Your information,
handled with care.

Who we are

Make and Treasure creates personalized coloring books using customer-submitted photos. If you have questions about this policy, you can contact us at hello@makeandtreasure.com.

What we collect

Depending on how you interact with us, we may collect:

• Your name, email address, and any contact details you provide.
• Order details, including product selections and purchase information.
• Photos and instructions you upload or send to us for your custom book.
• Shipping information, if physical products are ordered.
• Messages you send us by email or contact form.
• Upload details such as file names, file sizes, upload time, and order reference.
• Basic technical information such as browser type, device type, and IP address.

How we use information

We use personal information to:

• Process and fulfill orders.
• Create personalized coloring books from customer-submitted photos.
• Communicate about your order, delivery, revisions, or support requests.
• Notify our team when new order photos have been uploaded.
• Improve our website, product flow, and customer experience.
• Prevent fraud, abuse, or misuse of our services.
• Comply with legal obligations where required.

Cart reminders

When you enter your email while personalizing a book in Make it yours or during checkout, we save your email and book choices, even if you do not proceed to Stripe. If you do not complete your order, we may send up to two reminders, approximately 1 and 24 hours after your checkout is saved. These reminders contain your book choices and a link back, without discount codes or unrelated offers.

We rely on our legitimate interest in helping you return to a checkout you started (Article 6(1)(f) GDPR). The checkout notice is not recorded as explicit consent. This is separate from marketing cookies and acceptance of our Terms and Conditions.

We process your email, book choices, checkout time, notice version, payment status and, if supplied when continuing to Stripe, your first name. Reminders are delivered through Zoho Mail, our email service provider acting as a processor. Reminder records do not contain children's names, photos or shipping addresses. Saved checkout records expire after seven days and are removed by our scheduled cleanup; returning customers must provide personalization and photos again.

You can object at any time by clicking the unsubscribe link in any reminder or emailing hello@makeandtreasure.com. Unsubscribing stops this sequence and future cart reminders. We retain protected identifiers and limited payment and delivery records to honor opt-outs and prevent duplicate or unwanted messages. Order receipts and requested support replies are unaffected.

Payments

Payments on this site may be processed through Stripe. We do not store full payment card details on our own servers.

When you complete a payment, your information is handled according to the privacy terms and security practices of the payment provider you choose. You should review their policies directly:

• Stripe Privacy Policy

Uploaded photos and custom artwork

The photos you upload are used only to create your personalized coloring book or requested free coloring preview, and to communicate with you about that order or request.

Photos may be stored with our website hosting or file storage provider while we work on your order. We may also receive an internal email notification that includes your order reference, upload notes, and, when technically practical, copies of the uploaded files so we can begin production.

For a free preview, we collect three photos, your email address, and any name or notes you choose to provide. These requests are collected through Netlify Forms so our team can prepare your three sample coloring images and email them to you. A free preview does not require a purchase and is not a printed book.

We do not keep personal images long-term. Once your book has been created and shipped, the original uploaded images are removed from our server because we want to respect customer privacy as much as possible.

Line drawing files created from customer images may be retained for up to 3 months so that returning customers can order another book more easily. After that period, they should be deleted unless a longer retention period is needed for an active customer support issue, legal obligation, or a specific request you have made.

Private website statistics

We use first-party, cookieless statistics to understand visits to our public shop pages. We record the page path (without query strings), the date and time, a random page-view identifier, and a daily keyed hash of the public IP address. The hash changes every UTC day. Raw visitor IP addresses are not stored in these statistics. People sharing a public IP count as one estimated visitor for that day.

These statistics are only available to the shop owner and are stored on our hosting provider, Netlify, for up to 90 days. We do not record photos, form entries, account pages, checkout pages or private order pages. We exclude our own networks, common automated visitors, and requests using Do Not Track or Global Privacy Control. Owner-network IP addresses are stored privately to keep our own visits out of the totals.

This separate first-party measurement does not load Meta or advertising cookies. It follows the same regional choice as our browser marketing tracking: off until acceptance in consent-required locations, and on elsewhere unless you reject it. The Cookie settings control applies to both.

