Privacy Policy

Last updated: August 2026

Who We Are

Family Flags is the public name of this shop. The registered legal name is [LEGAL NAME — TBD], [REGISTERED BUSINESS ADDRESS — TBD] (“we,” “us,” “our”). We are the data controller for the personal information described below. For any privacy question, write colemswain@gmail.com.

Information We Collect

We collect: (a) the details you provide while designing a mosaic (country selections and names); (b) an email address if you choose to save a design or receive a recovery link; and (c) order details when you purchase (email, shipping address, and—when your order is a gift—the recipient’s name and shipping address). Payment card details are entered directly into Shopify’s secure hosted checkout and are never transmitted to or stored on our servers.

How We Use Your Information

We use your information to generate your mosaic, create a shareable link to your design, process and fulfill your order, send order/shipping emails, respond to your requests, and improve the shop.

Cookies & Analytics

We aim to keep tracking minimal. Any product analytics we use is configured to be privacy-respecting and cookieless, collecting only coarse, non-identifying usage events (for example, that a design was created or a checkout was started). Shopify may set cookies necessary for its hosted checkout. You can control cookies through your browser settings.

Third-Party Services

We rely on trusted processors, each governed by its own privacy policy: Shopify (hosted checkout and payment), Printful (print production and shipping, which requires the recipient’s name and address), and our transactional email and hosting providers. We do not sell your personal information.

Gift Orders & Recipient Data

When you send a mosaic as a gift, you provide the recipient’s name and shipping address so we can deliver it. We use that information solely to fulfill and ship the gift via Printful and to include any gift message you write.

Data Retention

Mosaic configurations are stored—keyed by a deterministic hash of the design—so shareable links remain permanent. A configuration encodes your art choices (countries, weights, style, and any names you entered), not payment data. Order records are kept as needed for the shop and for tax and accounting. You may request deletion as described below.

Your Rights (GDPR)

If you are in the European Economic Area or the UK, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. To exercise any right, contact colemswain@gmail.com. You also have the right to lodge a complaint with your local data protection authority.

Your Rights (California / CCPA)

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, to request access to or deletion of that information, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. Submit a request at colemswain@gmail.com.

Children’s Privacy

Our service is not directed to children under 16, and we do not knowingly collect their personal information.

Changes to This Policy

We may update this policy from time to time; the “Last updated” date above reflects the current revision. Governing law: [JURISDICTION / GOVERNING LAW — TBD].

Contact

For privacy-related inquiries, write colemswain@gmail.com.