Privacy
A small handmade shop run by one person. Here is everything I collect, why, and how to have it removed.
Last updated September 25, 2026
The short version
I collect only what I need to answer you, make your piece, and get it to your door. I don’t sell it, I don’t rent it, and I don’t run advertising trackers or analytics on this site. There are no accounts and no passwords to remember.
What I collect
Only what you type into one of three places:
- The contact form. Your name, email address, subject, and message.
- A custom order request. Your name, email address, phone number if you give one, what you’re after, your budget if you share it, and any reference photos you attach.
- An order. Your name, email address, phone number, shipping address, and what you bought.
That’s the whole list. I don’t buy information about you from anyone, and there’s nothing on this site quietly building a profile in the background.
Card details never reach me
Payments are processed by Square. Your card number is handled by Square directly and never touches my site or my server. Along with the payment, Square receives your name, email address, and shipping address. What I see afterward is that the payment succeeded and a reference number, so I can match it to your order and issue a refund if one is ever needed. Square handles that information under its own privacy notice.
Cookies, or the lack of them
This site sets no tracking cookies. There is no Google Analytics, no advertising pixel, and no third-party script watching what you browse.
Your cart is the one thing the site remembers, and it’s stored in your own browser using local storage. It never reaches my server. Clearing your browser data clears it, and I have no way to see what’s in it.
Who else sees your information
Only the people needed to complete what you asked for:
- Square, to take payment and process refunds. It receives your card and payment details, your name, email address, and shipping address.
- Shippo, which I use to price postage and buy shipping labels. At checkout it gets the parcel’s weight and size and where it’s going, without your name. When I buy the label for your parcel, it receives your name, full shipping address, and the phone number and email address on your order, so the label can be printed and the carrier can reach you about delivery.
- The postal carrier, which needs your name and address to deliver the parcel.
- Resend, which delivers the emails this site sends: your order confirmation and shipping notice, and the note that tells me a message or custom request has arrived. Those emails carry your name, email address, and what they’re about, such as your order details and shipping address, or your message.
- The Washington State Department of Revenue, whose tax-rate lookup tells me how much sales tax to charge. For orders shipping to Washington only, it receives the street address, city, and ZIP code. It does not receive your name.
- My hosting provider, which runs the server this site and its data sit on.
Beyond that, I share nothing, and I never sell or rent your information. The only other circumstance would be a legal obligation I can’t refuse.
Where it lives, and for how long
Everything is stored on a server I control, located in the United States, and backed up so an order isn’t lost to a hardware failure.
- Order records are kept for about seven years, because tax and bookkeeping rules require it.
- Messages and custom requests, including any reference photos, are kept while we’re still talking and for a reasonable while afterward in case you come back to the same project. Ask and I’ll delete them sooner.
Your choices
Write to me at EclecticWitchCustoms@gmail.com and I’ll tell you what I hold about you, correct anything wrong, or delete it. The one thing I can’t delete on request is a completed order record, which I’m required to keep for the period above.
I don’t send marketing email. If that ever changes it will be something you opt into, and every message will have a way out.
Children
This shop isn’t aimed at children, and I don’t knowingly collect anything from anyone under 13. If you believe a child has sent me something, tell me and I’ll remove it.
Changes
If this policy changes, the date at the top changes with it. Anything significant will be noted on this page rather than slipped in quietly.
Getting in touch
Questions about any of this go to EclecticWitchCustoms@gmail.com, or through the contact page. See also the terms of service and shipping and returns.
