Privacy Policy

The information we collect depends on how you use GUMALIFE.

• Identity and contact details, such as name, email address, phone number, and account details.
• Order and delivery details, including products, customization choices, shipping and billing addresses, order history, and support communications.
• Photos, text, design settings, generated previews, and other content you choose to upload.
• Payment status and transaction identifiers from Stripe; GUMALIFE does not receive or store full payment-card numbers.
• Technical and usage information, such as IP address, browser or device information, security events, cookie identifiers, and interactions with the site.
• Marketing preferences and information you submit through forms, reviews, or promotions.

We collect information directly from you, automatically through the site and essential storage technologies, and from service providers that help process payments, host the store, deliver messages, prevent fraud, produce orders, and deliver packages.

• Provide previews, save designs, process payment, create an account, produce and deliver orders, and provide tracking.
• Authenticate users, prevent fraud and abuse, enforce usage limits, troubleshoot errors, and protect the service.
• Respond to questions, administer refunds or replacements, and keep records of customer service.
• Send transactional messages about accounts, orders, payments, shipping, and policy changes.
• Send product news and offers when you opt in, with an unsubscribe option in marketing messages.
• Analyze and improve products, site performance, accessibility, and customer experience.
• Meet tax, accounting, legal, regulatory, dispute, and enforcement obligations.

We disclose information only as reasonably needed to operate the business or when law requires it. Providers may include Stripe for payment, Supabase and hosting providers for application data, Brevo or another email provider for messages, production partners for printing, and carriers for delivery. These providers process information under their own terms and contractual obligations.

• We may disclose information to professional advisers, insurers, auditors, or authorities when reasonably necessary.
• Information may transfer as part of a merger, financing, acquisition, restructuring, or sale of business assets, subject to appropriate protections.
• We do not sell personal information and do not share it for cross-context behavioral advertising.

Uploaded media and generated previews are used to create your design, manufacture your product, help resolve quality issues, and protect the service. Do not upload sensitive personal information or an image you do not have permission to use. Production providers receive only the files and order details needed to make the item.

We use cookies and browser storage for essential functions such as secure sessions, account access, carts, guest design allowances, preferences, and fraud prevention. We also use Google Analytics 4 to understand page and ecommerce interactions, referrals, device information, and approximate location. Our custom ecommerce events do not send checkout email, name, street address, payment-card data, or uploaded photos. See the Cookie Policy for details and browser controls.

We keep information only as long as reasonably needed for the purposes described here. Retention depends on the type of record: order, payment, tax, fraud, and dispute records may be kept for legal and accounting periods; account information remains while an account is active; design and support files may be kept for production, reorder, warranty, security, and dispute needs. We delete or de-identify information when it is no longer reasonably needed, subject to backups and legal obligations.

We use administrative, technical, and organizational measures intended to protect information, including encrypted connections, restricted administrative access, signed payment webhooks, and secure password handling. No system can guarantee absolute security, so please use a unique password and contact us if you suspect unauthorized access.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or an explanation of how personal information is used. You may also object to certain processing, withdraw consent, or appeal a decision where local law provides those rights. We may verify identity before completing a request and may retain information when an exception applies.

• Unsubscribe from marketing using the link in a promotional email; transactional order and account messages will continue.
• Request account or privacy help at support@gumalife.com.
• Control cookies and local storage through browser settings, understanding that blocking essential storage may stop sign-in, cart, or customizer features from working.

Where the California Consumer Privacy Act applies, California residents may have rights to know, access, delete, correct, and receive information about personal information, to limit certain uses of sensitive information, and to be free from discrimination for exercising a right. GUMALIFE does not sell personal information or share it for cross-context behavioral advertising. Requests may be sent to support@gumalife.com, including through an authorized agent where permitted.

GUMALIFE is not directed to children under 13 and we do not knowingly collect personal information from a child under 13 without legally valid parental consent. If you believe a child provided information, contact us so we can review and delete it where required.

We may update this policy to reflect operational or legal changes. The latest version and update date will remain posted here. For privacy questions or requests, email support@gumalife.com.