Privacy Policy

Last updated: August 2026

Your question is the most personal thing you'll ever type into a shop. This policy explains, plainly, what we collect, why, and the choices you have.

1. What we collect

What you give us: your first name, email address, your question and any context you choose to share, an optional birthday, and — for The Love Letter — an optional first name of the person your question concerns. Payment details are collected and processed by our checkout provider (Shopify); we never see or store your card numbers.

What's collected automatically: basic technical data (device, browser, pages visited) and, with your consent, cookie and pixel data used for site analytics and advertising measurement.

2. How we use it

We use your information to write and deliver your letter, send order and delivery emails, respond when you contact us, improve the site, and — only with your consent where required — measure and improve our advertising. We may occasionally send our own letters-from-the-desk emails to past customers; every one includes an unsubscribe link, and unsubscribing never affects your orders.

3. Your question is confidential

Your question is used for one purpose: creating your letter. It is read only by the person preparing your letter, is never published, never sold, never used as marketing material, and never reused for anyone else's letter. If you'd like your question and letter deleted from our records, email us and we will delete them.

4. Who we share information with

We share information only with the service providers who make the service work: Shopify (checkout and order management), our digital-delivery provider (secure file delivery), our email provider (order and delivery emails), secure composition tools used in preparing letters, and — with consent — advertising partners such as Meta for ad measurement. Each receives only what it needs for its role. We also disclose information if the law genuinely requires it. We do not sell your personal information. Where advertising cookies are considered “sharing” under laws like California's CPRA, the cookie banner's “Essential only” choice is your opt-out, and we honor the Global Privacy Control signal.

5. Cookies

Essential cookies keep the site and checkout working. We also use analytics and advertising cookies (including the Meta pixel) to measure our ads. You can block or delete cookies at any time in your browser settings, and we honor Global Privacy Control signals where required by law.

6. Your rights

Depending on where you live (including the EU/UK and California), you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to not be discriminated against for exercising these rights. To exercise any of them, email hello@thedrawnletter.com — we respond to every request, verify by matching your order email, and never charge for it. EU/UK residents may also lodge a complaint with their local supervisory authority.

7. Retention

Order records are kept as long as tax and accounting law requires. Questions and delivered letters are kept so we can honor revision requests and your ability to re-request your letter, and are deleted on your request at any time.

8. Age

The Drawn Letter is for adults 18 and over. We do not knowingly collect information from anyone under 18; if you believe a minor has used the service, contact us and we will delete the data.

9. International transfers

We operate online, so your information may be processed in countries other than yours by the providers named above, under contractual safeguards where required by law.

10. Changes and contact

We'll update this page and its date if our practices change. Privacy questions or requests: hello@thedrawnletter.com.