We collect only the information needed to fulfil your order — name, contact details, delivery address, personalization content, and any photos or logos you send. We do not sell your data.

Personalization files you upload

When you upload a photo, logo, fingerprint, signature or handwriting image on a product page, the file is sent directly to a private storage bucket. It is used for one purpose only: producing your order.

What we accept. JPG, PNG, HEIC and WEBP images; logos may also be PDF or SVG. Maximum 20 MB per file. File type is verified on our server, not just in your browser.
Where it is stored. A private bucket with no public access. Files are stored under randomly generated names — never your filename — and cannot be browsed, guessed or listed by anyone.
Who can see it. Only our production team, through a short-lived link that expires after 10 minutes and is regenerated each time it is used.
Sensitive content. Fingerprints, signatures, handwriting and photographs of people (including close-ups of eyes) are treated as sensitive personal information under Canada's PIPEDA.
Never shared. Filenames, storage locations, links, thumbnails and file contents are never sent to analytics, advertising or error-reporting services, and are never shared with third parties beyond producing your order.

How long we keep uploaded files

Uploaded files are automatically deleted 90 days after the file is uploaded. Deletion runs as a scheduled daily job — it is not dependent on anyone remembering to do it. Uploads that are abandoned before checkout are deleted within 24 hours. If our team records an earlier deletion date for a specific order, that earlier date is used instead.

The private link our production team uses to retrieve your file expires on the same 90-day schedule, and is invalidated immediately when the file is deleted.

You can ask us to delete your uploaded files at any time by emailing hello@oruzgifts.com with your order number. We honour deletion requests within 30 days, unless we still need the file to complete an order already in production.

Personalization text

Text you enter for engraving or printing is stored with your order and used only to produce it.

Analytics

We use analytics to understand aggregate traffic patterns. We do not send personalization text, uploaded files, file names, storage links, email addresses or other personally identifiable information to analytics.

Measurement script set by our hosting platform

Our website is hosted on Lovable. The hosting platform automatically includes its own visitor-measurement script (flock.js) on every page. It is placed there by the platform, not by Oruz Gifts, and we do not control what it collects. We are disclosing it here because it runs on our domain.

What it collects. The page you are viewing, the page you arrived from, and general details about your device and browser — browser and version, operating system, device type, screen size, language, time zone, and a country-level location derived from your network address. It also records page-speed measurements. It does not collect your name, email address, order details, personalization text or any file you upload.
An identifier is stored on your device. The script stores a randomly generated session identifier in your browser (in local storage, session storage and a cookie) so that several page views in one visit can be counted as a single visit. It expires after 30 minutes of inactivity, after which a new identifier is generated. It is not linked to your identity or to any account.
Where it goes. The measurements are sent to Tinybird, an analytics provider, at api.tinybird.co, on behalf of the hosting platform. They are not sent to advertising networks.
What it does not do. It does not build a browser fingerprint, does not track you across other websites, and is not used for advertising or profiling.

Because it stores an identifier on your device, we treat it the same way we would treat a cookie under Canadian privacy law, including Quebec's Law 25. We have asked our hosting platform to allow this script to be disabled, and we will remove this section if and when it is switched off. If you would prefer not to be measured at all, you can block api.tinybird.co in your browser or use your browser's tracking-protection setting.

For the full privacy policy of record, please refer to our main store policies.