Cookies and analytics

Our website may use cookies or similar technologies for basic website functionality, security, remembering preferences, and understanding how the site is used.

We use Meta Pixel for browser measurement under the regional settings below. Meta Conversions API (server-side tracking) retains its separate explicit-permission checks. These tools can measure page visits, cart additions, checkout starts, successful free-preview requests and purchases and help improve our Facebook and Instagram advertising. Meta may receive the page URL, referring page, IP address, browser/device information and cookie identifiers. For an accepted free-preview request, our server may send Meta a Lead event with its time, a random event identifier, a fixed preview-page URL, browser information and Meta cookie identifiers. We do not send uploaded photos, names, email addresses, notes or other customer-provided content to Meta. After a live payment is verified, the browser and our server may send a Purchase event with the total paid (including shipping and tax, after discounts), currency, product type and purchased product identifiers. When you start checkout with marketing cookies accepted, we save your consent version and time, an anonymous withdrawal identifier, browser information and Meta cookie identifiers with the Stripe checkout. This allows consented purchase measurement even if you do not return to our website after payment. Pending delivery records containing browser and cookie identifiers are kept for up to seven days; minimal delivery receipts prevent duplicate reporting. Your payment reference is removed from the page URL before this event can load; it is kept in this tab’s session storage so refreshing still opens your order. Automatic recovery expires after 24 hours. Cart and checkout events include product identifiers, quantity, currency and the merchandise subtotal before shipping, tax or discounts. Random event identifiers and short-lived tab storage help prevent repeat events when navigating or refreshing. A local browser marker helps prevent repeat purchase events, and an opaque order-derived event identifier helps match browser and server copies. We do not send your Stripe payment reference to Meta, and automatic matching is disabled. Other private account and photo-upload pages and links containing private parameters remain excluded from tracking.

For visitors in the EU/EEA, United Kingdom and Switzerland, Meta Pixel and our private visitor analytics stay off until you choose “Accept”. The same applies when your country cannot be determined. Elsewhere, these browser measurements start automatically without a banner, unless you have already rejected them. Netlify determines the country from your connection and returns only the country code and consent requirement to the browser; we do not send your IP to a separate geolocation service. You can choose “Reject” or change your choice using “Cookie settings” in the footer without affecting shopping. We remember explicit choices in this browser for up to 180 days and honor a saved rejection in every country. Automatic regional activation is not stored as an explicit acceptance. Withdrawing consent stops further browser tracking and tracking of subsequent requests. Your browser also sends a withdrawal request to stop queued purchase events; if the connection fails it retries on later visits. Withdrawal cannot undo data already sent or a delivery already in progress. Read Meta’s Privacy Policy for information about Meta’s handling of that data.

How we share information

We do not sell personal information. We may share information only as needed with:

• Payment processors such as Stripe.
• Website hosting, file storage, and email providers that help collect uploads.
• Printing, fulfillment, or shipping providers, if needed to complete your order.
• Service providers who help us operate the website or support our business.
• Meta, for marketing measurement under the regional browser settings and server-side permission checks explained above.
• Authorities or other parties when required by law or to protect legal rights.

Data retention

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, handling support, maintaining business records, and meeting legal, accounting, or tax obligations.

Uploaded personal images are intended to be deleted after the book has been created and shipped. Line drawings may be retained for up to 3 months as described above.

Your rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or restriction of the personal information we hold about you.

You may also have the right to object to certain processing or to withdraw consent where processing is based on consent. To make a request, contact us at hello@makeandtreasure.com.

Security

We take reasonable administrative, technical, and organizational steps to protect personal information. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children's privacy

This website is intended for adults purchasing personalized products. We do not knowingly collect personal information directly from children through the site.

If a child appears in customer-submitted photos, those images are handled only for the purpose of producing the ordered product.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and change the "Last updated" date at the top.

Contact

For privacy-related questions or requests, contact: hello@makeandtreasure.com