Privacy Policy

1. Information We Collect

1.1 Information from Account Holders (Customers)

• Account information: name, work email, company name, and password (or SSO credentials).
• Order information: gift selections, order history, notes/messages you write to recipients, and internal tracking status (e.g., won/lost/open).
• Payment information: processed directly by Stripe. CloseAndKeep does not receive or store full card numbers; we retain limited metadata such as transaction ID, amount, and last four digits for order records.
• Usage data: log data, device/browser information, and analytics about how you interact with the Service.

1.2 Information About Gift Recipients (Third Parties)

When you place an order, you provide us with information about your intended recipient, which may include:

• Name
• Shipping address
• Company/title (if provided)
• Any personal details included in your gift note

Recipients do not create accounts and typically do not provide this information to us directly it comes from our customers. We use it solely to fulfill and ship the gift and to support the customer relationship, as described below.

1.3 Cookies and Similar Technologies

We use cookies and similar technologies on our website to keep you logged in, remember preferences, and understand aggregate usage through analytics tools (e.g., [Google Analytics or similar]). You can control cookies through your browser settings.

2. How We Use Information

We use the information above to:

• Create and maintain customer accounts;
• Process orders and payments;
• Prepare, package, and ship gifts to recipients through our bakery/vendor and shipping partners;
• Send order confirmations, shipment tracking, and follow-up reminders to customers;
• Provide customer support;
• Monitor, maintain, and improve the Service, including fraud prevention and security;
• Communicate service updates, and, where you’ve opted in, product news; and
• Comply with legal obligations.

We do not use gift recipient information for our own marketing purposes, and we do not sell recipient information.

3. How We Share Information

We share information only as needed to operate the Service:

• Service providers: Stripe (payment processing), our fulfillment partners and bakeries (to prepare and pack gifts), and shipping carriers (to deliver gifts) receive the minimum information necessary for example, a carrier receives the recipient’s name and address, not payment details.
• Analytics and infrastructure providers: hosting, analytics, and customer support tool providers who process data on our behalf under confidentiality obligations.
• Legal and safety reasons: we may disclose information if required by law, subpoena, or legal process, or to protect the rights, property, or safety of CloseAndKeep, our customers, or others.
• Business transfers: if CloseAndKeep is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy or a successor policy.

We do not sell personal information to third parties for their own marketing purposes.

4. Data Retention

• Account data is retained for as long as your account is active, and for a reasonable period afterward to comply with legal, tax, and accounting obligations.
• Recipient data (name and shipping address) is retained only as long as reasonably necessary to fulfill the order, support delivery issues or refund requests, and maintain order history for the customer, after which it is deleted or anonymized on a schedule of [X months/years] unless a customer or recipient requests earlier deletion.
• Payment metadata is retained per Stripe’s and our own recordkeeping requirements (typically tied to tax and accounting retention rules).

5. Your Rights and Choices

5.1 Customers (Account Holders)

You can access, correct, or update your account information at any time by logging into your account or contacting us at [privacy email]. You may request deletion of your account, subject to our legitimate need to retain certain records (e.g., for tax purposes).

5.2 Gift Recipients

If you received a gift through CloseAndKeep and would like to know what information we hold about you, or would like it corrected or deleted, you can contact us at [privacy email]. We will honor deletion requests once any pending shipment or support matter tied to that data is resolved.

5.3 State and International Privacy Rights

Depending on where you live, you may have additional rights under laws such as the Colorado Privacy Act, the California Consumer Privacy Act (CCPA/CPRA), or the EU/UK General Data Protection Regulation (GDPR), including rights to access, correct, delete, or port your personal information, and to opt out of certain processing. To exercise these rights, contact us at [privacy email]. We will not discriminate against you for exercising these rights.

6. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information, including SSL/TLS encryption in transit and access controls on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children’s Privacy

The Service is intended for business use by adults and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us at [privacy email] and we will delete it.

8. International Data Transfers

If you access the Service from outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers operate, which may have different data protection laws than your country.

9. Third-Party Links

Our Service may contain links to third-party websites (for example, Stripe’s checkout pages). This Privacy Policy does not apply to those third-party sites, and we encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify customers by email or through the Service.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:

CloseAndKeep
[Business address]
[privacy email]