Privacy Policy

Last updated: 26th March 2025

At ElephantCards.co.uk, we are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you use our website.

1. Data We Collect

We collect the following personal data from you:

  • The order recipient's name and address.
  • If you create an Auto-Card and select birthdays, we store the day and month (but not the year) of your birthday.
  • The orderer's email address and password.

2. Purpose of Data Collection

We use your personal data for the following purposes:

  • Processing orders.
  • Shipping your products.
  • Customer support.
  • Marketing (if you consent to receive marketing communications).

3. Data Storage

Your personal data is securely stored in a cloud-hosted database (MongoDB) in Ireland. We retain your data for a maximum of 4 years unless required by law to store it longer.

We will only automatically delete your data when it is no longer required for the purposes for which it was collected.

4. User Rights

You have the right to access, update, and delete your personal data. You can manage your personal data by logging into your account dashboard. If you need assistance, please contact us.

5. Data Protection

We take the security of your personal data seriously and use industry-standard encryption to protect it. All data stored on our platform is protected with the highest security measures available.

6. Stripe Data Collection

We use Stripe to process payments. Stripe may collect the following data:

  • Card details, billing addresses, names, and transaction history.

Stripe uses this data solely for processing payments. You can view Stripe's Privacy Policy here for more details on how they handle your data.

7. Cookies

We only use necessary cookies to ensure the proper functioning of our website. These cookies are essential for processing orders and enabling basic website features. We do not use tracking cookies or collect data for advertising purposes.

8. International Data Transfers

Your data is stored in Ireland, which is within the EU and protected under EU data protection laws, including the General Data Protection Regulation (GDPR). We ensure your data is handled in compliance with applicable privacy laws.

9. Changes to the Privacy Policy

We may update our Privacy Policy from time to time. Any changes will be reflected on this page. In the event of significant amendments, we may notify users via email. Please review this Privacy Policy periodically to stay informed about how we are protecting your data.

10. Contact Information

If you have any questions or concerns about your personal data or this Privacy Policy, please contact us.