Privacy Policy

Last updated: December 2024

Introduction

Christmas-Letter.com ("we," "us," or "our") is operated by INP Contracting Inc., based in Alberta, Canada. We are committed to protecting the privacy of our users and their children. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Information We Collect

Information About Your Child

When you submit a letter to Santa on behalf of your child, we collect:

  • Child's first name
  • Age and gender
  • School name (optional)
  • City and Province/State
  • Christmas wishlist items (optional)
  • Favorite reindeer
  • Names of important people in their life (family members, friends, pets) (optional)
  • Message to Santa

Parent/Guardian Information

  • Email address (for letter delivery)
  • Shipping address (for premium letter orders)
  • Payment information (processed securely by Stripe)

Automatically Collected Information

  • IP address (for security and fraud prevention)
  • Browser type and device information
  • Pages visited and interactions with our website
  • Cookies and similar tracking technologies

How We Use Your Information

We use the information we collect to:

  • Generate personalized letters from Santa for your child
  • Send the digital letter to your email address
  • Process and fulfill premium letter orders
  • Send order confirmations and shipping updates
  • Respond to your inquiries via our contact form
  • Prevent fraud and ensure website security
  • Improve our services and user experience
  • Analyze website usage through analytics tools

Third-Party Services

We share your information with the following third-party service providers who help us operate our service:

OpenAI

Used to generate personalized Santa letters. Receives child's name, age, wishlist, and message to create the letter content.

Stripe

Processes payments securely. We do not store your credit card information on our servers.

SendGrid

Sends transactional emails including your child's Santa letter and order confirmations.

Google Analytics

Helps us understand how visitors use our website. Collects anonymized usage data.

Meta (Facebook) Pixel

Used for advertising measurement and optimization. You can opt out of this tracking.

DigitalOcean

Hosts our database infrastructure where your information is securely stored.

These service providers maintain industry-standard data protection practices and are committed to safeguarding your personal information in accordance with applicable privacy laws.

Data Retention

We retain your information for the following periods:

  • Santa letters: 2 years after creation, to allow you to access your letter
  • Order records: 7 years for tax and legal compliance purposes

After these periods, we will securely delete or anonymize your personal information.

Your Privacy Rights

Under PIPEDA, you have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request that we correct any inaccurate information
  • Deletion: Request that we delete your personal information
  • Withdraw consent: Withdraw your consent to our processing of your information

To exercise any of these rights, please use our privacy request form or contact us at [email protected].

Cookies and Tracking

We use cookies and similar tracking technologies to:

  • Remember your preferences and form data
  • Analyze website traffic and usage patterns
  • Deliver relevant advertisements

You can control cookies through your browser settings. Disabling cookies may affect some website functionality.

Children's Privacy

Our service is designed for parents and guardians to create magical experiences for their children. We do not knowingly collect information directly from children under 13 years of age. All information about children is provided by their parent or legal guardian, who must consent to the collection and use of their child's information by submitting the Santa letter form.

If you believe we have inadvertently collected information from a child without parental consent, please contact us immediately and we will delete the information.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

  • HTTPS encryption for all data transmission
  • Secure payment processing through Stripe
  • Access controls limiting who can view personal data
  • Regular security reviews of our systems

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Christmas-Letter.com
INP Contracting Inc.
Email: [email protected]

If you are not satisfied with our response to your privacy concern, you may contact the Office of the Privacy Commissioner of Canada.