Your family's details, kept with care.
What we collect when you order, why we need it, who sees it and how long we keep it. Last updated November 3, 2026.
What we collect
Only what we need to make and hand over your order:
- Your name, email, phone number and, for delivery, your address.
- For party boxes: the birthday child's first name and age, the party and pickup dates, your theme ideas, and your guests' first names.
- The photos and pictures you send for puzzles and stickers, and any photo of a guest list.
- How you heard about us, if you tell us.
Why we need it
To make your order, put the right names on it, show you your design, tell you when it's ready and confirm your payment. We email you about your order. We don't add you to a mailing list or send you marketing without asking first, and we never sell or share your details.
Your photos
Photos you send are saved privately. Only we can see them, and we use them only to make what you ordered. They're deleted automatically 60 days after your pickup or delivery day. If your order has no pickup date, they're deleted 90 days after you order, and photos that never become part of an order are deleted after 60 days.
If you tick "It's OK to share a photo of my order" when you order, we may post our own photo of what we made for you on our Instagram and Facebook, never with names or faces. Leave it unticked and we won't.
Your party page
Each party box order gets its own private page. Anyone who has its link can see the order on it, including the guest names, so share the link only with people you'd want to see it. The page closes for good 60 days after your pickup or delivery day.
We note when the page is opened (the first and latest time, and how many times), so we know you've seen your design before we follow up. After your party, we may leave you a thank-you card on the page and email you that it's there. Once it's there, we also note whether its Google review, Instagram or Facebook buttons are tapped. Nothing else about your visit is recorded: not who you are beyond your order, and not where you are.
How long we keep your details
Six months after your pickup or party day, we automatically clear the guest names, the birthday child's name and age, your phone number, your delivery address and your notes. Messages sent through our custom ideas form have the email, phone number and message cleared six months after they arrive. We keep your name, your email and what you ordered and paid (including the theme and design) as part of our business records. If you start planning a party or fill a cart without finishing, what you entered stays only on your own device, and only for one week.
Where it's kept
We use a few trusted services to run the shop: Cloudflare for the website, our order system and photo storage (and a quick automated check, Cloudflare Turnstile, that may run before photos are saved, to keep out bots), Resend to send order emails, and Google for our email inbox. If our order system can't be reached when you order, your order is emailed to that inbox instead so it isn't lost; we delete that email once the order is in our system. Our page fonts load from Google Fonts, so Google sees your device's internet address when a page opens, as it does for any website that uses them. These services store information for us and may keep it on servers outside Canada.
The party planner and your order basket are saved on your own device as you go, so you can come back to finish. We count visits and how far people get through the party planner, using our own counter and Cloudflare Web Analytics, without cookies and without recording who you are. For each visit we note only the first page, the kind of site you came from (for example Instagram or Google) or the QR code you scanned, and whether it's a phone or a computer.
Seeing, changing or deleting your details
Email craftdreamsco@gmail.com and we'll show you what we have, fix anything that's wrong, or delete it once we no longer need it for your order and our business records.