Privacy Policy

1. Introduction

My Santa Letters ("we", "us", or "our") is committed to protecting the privacy of our users and their families. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service. Because our Service involves information about children, we take privacy especially seriously.

2. Information We Collect

We collect the following types of information:

• Account Information: Your name and email address when you create an account. Sign-in is handled by our authentication provider; we never see or store your password.
• Child Information: What you tell us about the person a message is for: their first name, their age, whether they are male or female, and, if you choose to add it, how their name is pronounced. For each message, the details you type to personalize it: interests, a pet's name, a recent accomplishment, something they are working on, their Christmas wishes, and, for a Naughty List message, the behavior you describe. We keep the letters, recordings, and videos we create from those details so you can view them again. We do not ask for a date of birth, and we do not collect more information than is necessary to deliver the Service.
• Delivery Information: Where each message goes: the recipient's name and mailing address for a printed letter, the email address a message is sent to, and the phone number a text is sent to, and the result of a line check that tells us whether that number can receive texts. For a Naughty List message, the recipient's email address. If a recipient opts out, or a message to them bounces or is reported, we keep that email address on a do-not-send list so that no one can send them another message through us.
• Payment Information: Payment details are processed securely by our third-party payment provider. We do not store your full credit card number.
• Usage Information: Basic information about how you interact with the Service, such as pages visited and features used.

3. Information You Give Us About Other People

Many messages are for someone other than you: a child, a grandchild, a partner, a friend. When you arrange one, you give us that person's name and, depending on the message, the phone number, email address, or mailing address it goes to. We use those details for one purpose: to deliver the message you arranged. We never market to the people you send messages to, and we never send them anything you did not arrange.

If someone has arranged a message for you and you would like your details removed, email support@mysantaletters.com. We will ask you to confirm a couple of the details we hold so that we remove the right record, and if you ask, we will add your email address to our do-not-send list so that no one can send you another message through us.

4. How We Use Your Information

We use the information we collect to:

• Create and deliver personalized Santa messages for your child.
• Process payments and manage your account.
• Improve and maintain the Service.
• Communicate with you about your account or orders.

We do not sell your personal information or your child's information to third parties.

5. Children's Privacy

Our Service is designed for use by parents and guardians, not directly by children. We do not knowingly collect personal information directly from children under 13; all child information is provided by a parent or guardian. If you believe a child has provided us with personal information without parental consent, please contact us and we will remove it. We do not sell or share anyone's personal information, including that of anyone under 16.

6. Data Storage and Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. Your data is stored securely and access is limited to authorized personnel who need it to operate the Service.

7. Data Retention

We keep your account, your family members' details, your orders, and the words, recordings, and videos we made for as long as your account is active, so you can replay a video or use a credit the following Christmas. Twenty-four months after your last order, we delete the generated words, recordings, and videos and remove the personal details from that order. You can delete everything sooner yourself: open your account from the avatar at the top of the page and choose Data & privacy. Or email support@mysantaletters.com and we will remove your account, your family members, your orders, and everything we created for them within 30 days.

• Your account (your name and email address): kept until you delete your account or ask us to, so you can sign in and order again.
• Your family members' details: deleted 24 months after your last order.
• The details you type to personalize a message, and the words, recordings, and videos we make from them: deleted 24 months after your last order.
• A recipient's name, phone number, email address, or mailing address: removed from the order 24 months after your last order.
• The do-not-send list: kept for good, so that no one can send that email address another message through us.
• Our marketing site's mailing list: your email address stays on it until you unsubscribe; we then keep it with the date you unsubscribed so that we never add it again.
• Payment records: held by our payment processor under its own policy. We keep a record that an order was placed and paid, with no card details and, after 24 months, no personal details.

8. Third-Party Services

A few service providers help us make and deliver each message, and each receives only what it needs for its part: an AI writing service turns the details you give us into Santa's words and screens them for anything inappropriate; a voice service records Santa's voice; a video service films Santa's video; messaging and email providers deliver texts and emails; a print-and-mail partner prints and posts letters; an address lookup service suggests matching addresses as you type a letter's mailing address; a payment processor takes payment; an authentication provider handles sign-in; a customer-support provider stores the messages you send us when you ask for help; and a cloud hosting provider runs the Service and stores recordings and videos. Each acts on our instructions and is obligated to protect your information. We do not sell your information or your child's, and we never use it for advertising.

Our payment processor also keeps its own record of each transaction, for fraud prevention and for legal reasons; a deletion request to us does not reach that record.

We do not sell, rent, or share phone numbers or text-message consent with third parties or affiliates for their marketing. A phone number is passed only to our messaging provider, to deliver the message you ordered.

9. Cookies and Tracking

The Service uses the cookies needed to keep you signed in and remember your preferences.

On our public pages (the home page, the shop, the cart and the order confirmation) we also use an advertising measurement tool from a social media platform, so we can tell whether our ads reach people who go on to place an order. It records the public pages you visit and when you add something to your cart, start checkout or complete a purchase, with the order's total. The platform may set its own cookie for this and use the information under its own policy. The tool never runs on your account pages, and it never receives your child's name, anything you tell us about your child, or anything Santa writes.

On the same public pages we use a web analytics service to count visits and see how people find their way through the site. It receives the same information: the public pages you visit, with your browser, device and approximate location, the cart, checkout and purchase steps above, and whether you watch one of our videos and how much of it. It sets its own cookie to recognize a returning browser. It too never runs on your account pages and never receives anything about your child.

If your browser sends a Global Privacy Control or Do Not Track signal, we honor it: neither the advertising measurement tool nor the analytics service is loaded at all.

10. Your Rights

You have the right to:

• Access the personal information we hold about you and your child.
• Request correction of inaccurate information.
• Request deletion of your data.
• Opt out of non-essential communications.
• Ask us never to send another message to an email address.

To exercise any of these rights, email us at the address below. We will confirm that we received your request within 10 business days, and we complete a deletion within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on the Service. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, please contact us at support@mysantaletters.com.