GOOD TO KNOW
Privacy Policy
Effective October 10, 2026.
This policy explains how PopaLuma handles information when you browse, buy cards, contact us, or use our optional email and occasion-planning features.
Information we collect
When you order, we receive information needed to process and fulfill your purchase, such as your name, email, delivery address, order items, payment status, and shipping details. If you provide a phone number or contact our support team, we may retain that information and the messages or photos you send.
Optional email signups collect your name, email, subscription preferences, and confirmation records. My Special Days and Birthday Club may store names or nicknames, occasion dates, relationships, selected cards, greetings, and other details you choose to enter. Only enter information about others that you are authorized to share. Do not enter sensitive medical, financial, or identity-document information.
If you sign in with ChatGPT, we receive account identifiers and profile information supplied for sign-in, such as your name and email. We do not receive your ChatGPT password or access to your conversations through this sign-in.
Our site records browsing events such as visits, product views, cart activity, and checkout activity using a random session identifier. Campaign links may record referral information associated with visits or orders. Hosting and security services may also process technical information such as IP addresses, browser details, request logs, and device information.
How we use information
We use information to fulfill orders, process payments and refunds, arrange delivery, answer questions, investigate problems, maintain accounts and saved occasions, send requested reminders or availability notices, prevent misuse, and understand how visitors use the store. We use email preferences to determine which optional marketing messages to send.
Payments and service providers
Checkout payments are processed through Stripe. PopaLuma does not store your full payment-card number. We receive transaction details needed for order management and refunds.
We share relevant information with providers supporting hosting, account sign-in, payment processing, email delivery, and shipping. These may include OpenAI/ChatGPT sign-in, Cloudflare hosting, Stripe payments, Resend or AWeber email services, and Shippo and delivery carriers when shipping services are used. Shipping providers receive recipient and parcel details needed to deliver orders. Providers handle information under their own applicable terms and privacy policies.
We may disclose information when required by law, to protect customers and our business, or as part of a business transfer subject to appropriate safeguards. We do not sell customer contact lists.
Cookies and browser storage
We use browser storage and cookies to remember your cart, favorites, popup preferences, account sessions, and campaign or session information. The signup-popup preference cookie can remain for up to one year. Other storage may remain until you clear it or the relevant service expires it.
You can clear cookies and site data or restrict them in your browser settings. Doing so may remove saved preferences or affect sign-in and shopping features. Our first-party shopping-event tracking is not an advertising pixel.
Email choices and saved occasions
You can unsubscribe from marketing emails using the link in the email or by contacting us. Occasion reminders and marketing preferences are separate where offered. You can update or remove saved occasions through the relevant account features, or request assistance. Unsubscribing from promotions does not stop essential order, shipping, refund, security, or support messages.
Retention and security
We retain information as needed to provide services, maintain order and financial records, resolve disputes, prevent fraud, and meet applicable obligations. Retention varies by record type. Some information may remain in backups or service-provider records for a limited period after removal from active systems.
We use access controls and other measures to protect information. No online system is completely secure. Keep private order links and account access confidential, and never email us your full payment-card details.
Your requests
Contact support@popaluma.com to request access, correction, or deletion of personal information, or to ask about its use. We may verify your identity before acting. Some records must be retained for legal, accounting, security, or transaction reasons. Applicable rights depend on your location; we will handle requests in accordance with applicable law.
Children, international processing and updates
The store and customer account features are intended for adults, not children under 13. If you believe a child has submitted personal information directly, contact us so we can investigate and remove it where appropriate.
Our providers may process information in the United States and other countries. We will update this page when our practices change and provide additional notice when appropriate.
Contact
For privacy questions, email support@popaluma.com with the subject “Privacy request.”
Optional checkout reminders
If you enter your email and choose the checkout reminder option, we save your card selection and may send one reminder after an unpaid checkout expires. This does not subscribe you to a newsletter. The private link expires after 14 days and includes a Stop reminders option. Current prices and available stock apply when you return.