Privacy Policy
The Engravers Shop operates theengraversshop.com. This policy explains what we collect, why, and what you can do about it.
What we collect
When you place an order: name, email address, shipping and billing address, phone number, the engraving text you submit, and any images you upload.
Payment information: we do not see or store your full card number. Payments are processed by our payment providers, who handle card data under PCI-DSS. We receive only a confirmation and the last four digits.
Automatically: IP address, browser type, device type, pages viewed and referring site, collected through cookies and analytics.
When you contact us: the contents of your message and your contact details.
Why we use it
To produce and deliver your order. To send order confirmations, proofs and dispatch notifications. To answer your questions. To detect and prevent fraud. To understand how the site is used and improve it. To send marketing email, only where you have opted in.
Engraving text and uploaded images
The engraving text and any photograph or logo you upload are used solely to produce your order. We may retain a production record for warranty and reorder purposes. We do not publish, sell or share your engraving content, and we do not use it in marketing without asking you first.
Who we share it with
Payment processors, to take payment. Shipping carriers and postal services, to deliver your order. Customs authorities, where required by law for international shipments. Website hosting and email service providers. Analytics providers.
We do not sell your personal information to anyone.
Cookies
We use cookies that are strictly necessary for the site to function, analytics cookies to understand traffic, and — where you consent — advertising cookies for marketing measurement. You can block cookies in your browser settings, though parts of the site may then not work correctly.
How long we keep it
Order records are kept for 7 years to meet tax and accounting obligations. Marketing contacts are kept until you unsubscribe. Analytics data is retained for 26 months.
Your rights
Wherever you live, you may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or stop sending you marketing. Contact us and we will respond within 30 days.
If you are in the EEA or UK (GDPR): our lawful bases are contract performance for order processing, legal obligation for tax and customs records, consent for marketing, and legitimate interest for fraud prevention and site improvement. You have the right to data portability and the right to lodge a complaint with your national supervisory authority.
If you are in California (CCPA/CPRA): you have the right to know what personal information is collected, to request deletion, to correct inaccurate information, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined under the CPRA. We will not discriminate against you for exercising any of these rights.
International transfers
We operate from India. If you order from outside India, your information is transferred to and processed in India. We apply appropriate safeguards to protect it in transit and at rest.
Security
We use encrypted connections (HTTPS), restrict access to order data to staff who need it, and use reputable third-party processors. No system is perfectly secure, but we take this seriously and will notify you promptly if a breach affects your data.
Children
This site is not directed at children under 16 and we do not knowingly collect their information. If you believe a child has provided us data, contact us and we will delete it.
Changes
We will update this page if this policy changes. Material changes will be notified by email where we hold your address.