Privacy Policy
Last updated: December 2024
Introduction
Christmas-Letter.com ("we," "us," or "our") is operated by INP Contracting Inc., based in Alberta, Canada. We are committed to protecting the privacy of our users and their children. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Information We Collect
Information About Your Child
When you submit a letter to Santa on behalf of your child, we collect:
- Child's first name
- Age and gender
- School name (optional)
- City and Province/State
- Christmas wishlist items (optional)
- Favorite reindeer
- Names of important people in their life (family members, friends, pets) (optional)
- Message to Santa
Parent/Guardian Information
- Email address (for letter delivery)
- Shipping address (for premium letter orders)
- Payment information (processed securely by Stripe)
Automatically Collected Information
- IP address (for security and fraud prevention)
- Browser type and device information
- Pages visited and interactions with our website
- Cookies and similar tracking technologies
How We Use Your Information
We use the information we collect to:
- Generate personalized letters from Santa for your child
- Send the digital letter to your email address
- Process and fulfill premium letter orders
- Send order confirmations and shipping updates
- Respond to your inquiries via our contact form
- Prevent fraud and ensure website security
- Improve our services and user experience
- Analyze website usage through analytics tools
Third-Party Services
We share your information with the following third-party service providers who help us operate our service:
OpenAI
Used to generate personalized Santa letters. Receives child's name, age, wishlist, and message to create the letter content.
Stripe
Processes payments securely. We do not store your credit card information on our servers.
SendGrid
Sends transactional emails including your child's Santa letter and order confirmations.
Google Analytics
Helps us understand how visitors use our website. Collects anonymized usage data.
Meta (Facebook) Pixel
Used for advertising measurement and optimization. You can opt out of this tracking.
DigitalOcean
Hosts our database infrastructure where your information is securely stored.
These service providers maintain industry-standard data protection practices and are committed to safeguarding your personal information in accordance with applicable privacy laws.
Data Retention
We retain your information for the following periods:
- Santa letters: 2 years after creation, to allow you to access your letter
- Order records: 7 years for tax and legal compliance purposes
After these periods, we will securely delete or anonymize your personal information.
Your Privacy Rights
Under PIPEDA, you have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct any inaccurate information
- Deletion: Request that we delete your personal information
- Withdraw consent: Withdraw your consent to our processing of your information
To exercise any of these rights, please use our privacy request form or contact us at [email protected].
Cookies and Tracking
We use cookies and similar tracking technologies to:
- Remember your preferences and form data
- Analyze website traffic and usage patterns
- Deliver relevant advertisements
You can control cookies through your browser settings. Disabling cookies may affect some website functionality.
Children's Privacy
Our service is designed for parents and guardians to create magical experiences for their children. We do not knowingly collect information directly from children under 13 years of age. All information about children is provided by their parent or legal guardian, who must consent to the collection and use of their child's information by submitting the Santa letter form.
If you believe we have inadvertently collected information from a child without parental consent, please contact us immediately and we will delete the information.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:
- HTTPS encryption for all data transmission
- Secure payment processing through Stripe
- Access controls limiting who can view personal data
- Regular security reviews of our systems
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Christmas-Letter.com
INP Contracting Inc.
Email: [email protected]
If you are not satisfied with our response to your privacy concern, you may contact the Office of the Privacy Commissioner of Canada.