Privacy policy

Last Updated: September 2, 2025

This Privacy Policy explains how Custom Stuffed Animals ("we", "us", or "our") collects, uses, shares, and protects your personal information when you access customstuffedanimals.com (the “Site”) or interact with us in connection with our products and services ("Services"). We comply with the General Data Protection Regulation (“GDPR”), UK GDPR, California Consumer Privacy Act (“CCPA”), and other applicable privacy laws.

By using our Services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Services.

1. Contact Information & Data Controller

Custom Stuffed Animals
12725 Encinitas Ave, Sylmar, CA, 91342, USA
Email: hello@customstuffedanimals.com

If required under GDPR, Data Subject requests and Data Protection Officer (DPO) inquiries can be sent to the above email address.

2. What Personal Data We Collect

  • Contact Details: Name, email address, postal address, phone number.
  • Account Data: Username, password, login info, security questions.
  • Order & Payment Information: Purchased products, billing/shipping details, payment confirmations, order history.
  • Customer Interactions: Support messages, reviews, other correspondence.
  • Technical & Usage Data: IP address, device/browser details, log files, session data, analytics.
  • Marketing Data: Consent preferences, engagement with emails and marketing communications.

3. How We Collect Data

  • Data provided directly by you (orders, account creation, contact forms, customer support).
  • Automatically through cookies, pixels, analytics, and tracking technologies (see section “Cookies & Tracking”).
  • From third-party partners and integrations (such as payment processors, analytics, email marketing, production & shipping partners).
  • Via APIs, with data shared across our parent organization and companies related to production and product design.

4. How We Use Your Data & Lawful Bases (GDPR)

Purpose Legal Basis (GDPR)
Fulfil orders and provide Services Contract necessity (Art. 6(1)(b))
Customer support and communications Contract necessity or legitimate interests (Art. 6(1)(f))
Analytics, site optimization, fraud prevention (Microsoft Clarity, Google Analytics, Google Tag Manager, Meta Pixel) Legitimate interests (Art. 6(1)(f))
Personalized marketing, newsletters (Klaviyo, Google Ads, Meta) Consent (Art. 6(1)(a)); opt-in required for EU/UK
Production, order management, design, fulfillment (parent org, production partners, APIs) Contract necessity, legitimate interests (Art. 6(1)(b), (f))
Legal obligations and compliance Legal obligation (Art. 6(1)(c))

5. Data Sharing & Processors

  • Analytics & Tracking: Microsoft Clarity, Google Analytics, Google Ads, Google Tag Manager, Meta Pixel (ad and conversion tracking, behavior analysis).
  • Email Marketing: Klaviyo (consent required for EU/UK subscribers; unsubscribe available in each email).
  • Order Management & APIs: Data is shared with our parent company and approved design/production partners to fulfill and deliver orders.
  • Other Service Providers: Payment processors, cloud storage, IT vendors, customer service.
    Each partner uses data according to their own privacy policies.
  • Legal & Compliance: If required by law, to protect rights, or in business sales/mergers.

6. International Data Transfers

Data may be stored/processed in the United States or other countries outside your jurisdiction. If you are in the EU/UK, we use Standard Contractual Clauses or equivalent safeguards to protect your privacy rights.

7. Cookies & Tracking Technologies

We and our partners use cookies, scripts, tags, web beacons, and similar technologies for the following reasons:

  • Site functionality and to remember your preferences
  • Analytics with Microsoft Clarity, Google Analytics
  • Advertising and re-targeting (Google Ads, Meta Pixel)
  • Email marketing automation (Klaviyo)

You may manage cookie preferences via your browser settings. Global Privacy Control (GPC) and similar “Do Not Sell/Share My Info” signals are honored where legally required.

8. Data Retention & Security

We retain data only as long as necessary for the purposes described or as required by law. We use reasonable security measures, but cannot guarantee absolute security.

9. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you
  • Rectify or correct inaccurate personal data
  • Request erasure (“right to be forgotten”)
  • Restrict or object to processing
  • Withdraw consent for marketing
  • Request portability of your data (in structured, machine-readable format)
  • Opt out of sale/sharing of data for targeted advertising

To exercise rights, contact us at hello@customstuffedanimals.com. We may request additional identity verification. You may designate an agent to act on your behalf.

10. Children's Privacy

Our Services are not intended for children under 16. We do not knowingly collect or process data for such individuals. Parents/guardians can request deletion of a child’s personal data by contacting us.

11. Complaints

If you are in the EU/UK, you may lodge a complaint with your local Data Protection Authority if you believe your rights under GDPR are violated.

12. Changes to This Privacy Policy

We may update this policy at any time. Changes will be posted on this page with a revised “Last Updated” date. We encourage you to review this policy periodically.

13. Contact

For questions, requests, or complaints, contact:
Email: hello@customstuffedanimals.com
Address: 12725 Encinitas Ave, Sylmar, CA, 91342, USA