Privacy policy
Privacy Policy
This Privacy Policy explains what information The Written Hug, operated by Invenient Capital Partners, collects, how we use and share it, and the rights you have. It applies to TheWrittenHug.com and to orders placed through it.
1. Information we collect
From you, the buyer: name, email address, billing address, and order history. Payment details are processed by Shopify Payments or the processor you choose at checkout; we never see or store full card numbers.
About your recipient: the name and mailing address you provide, and the message you write. You provide this information; we do not collect it from the recipient.
Automatically: device and browser information, IP address, pages viewed, and similar analytics data collected through cookies and the Shopify platform.
From communications: emails you send us and form submissions, kept to provide support.
2. How we use information
To process payment and fulfill orders; to produce, quality check, and mail your card; to send order and shipping emails; to provide customer support; to screen message content against our acceptable use rules; to prevent fraud and abuse; to comply with legal obligations; and, only if you opt in, to send marketing email. Where GDPR applies, our legal bases are performance of a contract, legitimate interests in operating and protecting the service, legal obligation, and consent for marketing.
3. Your message is special
We treat message content as sensitive. It is used only to produce your card, for content safety review, to provide support you request, and to meet legal obligations. We do not use your messages for advertising, do not sell them, and do not use them to train marketing or AI systems.
4. Who we share information with
Shopify, which hosts our store and processes checkout. Payment processors, to charge your payment method. Our printing and handwriting partner, which receives the recipient name and address, the message, and the card design, solely to produce and mail your order. National postal services, which receive the envelope addressing needed to deliver. Email service providers, to send the emails described above. Analytics providers, in aggregate or pseudonymous form. We may also disclose information when required by law, to enforce our Terms, or to protect the rights and safety of any person. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
5. Cookies
We use necessary cookies to run the cart and checkout and analytics cookies to understand site usage. You can control cookies through your browser settings and, where shown, the cookie preferences link in our footer.
6. Retention
Order records, including messages and recipient addresses, are kept as long as needed for fulfillment, support, fraud prevention, accounting, and legal compliance, after which they are deleted or anonymized. Support emails are kept for up to two years. Marketing consents are kept until you withdraw them.
7. Security
We rely on Shopify's PCI compliant infrastructure for checkout and use encrypted connections, access controls, and least privilege practices for order data. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and regulators of any breach as required by law.
8. International transfers
We are based in the United States and process orders there. If you order from elsewhere, your information will be transferred to the United States and protected as described in this policy.
9. Your rights
Depending on your location, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to opt out of marketing at any time using the unsubscribe link in any marketing email. California residents have the rights to know, delete, and correct, and the right not to be discriminated against for exercising them. EU and UK residents may also lodge a complaint with their data protection authority. To exercise any right, email privacy@thewrittenhug.com; we will verify your identity and respond within the time required by law.
10. Recipients
If you received a card and want to know what information we hold about you, want it deleted, or want no further mail from our service, email privacy@thewrittenhug.com and we will assist. We hold only your name and mailing address, provided by the sender.
11. Children
The Site is not directed to children under 13 and we do not knowingly collect their information. If you believe a child provided us information, contact us and we will delete it.
12. Changes
We may update this policy and will post the new version here with an updated date. Material changes will be highlighted on the Site or by email.
Contact. privacy@thewrittenhug.com, or by mail at 780 Morosgo Drive, Atlanta, GA 30324, United States.
Last updated June 2026.