Privacy policy

Privacy Policy

Last updated: June 10, 2026

This Privacy Policy explains how Together we Stick ("we", "us") collects, uses, and protects your information when you visit our online store, upload photos, place an order, or contact us. The data controller is Together we Stick, 34 Muskogee Crossing, Dallas, Georgia 30132; contact hello@togetherwestick.com.

Customer-Uploaded Photos & Personalization Text

Our custom products are made to order using photos and text that you upload. We treat these uploads as sensitive personal data.

We use uploaded photos and personalization text strictly to produce and ship your order.
We do not use customer-uploaded photos for marketing, social media, website examples, or any other public purpose unless you have given separate, explicit consent (for example, by checking a dedicated permission box at checkout).
Uploaded images are processed securely through our personalization application, NINEMAGS, and our e-commerce platform, Shopify, strictly to fulfill your order.
Photos are retained only as long as needed to fulfill your order, handle any remake or warranty claims, and meet necessary record-keeping obligations. After that period, files are deleted from our active production storage.

Notice at Collection (US State Privacy Laws)

We collect the following categories of personal information:

Identifiers & contact data — name, email, phone, billing/shipping address, IP address.
Commercial information — order history, order details, returns, remake requests.
Customer-uploaded content — photos and personalization text you submit.
Internet activity — pages viewed, cookies, analytics identifiers, device and browser data.
Geolocation — approximate location derived from IP address for fraud prevention and shipping estimates.

We do not sell personal information for monetary consideration. To opt out of any "sale" or "sharing" for targeted advertising (if applicable under state laws like CCPA/CPRA, VCDPA, etc.), email hello@togetherwestick.com.

How We Use Information

Process, produce, and ship your orders.
Communicate order updates, tracking details, and customer support replies.
Send requests for product reviews after your purchase.
Detect and prevent fraud, abuse, or unauthorized access.
Comply with tax, accounting, and legal record-keeping obligations (including Georgia state requirements).
Send marketing emails — only if you have opted in. You can unsubscribe at any time using the link provided in every marketing email.

Service Providers

We share personal information with third-party processors strictly to operate our store. These include Shopify (e-commerce platform and payment processing), NINEMAGS (product personalization), shipping carriers (such as USPS), our email marketing provider, and customer review platforms. Each provider is bound to use your information only as needed to perform its specific service for us.

International Data Transfers

Our business and our servers are located in the United States. If you are accessing our store or placing an order from Canada, please be aware that your information will be transferred to, processed, and stored in the United States, where privacy laws may differ from those in your jurisdiction.

Your Privacy Rights

Depending on your state or province of residence, you may have the right to access, correct, delete, or opt out of certain uses of your personal data. To exercise any of these rights, please email hello@togetherwestick.com. We may need to verify your identity before fulfilling the request.

Children's Privacy (COPPA)

Our store is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information without parental consent, please contact us immediately so we can delete it.

Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS). However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.