Privacy Policy

1. Information you give us

We collect the information you choose to send us through the forms on this website:

• Custom order inquiry form (Order page): your name, phone number, Instagram handle, email address (optional), pickup date, event date, occasion, the items and quantities you're interested in, event details and personalization requests.
• Pop-up reservation form (Pop-Up page): your name, your preferred contact method and the matching contact detail (Instagram handle, mobile number or email address), the cookies and quantities you'd like, names to paint on personalized cookies, personalization requests and any notes.

Personalization requests can include other people's names, such as the person a gift is for. Please only share what we need to make your order.

We also receive the information you share when you contact us directly, for example by Instagram message, text or email.

We don't collect payment card details on this website. When we confirm an order, we arrange payment with you separately, and the payment service you use handles your payment details under its own privacy policy.

2. Information collected automatically

When you visit the website, some information is collected automatically:

• Meta Pixel. A small piece of code from Meta Platforms records which pages you visit and certain actions you take, such as clicking a reservation button or successfully sending a reservation request. Along with these events, your browser sends Meta technical information such as your IP address, browser and device details, the page address and the page that referred you. Meta uses cookies to recognize your browser, and may connect this activity to a Facebook or Instagram account if you have one. See section 5 for details.
• Hosting and security. Our website is hosted by Cloudflare. To deliver and protect the site, Cloudflare processes technical information such as your IP address and browser details, and may use cookies that are strictly necessary for security.
• Fonts. The website's fonts are loaded from Google Fonts, so your browser sends your IP address and browser details to Google when a page loads.
• Your browser's own storage. The Pop-Up page keeps a short-lived record in your browser's session storage so a successful reservation request is only counted once. It holds a random ID, no personal details, and is cleared when you close the tab.

3. How we use your information

• To respond to your inquiry or reservation request, prepare quotes and confirm availability.
• To finalize personalization details, arrange payment and coordinate pickup.
• To contact you about your order using the contact details you gave us.
• To keep records of orders and run our business.
• To understand how people use the website, measure how well our advertising works and, where permitted, show our ads to people who have visited the website (see section 5).
• To keep the website secure and working properly.
• To comply with legal obligations.

We don't sell your personal information for money. However, some U.S. state privacy laws treat sharing website activity with advertising partners like Meta for targeted advertising as a "sale" or "sharing" of personal information. You can opt out as described in section 6 andsection 8.

4. Services that process your information

We use a small number of outside services to run the website and manage orders:

• Airtable stores the information you submit through our order and reservation forms so we can manage requests. Airtable's privacy policy
• Telegram delivers notifications to us when a new request arrives. These messages include the details you submitted. Telegram's privacy policy
• Cloudflare hosts the website and processes form submissions on their way to Airtable.Cloudflare's privacy policy
• Meta Platforms provides the Meta Pixel described in section 5. If you choose to contact us on Instagram, Meta also processes those messages.Meta's privacy policy
• Google provides the website's fonts through Google Fonts.Google's privacy policy

Each of these services handles information under its own terms and privacy policy. We may also disclose information if required by law or to protect our rights, our customers or others.

5. Meta Pixel, cookies and advertising

We use the Meta Pixel to see how visitors find and use the website and to measure the results of our Facebook and Instagram ads. The Pixel records these events:

• Page views on every page of the website.
• Visits to our pop-up event page.
• Clicks on buttons that start a reservation, including which cookie was selected.
• Successful submission of a reservation request.

We label these events with general information only, such as the event name, a product name or a category. We don't include the names, contact details or messages you type into our forms in these event labels.

Even so, Meta receives information about your visit, including your IP address, browser and device details, the pages you view and identifiers stored in cookies. Depending on the settings Meta offers to businesses, the Pixel can also collect contact details entered on a page in hashed (scrambled) form to help Meta match website visits to its users. Meta may combine this information with other information it has about you and use it under its own policies, including to measure ads, to show you ads and to improve its services.

We may use this information to show our ads to people who have visited the website (sometimes called remarketing) and to understand how many people who saw our ads went on to visit the website or send a request.

To limit this:

• Turn on Global Privacy Control in your browser (see section 6).
• Review your ad settings in Meta's Ad Preferencesand learn how Meta uses cookies in Meta's Cookies Policy.
• Block or delete cookies in your browser settings, or use a browser or extension that blocks trackers.

6. Global Privacy Control

Global Privacy Control (GPC) is a setting in some browsers and browser extensions that tells websites you don't want your information sold or shared for targeted advertising. When your browser sends a GPC signal, our website doesn't load the Meta Pixel at all, so no Pixel events are sent to Meta from your visit.

This applies to the browser and device sending the signal. Some browsers, such as Firefox, Brave and DuckDuckGo, support GPC. Learn more atglobalprivacycontrol.org. Our website doesn't currently respond to the older "Do Not Track" browser setting.

7. How long we keep information

We keep the information you send us for as long as we need it to respond to your request, complete and support your order, keep reasonable business records and meet legal obligations such as tax requirements. When we no longer need it, we delete it. You can ask us to delete your information sooner (see section 8).

Information collected by Meta, Airtable, Telegram, Cloudflare and Google is also kept under those services' own retention policies.

8. Your choices and rights

You can contact us at any time to:

• Ask what personal information we have about you.
• Ask us to correct or delete it.
• Opt out of the use of your information for targeted advertising.
• Ask questions about this policy.

Depending on where you live, you may have additional rights under local law. We'll respond to requests as the law applicable to you requires, and we won't treat you differently for making one. To protect your information, we may need to confirm your identity, for example by replying through the same contact details you used with us.

9. Security

The website uses a secure (HTTPS) connection, and we limit access to customer information to the people who need it to fulfill orders. No website or online service is completely secure, so we can't guarantee absolute security.

10. Children's privacy

This website is intended for adults placing orders. We don't knowingly collect personal information from children under 13. If a parent or guardian includes a child's name in a personalization request, we use it only to make that order. If you believe a child has sent us personal information, please contact us and we'll delete it.

11. Changes to this policy

We may update this policy from time to time. When we do, we'll post the new version on this page and update the effective date at the top. If we make significant changes, we'll also let visitors know with a notice on the website.

12. Contact us

For questions or privacy requests, contact MaryCookieArt:

• Instagram: @marycookieart (send us a direct message)