Crown & Canvas

Privacy Policy

Last updated: February 15, 2026

1. Introduction

Crown & Canvas ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services to create custom pet portraits.

By using our website and services, you consent to the practices described in this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

Information You Provide Directly

  • Contact information: Name, email address
  • Pet photos: Images you upload for portrait creation
  • Pet details: Pet name and any customization preferences
  • Order information: Product selections, sizes, add-ons
  • Shipping address: For physical product delivery (canvas and framed prints)

Information Collected Automatically

  • Device information: Browser type, operating system, screen resolution
  • Usage data: Pages visited, time spent, click patterns
  • IP address: For fraud prevention and analytics
  • Cookies: Session cookies for cart persistence and site functionality

Information from Third Parties

  • Payment processor (Stripe): We receive confirmation of payment status. We do not store your credit card number, CVV, or full card details — Stripe handles all payment processing securely.

3. How We Use Your Information

We use the information we collect to:

  • Process and fulfill your pet portrait orders
  • Generate your custom pet portrait using AI technology
  • Send order confirmations, digital proofs, and delivery updates
  • Provide customer support and respond to inquiries
  • Process payments and prevent fraud
  • Improve our website, products, and services
  • Comply with legal obligations

We will never sell your personal information or pet photos to third parties for marketing purposes.

4. How We Share Your Information

We share your information only with the following categories of service providers, and only as necessary to fulfill your order:

  • Stripe — Payment processing. Stripe's privacy policy applies to payment data.
  • Print fulfillment partners — To produce and ship canvas and framed prints. They receive your shipping address and the portrait image file.
  • Email service providers — To send order confirmations and updates.
  • AI processing services — To generate your pet portrait. Your pet photo is processed to create the portrait and is not used for any other purpose.
  • Hosting provider (Vercel) — Our website infrastructure provider.

We may also disclose information if required by law, court order, or to protect our rights and safety.

5. Pet Photo Usage

Your pet photos are important to us, and we handle them with care:

  • Photos are used solely to create your ordered portrait
  • We may retain completed portraits in our systems for order fulfillment and re-download purposes
  • We will not use your pet's photo in marketing materials without your explicit written consent
  • You may request deletion of your photos at any time by contacting us

6. Data Retention

  • Order data: Retained for as long as necessary for business and legal purposes (typically 3 years for tax compliance)
  • Pet photos and portraits: Retained for 90 days after order completion for re-download purposes, then deleted unless you request earlier removal
  • Account/contact information: Retained until you request deletion

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • HTTPS encryption for all data in transit
  • PCI-DSS compliant payment processing through Stripe
  • Access controls limiting who can view customer data
  • Regular security reviews of our systems

While we take reasonable steps to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Cookies

We use cookies for:

  • Essential cookies: Cart functionality, session management
  • Analytics cookies: Understanding how visitors use our site to improve the experience

You can control cookies through your browser settings. Disabling essential cookies may prevent the shopping cart from functioning properly.

9. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your personal information and pet photos
  • Portability: Request your data in a portable format
  • Opt-out: Unsubscribe from marketing emails at any time

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to request deletion. We do not sell personal information. To exercise your rights, contact us at the email below.

European Residents (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, and port your data. Our legal basis for processing is contract performance (fulfilling your order) and legitimate interest (improving our services). Contact us to exercise any of these rights.

10. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

  • Email: hello@crownandcanvas.com
  • Subject line: Privacy Request

We will respond to all privacy-related requests within 30 days.