Privacy Commitment

📅 Effective: January 1, 2026

1. Our Promise

Your privacy matters to us. This policy explains how Ciftia collects, uses, and protects your personal information when you visit our website, personalize a gift, or place an order. Because every Ciftia gift begins with something personal — a name, a date, a photo — we treat your data with the same care we put into every piece we make.

2. What We Collect

To craft your custom gift and deliver it smoothly, we collect the following types of information:

  • Contact Details: Your name, email address, phone number, and shipping/billing addresses.
  • Personalization Content: Names, dates, messages, and photos you upload to personalize your gift. This content is used solely to produce your order and is never shared publicly without your consent.
  • Transaction History: Products viewed, personalized, added to cart, or purchased, along with order details and payment preferences.
  • Technical Data: IP address, browser type, device information, and how you interact with our site.

3. How We Use Your Information

Your data helps us create and deliver your custom gift. Here's how we use it:

  • Order Fulfillment: Processing payments, crafting your personalized items, shipping your orders, and providing order confirmations and tracking updates.
  • Personalization Preview: Generating the design preview you approve before we begin crafting. Your uploaded content is stored securely only for the purpose of producing your order.
  • Communication: Sending you updates about your order, promotional offers, and helpful gift ideas (you can opt out anytime).
  • Improvement: Analyzing site usage to enhance our website, products, and customer service.

4. When We Share Information

We never sell your personal data. However, we do share information with trusted partners to make your custom gift possible:

  • Crafting Partners: To produce your personalized item, we share only the necessary personalization content with the workshop handling your order.
  • Shipping Carriers: To deliver your orders, we share your name, address, and contact details with logistics partners like UPS, DHL, and local postal services.
  • Payment Processors: Secure payment gateways (Stripe, PayPal, etc.) handle your payment information — we never store your full credit card details.
  • Service Providers: Analytics tools (like Google Analytics) help us understand how customers use our site, but data is anonymized where possible.

5. Cookies & Tracking

We use cookies and similar technologies to enhance your browsing experience and improve our marketing efforts:

  • Essential Cookies: Keep your shopping cart active, remember your personalization progress, and enable secure checkout.
  • Analytics Cookies: Help us understand which gifts are popular and how visitors navigate our site.
  • Marketing Cookies: Allow us to show you relevant ads and offers on other platforms you visit.

You can manage your cookie preferences through your browser settings at any time.

6. Your Rights & Choices

Depending on where you live, you have certain rights regarding your personal data. These may include:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Update or correct inaccurate information.
  • Deletion: Request that we erase your personal data — including uploaded photos and personalization content — from our systems.
  • Opt-Out: Unsubscribe from marketing emails or disable non-essential cookies.

To exercise any of these rights, simply email us at support@ciftia.com — we'll respond within 48 hours.

7. How We Keep You Safe

We take data security seriously — especially when it involves personal photos and messages. Our measures include:

  • Encryption: All data transmitted between your browser and our servers is protected by 256-bit SSL encryption.
  • Secure Storage: Your personal information and uploaded content are stored on secure, access-controlled servers with regular security audits.
  • Limited Access: Only authorized personnel with a legitimate business need can access customer data — and only for the purpose of fulfilling your order.
  • Content Deletion: Personalization content (photos, messages) is retained only as long as needed to produce and support your order, then securely deleted upon request.
  • Regular Updates: We continuously update our systems to protect against emerging threats.

While no system is 100% invulnerable, we're committed to maintaining the highest standards of data protection.