Privacy Policy

Last updated: October 9, 2026

Pocket Palz Trading Cards (“Pocket Palz”, “we”, “us”) is a Canadian business that prints custom pet trading cards. This policy explains what personal information we collect when you use pocketpalztc.com, why we collect it, who helps us handle it, and the choices you have. Questions? Email info@pocketpalztc.com.

What we collect

• Account details: your email address and a password (stored securely by our authentication provider — we never see your password in readable form).
• Your cards: the photos you upload, the names, text and designs you create, and the projects you save.
• Order details: your name, email, shipping address and the items you order. Payment is handled by Shopify, so we never see or store your card number.
• Print files: the print-ready PDF we generate from your design when you check out.
• Featuring choices: whether you ticked “Allow this card to be featured” for a card in your cart.
• My Palz codes: if you tick “Add a My Palz code” for a card, we create a code for that card, keep a copy of its front as printed, and record which signed-in accounts add it to their My Palz collection.
• Emails you send us and our replies.

We don’t use advertising or analytics trackers on this site at this time. If that changes, we’ll update this policy and ask for your consent where required.

How we use it

• To run your account and save your card projects.
• To print, pack, ship and support your order, including sending order and shipping updates.
• To feature a card on our website or Instagram, only if you ticked the optional box for that card.
• To make a My Palz code work, only if you ticked the optional box for that card. Anyone who scans or enters the code can see the card as printed (which may include a pet name, your name and Instagram handle if you put them on it) and how many people have added it. They can’t see your account, email or address.
• To keep the site secure and prevent fraud or abuse.
• To meet legal, tax and accounting obligations.

We don’t sell your personal information. We’ll only send you marketing emails if you separately and expressly agree, and every such email will have an unsubscribe link.

Who handles it for us

We use trusted service providers who process information on our behalf:

• Supabase — accounts, database and photo storage.
• Shopify — checkout, payment and order records.
• Resend — sending order and notification emails.
• Netlify — website hosting.
• Google Fonts and jsDelivr — fonts and code libraries your browser loads when you visit (they may see your IP address).
• Shipping carriers — your name, address and phone/email (if provided) so parcels can be delivered.

Some of these providers store data on servers outside Canada, including in the United States, where it may be subject to the laws of that country.

Cookies and local storage

We use your browser’s local storage only for things the site needs to work: keeping you signed in and remembering what’s in your cart. We don’t use tracking or advertising cookies. Shopify may set its own cookies at checkout.

How long we keep it

• Account, projects and photos: until you delete your account. Deleting your account (from your account menu) removes your profile, saved projects and uploaded photos.
• My Palz codes: kept so the card keeps working for the people who added it. If you delete your account, the code is no longer linked to you, but the card image and name stay visible to people who hold it, and cards you added to your own My Palz are removed. To have a code deactivated, email info@pocketpalztc.com.
• Order records: kept as long as needed to fulfil and support your order and to meet tax and accounting rules (generally up to six years in Canada).
• Print files: kept for a limited time after your order so we can reprint or fix problems; they may remain briefly after an account is deleted and are then removed. You can ask us to delete them sooner at info@pocketpalztc.com.

Your choices and rights

You can ask to see the personal information we hold about you, correct it, withdraw consent (for example, for featuring a card), or have it deleted, subject to legal record-keeping requirements. Email info@pocketpalztc.com and we’ll respond within 30 days. If you’re not satisfied, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Security

Your account data is protected with access controls so that signed-in users can only see their own cards, photos and print files. No system is perfectly secure, but we take reasonable steps to protect your information and will notify affected people if a breach creates a real risk of significant harm.

Children

Pocket Palz is intended for adults and for parents or guardians ordering on a child’s behalf. We don’t knowingly collect information from children under 13.

Changes

If we change this policy we’ll update the date above, and tell you directly if the change is significant.