Privacy
A small handmade shop run by one person. Here is everything I collect, why, and how to have it removed.
Last updated September 7, 2026
The short version
I collect only what I need to answer you, make your piece, and get it to your door. I don’t sell it, I don’t rent it, and I don’t run advertising trackers or analytics on this site. There are no accounts and no passwords to remember.
What I collect
Only what you type into one of three places:
- The contact form. Your name, email address, subject, and message.
- A custom order request. Your name, email address, phone number if you give one, what you’re after, your budget if you share it, and any reference photos you attach.
- An order. Your name, email address, phone number, shipping address, and what you bought.
That’s the whole list. I don’t buy information about you from anyone, and there’s nothing on this site quietly building a profile in the background.
Card details never reach me
Payments are processed by Square. Your card number is handled by Square directly and never touches my site or my server. What I see afterward is that the payment succeeded and a reference number, so I can match it to your order and issue a refund if one is ever needed. Square handles that information under its own privacy notice.
Cookies, or the lack of them
This site sets no tracking cookies. There is no Google Analytics, no advertising pixel, and no third-party script watching what you browse.
Your cart is the one thing the site remembers, and it’s stored in your own browser using local storage. It never reaches my server. Clearing your browser data clears it, and I have no way to see what’s in it.
Who else sees your information
Only the people needed to complete what you asked for:
- Square, to take payment and process refunds.
- The postal carrier, which needs your name and address to deliver the parcel.
- Shippo, which I use to look up what postage costs. It receives parcel weights, dimensions, and postal codes. It does not receive your name.
- My hosting provider, which runs the server this site and its data sit on.
Beyond that, I share nothing, and I never sell or rent your information. The only other circumstance would be a legal obligation I can’t refuse.
Where it lives, and for how long
Everything is stored on a server I control, located in the United States, and backed up so an order isn’t lost to a hardware failure.
- Order records are kept for about seven years, because tax and bookkeeping rules require it.
- Messages and custom requests, including any reference photos, are kept while we’re still talking and for a reasonable while afterward in case you come back to the same project. Ask and I’ll delete them sooner.
Your choices
Write to me at EclecticWitchCustoms@gmail.com and I’ll tell you what I hold about you, correct anything wrong, or delete it. The one thing I can’t delete on request is a completed order record, which I’m required to keep for the period above.
I don’t send marketing email. If that ever changes it will be something you opt into, and every message will have a way out.
Children
This shop isn’t aimed at children, and I don’t knowingly collect anything from anyone under 13. If you believe a child has sent me something, tell me and I’ll remove it.
Changes
If this policy changes, the date at the top changes with it. Anything significant will be noted on this page rather than slipped in quietly.
Getting in touch
Questions about any of this go to EclecticWitchCustoms@gmail.com, or through the contact page. See also the terms of service and shipping and returns.
