Privacy Policy

This policy covers this website and the orders placed on it. It does not cover any other site we link to.

What we collect

• Your order: the name to appear on the certificate, and the email address to send it to.
• A shipping address: only if you choose printing or framing.
• Payment: handled entirely by Stripe. We receive a confirmation and a payment reference, never your full card number.
• A gift message, if you write one.
• Usage data: pages viewed, device and browser, and how you moved through the site, through the tools named below.

What we use it for

Making and delivering your certificate, fulfilling and shipping physical orders, answering you when you write to us, keeping the records tax and accounting law require, detecting fraud, understanding how the site is used, and measuring whether our advertising works.

Who processes it for us

• Stripe, payment processing.
• Resend, sending your certificate and order emails.
• Fly.io, hosting.
• Google Analytics, aggregate site analytics.
• Meta, measuring advertising, through both a browser pixel and a server side connection.
• Microsoft Clarity, heatmaps and session replay, which records how you move and click through pages.
• Sentry, error reporting, when something breaks.

Exactly what goes to Meta, and to Stripe

This is more detail than a privacy policy usually gives, and it is here because the alternative is a vague sentence that could mean anything.

• When you reach checkout we send Meta, from our own server, a cryptographic hash of your email address rather than the address itself, along with the _fbp and _fbc advertising cookies from your browser, your IP address and your browser's User Agent string. Meta uses those to match the event to an account and to an ad click.
• Those same four identifiers are written into Stripe's record of your checkout session, because our payment webhook is a request from Stripe's servers and has no other way to see them. They persist in Stripe's copy of that session.
• Meta is never told what you actually paid. Order amounts are collapsed into one of three broad bands before they leave us. Google Analytics does receive the real amount.
• Meta and Google are not given the name printed on your certificate, your shipping address or your gift message.

When we share information

We do not sell your personal information for money and we do not rent our customer list. We do share it in these situations and only these:

• The processors above, which may use it only to do that job for us.
• Advertising measurement, as described above. Under some state laws this counts as a sale or a share even though no money changes hands.
• Law and safety, where we are required by law, subpoena or court order, or where we reasonably need to in order to investigate fraud, enforce our Terms, or protect someone's rights or safety.
• A change of ownership, if the business is sold, merged or wound up, in which case records pass to the successor under a policy at least as protective as this one.
• Aggregate data that no longer identifies anyone, which we may keep indefinitely.

Cookies and tracking

Analytics and advertising cookies load when you arrive, before you have done anything. There is no cookie banner, and rather than dress that up as a feature we will say what it means: nothing about your visit is held back until you agree, because you are not asked. You can block or delete cookies in your browser settings and the site will still work, and you will still be able to buy.

To opt out of interest based advertising across many companies at once, use optout.aboutads.info and optout.networkadvertising.org, or the ad settings inside your own Facebook and Google accounts.

Automated browser signals. We do not currently act on Global Privacy Control or Do Not Track. Both are sent inconsistently, neither has an answering standard we implement, and we would rather say so than claim a protection we do not provide. The opt out routes above are the ones that work, and an email to us always works.

If you live in California

The CCPA as amended by the CPRA gives you specific rights. In the last twelve months we have collected the categories described above, which are identifiers such as name and email, commercial information about your order, a postal address for physical orders, and internet activity such as pages viewed, for the purposes described above, from you directly and from cookies on this site.

We do not sell personal information for money. Our advertising cookies do mean personal information may be shared for cross context behavioral advertising, and that may count as a sale under California law. You have the right to:

• know what we hold about you and how we use and disclose it;
• receive a copy of it;
• have it corrected;
• have it deleted, except records we must keep for tax and accounting;
• opt out of that sale or sharing; and
• not be treated worse for exercising any of these. We will not charge you more, refuse to sell to you, or give you a lesser product.

Email hello@casadopadrao.com with the subject line "California privacy request". We verify who you are by matching what you tell us against your order, and we answer within 45 days. An authorized agent may ask on your behalf with your written permission.

We do not knowingly collect or sell the personal information of anyone under 16.

Other US states

Colorado, Connecticut, Virginia, Texas, Utah and others give residents comparable rights to access, correct, delete and opt out of targeted advertising, with a right of appeal if we refuse. Write to the same address, say which state you live in, and we will apply your state's rules.

If you live outside the United States

This site is aimed at buyers in the United States, and our providers store data there. Ordering from elsewhere means your information is transferred to and processed in the United States, where privacy law differs from your own and where data may be subject to lawful access requests by US courts and authorities.

Wherever you live you can ask us for access to, correction of or deletion of your data at hello@casadopadrao.com. You may have further rights locally, including under the GDPR and the UK GDPR, and a right to complain to your own data protection authority. We will say plainly that this site's cookie behavior is built for a US audience and is not set up for GDPR or ePrivacy consent, which is a reason we do not target advertising into those markets.

How long we keep it

Order records for as long as we need them to fulfill the order and to meet legal, tax and accounting obligations, then deleted or anonymized. Aggregate and anonymized data may be kept indefinitely.

Security

We limit who can reach customer data, the whole site is served over an encrypted connection, and we never handle or store your full card number. No transmission or storage over the internet is perfectly secure, so we cannot guarantee absolute security and we do not claim to. If a breach ever affects your information we will tell you, and the relevant regulator, where the law requires it.

Children

This is a product for adults. The site is not directed at children under 13 and we do not knowingly collect their information. If you think a child has given us something, write to us and we will delete it.

Changes, and how to reach us

We may update this policy, and the date at the top is always the current version. Questions, requests and complaints all go to hello@casadopadrao.com, and a person reads them.