Privacy Policy

Last updated: August 2026

Christmas Made is a small independent shop selling digital downloads. This page explains, in plain language, what we collect, why, and who else is involved. We do not sell your data to anyone, ever.

1. What we collect

We only collect what an order or a sign-up actually needs.

• Your email address — so we can send your download links and your receipt.
• Your order details — which products you bought, the amount, the date, and the order number.
• Your cart — if you enter your email and then leave without paying, we keep that cart so we can remind you about it. You can stop those reminders at any time with the unsubscribe link in the email.
• Messages you send us — anything you write on the contact page or in a design request.

We do not collect or store your card details. We never see them — see section 3.

2. Why we use it

• To deliver the files you paid for and to re-send them if you lose the email.
• To answer your questions.
• To send you new designs and offers, but only if you asked for them. Every one of those emails has an unsubscribe link, and unsubscribing takes effect immediately.

Receipts and download links are not marketing, so they are always sent — including to people who have unsubscribed. You paid for those files and you are entitled to reach them.

3. Payments

Payments are handled by Stripe and PayPal. Your card or bank details go straight to them and never reach us — we only receive confirmation that the payment succeeded, along with your email address and what you bought. Each of them has their own privacy policy, which governs what they do with your payment information.

4. Who else handles your information

We use a small number of services to run the shop. They only ever see what they need to do their job.

• Cloudflare — hosts the website and stores orders and download files.
• Stripe and PayPal — process payments.
• Resend — sends our emails.
• Cloudflare Turnstile — checks that the contact form is being used by a person and not a bot. It does not track you across other websites.

Nobody else receives your details, and we do not sell or rent our customer list.

5. Cookies and tracking

We do not use advertising cookies and we do not track you across other websites. Your shopping cart is kept in your own browser's storage so your items are still there when you come back — that stays on your device and is never used for advertising.

6. How long we keep it

Order records are kept for as long as we are required to keep them for tax and accounting purposes, normally seven years. Abandoned carts are kept for a short period and then deleted. If you unsubscribe, we keep only the record of the unsubscribe itself, so that we do not email you again by mistake.

7. Your rights

You can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. If you are in the UK or the EU, these are your rights under the GDPR; we apply them to everyone regardless of where you live. Email us and we will action it — normally within a few days, and always within one month.

Deleting your data means we can no longer resend your downloads, so please save your files first.

8. Children

This shop is not intended for children, and we do not knowingly collect information from anyone under 16.

9. Changes to this policy

If this policy changes, the date at the top of the page changes with it. Nothing here will ever be changed to allow us to sell your data.

10. Contact

For anything about your privacy — including a copy of your data or a request to delete it — emailinfo@christmasmade.com. A real person reads it.