records, including wording | As long as tax and accounting law requires, then deleted |
| Support emails | As long as needed to resolve the request and any follow-up return or claim |
| Account | Until you ask us to close it |
| Server logs | A short period for security, then deleted or anonymised |
The 30-day photo rule exists so that a return or damage claim can still be checked after delivery, without us holding pictures of your family for longer than necessary. If you want a photo deleted sooner, for example straight after your order arrives, email us and we will do it.
6. How we protect it
The site runs entirely over encrypted HTTPS connections. Access to orders and customer messages is limited to the people who need it to fulfil and support orders. Passwords are stored encrypted. Payments are handled by the payment provider, so card numbers never reach our servers. No system is perfectly secure; if we ever learn of a breach that affects your information, we will tell you and the relevant authorities as the law requires.
7. Your rights and choices
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or out of date;
- delete your information, unless we must keep an order record for legal reasons;
- stop sending you marketing emails;
- delete a photo you sent us before the 30-day period ends.
Depending on where you live, privacy laws may give you further rights. Residents of US states with consumer privacy laws can ask what we collect and request deletion, and will not be treated differently for using those rights. Customers in Canada have rights under federal and provincial privacy law; in Australia, under the Privacy Act and the Australian Privacy Principles; and in New Zealand, under the Privacy Act 2020, including the right to complain to the Office of the Privacy Commissioner. To use any right, email support@merrywrap.shop from the address on your order. We reply within 24 hours on business days and complete requests as quickly as the law requires, usually within 30 days. We may ask you to confirm your identity first.
8. Information about other people that you give us
When you order a gift, you usually tell us about someone else: the recipient’s name and address, and the names in the personalisation, which may belong to children, partners, parents or pets. Please only share what is needed for the gift, and only where you are comfortable that the people involved would not mind, for example a grandparent’s name on a family ornament. We use these details for one purpose, making and delivering that order, and we handle them under the same rules as your own information.
A few practical points follow from this. We never contact a gift recipient for marketing. We do not add recipients to any mailing list. Shipping and order emails go only to the person who placed the order. If a recipient contacts us directly, for example to return a gift, we only discuss the order with them as far as needed to help, and we do not reveal the price paid or the buyer’s payment details.
9. Automated decisions and tracking signals
We do not make decisions about you by automated means that have legal or similarly significant effects, and we do not create advertising profiles from your orders. Our payment provider may run its own automated fraud checks on a payment; if a payment is declined, contact us and we will help you complete your order another way. Some browsers send a “Do Not Track” signal. Because the site does not use cross-site tracking or advertising cookies, browsing behaves the same whether or not that signal is set.
10. Children and names of children
Merry Wrap is a shop for adults buying gifts. We do not knowingly collect information from children under 13, and children should not create accounts or place orders. Many of our gifts carry a child’s name, which a parent, grandparent or other adult supplies in the order notes. We use that name only to make the item, we do not build profiles of children, and we never use their names for marketing.
11. Where information is stored
Merry Wrap is based in the United States and our systems are hosted there. If you order from Canada, Australia or New Zealand, your information is transferred to and processed in the United States, where privacy law may differ from your own country’s. We protect it as described on this page regardless of where it is stored.
12. Changes to this policy
If we change how we handle information, we update this page and the “Last updated” date at the top. For significant changes, such as a new kind of cookie or a new type of partner, we will also mention it on the site. The policy that applies to your order is the one in force when you placed it.
13. Contact
For anything about your privacy, write to support@merrywrap.shop or use our Contact Us page. Postal address: Merry Wrap, 4317 NE 66th Ave, Vancouver, WA 98661, US. Related pages: Terms of Service, Payment Methods and FAQs.