Privacy Policy

Last updated: May 6, 2026 · Version 2026-05-06

This Privacy Policy describes how Craft and Press LLC ("Craft and Press," "we," "us," or "our") collects, uses, and shares information when you visit craft-and-press.com (the "Site") or purchase any of our services (together, the "Services"). It also explains the choices and rights you have regarding your information.

By using the Site or our Services, you agree to the practices described in this Policy. If you do not agree, please do not use the Site or Services.

1. Information We Collect

1.1 Information you give us

We collect information you choose to provide directly, such as when you fill out a form, request a quote, place an order, or sign up for emails:

• Identity and contact information — your name (or brand name) and email address.
• Order and billing information — when you make a purchase, our payment processor Stripe collects your billing address, payment-card details, and other information required to complete the transaction. We do not store full payment-card numbers on our servers. We receive limited information from Stripe such as the last four digits of your card, the card brand, and a transaction reference.
• Project and message information — anything you tell us in a contact form, message, or email about your brand or order.
• Marketing preferences — whether you opted in to receive marketing emails from us.

1.2 Information collected automatically

When you visit the Site, certain information is collected automatically:

• Log data — IP address, browser type and version, operating system, referring URL, pages viewed, and timestamps.
• Device data — general device characteristics needed to render the Site correctly.
• Cookies and similar technologies — described in our Cookies Notice. We use first-party storage to remember that you dismissed the cookie banner, and Google Analytics 4 and Cloudflare Web Analytics to understand aggregate usage.
• Consent records — when you accept legal terms or opt in to communications, we log the policy version, timestamp, IP address, and user-agent as evidence of consent.

1.3 Information from third parties

We may receive information from our service providers (for example, transaction status from Stripe, fulfillment status from Printful) for the limited purpose of completing your order.

2. How We Use Information

We use the information we collect to:

• Provide, fulfill, and support the Services you request — including processing orders, communicating about your project, sending order confirmations, and resolving issues.
• Process payments through our payment processor.
• Operate, maintain, secure, and improve the Site and Services.
• Send transactional and account-related communications (such as order updates, invoices, and policy notices).
• Send marketing communications only if you have opted in. You can unsubscribe at any time using the link in any marketing email or by emailing us.
• Detect, investigate, and prevent fraud, abuse, security incidents, and other harmful activity.
• Comply with applicable laws, including tax, accounting, and dispute-resolution obligations.

We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not engage in profiling for behavioral advertising.

3. How We Share Information

We share information only as described below. We do not sell your personal information for money.

3.1 Service providers (sub-processors)

We share limited information with the third-party providers listed in our Sub-processors page. Each provider may only use the information to perform services for us. As of the date of this Policy our sub-processors are:

• Stripe, Inc. — payment processing, subscription billing, fraud prevention.
• Cloudflare, Inc. — website hosting, database, DNS, web analytics, and DDoS protection.
• Google LLC (Google Analytics 4) — aggregate site analytics.
• Printful, Inc. — production and order fulfillment for select items.
• GitHub, Inc. — source-code hosting and continuous deployment (no customer personal data).

3.2 Legal and protective disclosures

We may disclose information if we reasonably believe it is necessary to: (a) comply with a law, regulation, court order, or legal process; (b) protect the rights, property, or safety of Craft and Press, our customers, or others; (c) detect, prevent, or address fraud, security, or technical issues; or (d) enforce our Terms of Service.

3.3 Business transfers

If Craft and Press is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will require any successor to honor this Policy with respect to your information.

3.4 With your consent

We may share information with other parties if you direct us to or otherwise consent to the sharing.

4. How Long We Keep Information

We keep personal information for as long as needed to provide the Services and for the additional periods required to:

• Maintain accurate financial and tax records (generally at least 4 years from the transaction).
• Resolve disputes and enforce our agreements.
• Comply with applicable legal obligations.

Inactive prospect records (people who provided contact information but never became customers) are reviewed periodically and deleted approximately 12 months after last activity. Consent and audit-log entries are retained as evidence of compliance for the duration of the business relationship plus a reasonable evidentiary period.

5. Security

We use industry-standard technical and organizational safeguards designed to protect personal information, including encryption in transit (HTTPS), access controls, multi-factor authentication for administrative accounts, and reputable infrastructure providers (Cloudflare, Stripe). No method of transmission or storage is perfectly secure, however, and we cannot guarantee absolute security. If we ever experience a breach affecting your personal information, we will notify you and the appropriate authorities as required by law.

6. Your Choices

• Marketing emails: opt out at any time using the unsubscribe link in any marketing message, or by emailing us.
• Cookies: manage cookies in your browser settings; opt out of Google Analytics with the browser opt-out add-on.
• Account / data: request access, correction, or deletion as described below.

7. Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), gives you specific rights regarding your personal information. These rights are summarized below.

7.1 Categories of personal information we have collected (last 12 months)

7.2 Your rights

Subject to verification of your identity, you have the right to:

• Know what personal information we have collected, used, disclosed, and (if applicable) sold or shared about you.
• Access and obtain a copy of the specific pieces of personal information we hold about you.
• Correct inaccurate personal information we maintain about you.
• Delete personal information we have collected from you, subject to legal exceptions.
• Opt out of the sale or sharing of your personal information.
• Limit the use of sensitive personal information (we do not collect sensitive personal information for purposes that would trigger this right).
• Non-discrimination — we will not deny services, charge different prices, or provide a different level of service because you exercised any of these rights.

7.3 We do not "sell" personal information

We do not sell personal information for money. We do not knowingly engage in cross-context behavioral advertising that would constitute "sharing" under the CCPA. If our practices change, we will update this Policy and provide a "Do Not Sell or Share My Personal Information" mechanism, which is available now in our Site footer for your convenience.

7.4 How to submit a request

Submit a request through the privacy form linked from our footer ("Do Not Sell or Share My Personal Information") or by emailing contact@craft-and-press.com with the subject line "California privacy request." We will respond within 45 days of receipt and verification (extendable by another 45 days when reasonably necessary, with notice). To verify your identity, we may ask you to confirm information we already have on file. You may use an authorized agent acting on your behalf, provided we can verify the agent's authority.

8. Children's Privacy

The Site and Services are intended for users 13 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it.

9. International Users

Craft and Press is based in the United States and our Services are intended for customers located in the United States. If you access the Site from outside the United States, your information will be transferred to and processed in the United States, where data-protection laws may differ from those of your country.

10. Third-Party Links

The Site may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them any information.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date at the top and, for material changes, will provide additional notice (such as a notice on the Site or, if appropriate, by email). Your continued use of the Site or Services after the effective date of an updated Policy constitutes your acceptance of the changes.

12. Contact Us

For questions about this Policy or to exercise any of your rights, please contact us: