Privacy notice

Who is responsible for your information?

WishyWeasel is responsible for personal information used to operate this store and fulfil your order. For privacy questions or requests, contact us through the live chat.

Information we use

• Contact and delivery details, such as your name, email, phone number where provided and postal address.
• Order, basket, account and customer-service information.
• Text, images and design details you choose to submit for a personalised card.
• Payment and transaction status. Card payments are handled by our payment provider; we do not store your full card number.
• Technical and security information needed to run the site, protect accounts and prevent abuse.

Why we use it

• To take and manage your order, take payment, create and print your card, deliver it and provide order support. This is necessary to perform our contract with you.
• To operate customer accounts, respond to requests, keep the store secure and improve reliability. We use information for these purposes where our legitimate interests are not overridden by your rights.
• To keep records required by law and handle disputes. This is necessary to meet legal obligations or establish, exercise or defend legal claims.
• Optional analytics or marketing cookies would only be used where enabled and where required consent has been obtained. We use essential browser storage for your basket, account, saved designs and checkout. We do not currently use advertising trackers.

Personalised design and fulfilment

Photos are resized in your browser before the resized image is uploaded. A saved design is created when you add a personalised card to your basket; an unpaid design can be claimed for up to 31 days. Print-ready artwork is generated after the order is paid and securely shared with the services needed to print and deliver your card.

Temporary unpaid render inputs have a 14-day maximum storage lifecycle and successful render inputs are removed sooner where processing completes. Print-ready files and preview thumbnails are retained for up to 30 days from creation to support production and customer service, then expire from the asset store. These asset expiry periods do not mean every related database record is automatically deleted at the same time. Limited design and order metadata may remain for operational support, order history, security, accounting or legal needs; the system does not currently have a fixed automatic deletion period for that metadata. You can ask us to review or erase information, subject to records we must or are entitled to retain.

Who we share information with

We share only what is needed with service providers that help run the store, including commerce and account services, payment processing, hosting, design processing, order production and delivery, and anti-abuse protection. These providers process information to provide their services to us. We do not sell your personal information.

Some service providers may process information outside the UK. Where that happens, appropriate transfer safeguards are used as required by data-protection law.

How long we keep it

We keep personal information only for as long as reasonably needed for the purpose it was collected, including fulfilment, customer support, account and order history, security, accounting and legal obligations. Unpaid saved designs have a 31-day claim window; temporary input files have a 14-day maximum lifecycle; print files and thumbnails have a 30-day maximum lifecycle. Order and design metadata can be retained longer where needed for the purposes above, and currently has no configured automatic deletion interval. We review retention needs and respond to valid erasure requests where we are not required to keep a record.

Your choices and rights

Depending on the circumstances, you may ask for access to, correction or deletion of your personal information, object to or restrict some processing, request a portable copy, or withdraw consent where processing is based on consent. Contact us through the live chat. We may need to verify your identity before acting. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Children, security and updates

Our cards are for many occasions and recipients, including children. If you include a child's name, photo or other personal information in a card design or delivery details, please provide only what is needed and make sure you have permission to share it.

We use access controls and service-provider safeguards to protect information, but no online service can guarantee absolute security. We may update this notice and will show the latest version here.

Last reviewed: 25 October 2026.