Privacy Policy

1. Our Commitment to You

The messages you write for Little Things Worth Saying are some of the most personal words a person can share. We treat them, and every other piece of personal information you give us, with that in mind.

We do not sell your personal information. We do not rent it, trade it, or share it with advertisers, data brokers, or any other agency or organization for their own purposes. We only share personal information with the service providers we need to make and deliver your order (described in section 7), or where we are legally required to. Outside of those situations, we will not disclose personal information about anyone without the consent of the person it is about.

2. Who We Are and What This Policy Covers

Little Things Worth Saying ("we," "us," "our") is a small business based in British Columbia, Canada. We follow British Columbia's Personal Information Protection Act (PIPA) and, where it applies to information that crosses provincial or national borders, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

This policy explains what personal information we collect through www.littlethingsworthsaying.com, our private writing page, email, and social media; why we collect it; how we use, store, and protect it; and your rights. It forms part of our Terms of Service. By visiting our site or placing an order, you agree to the handling of personal information described here.

3. Information We Collect

We collect only what we need to make, deliver, and support your order.

  • About you, the buyer: your name, email address, billing address, phone number if you provide one, and your order details (product, order number, date).

  • About your recipient: their name and shipping address, and any name you use for them on the cards. By giving us someone else's information, you confirm you are entitled to share it with us for the purpose of sending them a gift. We use it only to make and deliver that gift.

  • Your messages ("Personalization Content"): the notes you write on our private writing page, plus any names used in the intro card. These may mention you, your recipient, or other people. We use them only to print your cards.

  • Contributors: if you share your writing link so others can add notes (for example, a class, team or family), anything they write becomes part of your order's Personalization Content. As the buyer, you decide who receives the link and you are responsible for managing it. Everyone who writes through the link is covered by this Privacy Policy and our Terms of Service, the same as you. Please let contributors know that their words will be printed and given to the recipient, and that anyone with the link can see and change the notes in the order.

  • When you contact us: the content of emails or Instagram messages you send us.

  • When you browse our site: basic technical information such as browser type, device, pages visited, and approximate location, collected by our website platform through cookies (see section 12).

We do not ask for, and ask you not to include in your messages, government ID numbers, health details, or banking information.

4. Payment Information

We never see or store your full card number or banking details. Payments are taken through our website platform, Squarespace, and processed by its payment partners. Your card information goes directly to them and is handled under their own security standards and privacy policies. We receive only what we need to confirm and manage your order, such as the payment status, the amount, and in some cases the card type and last four digits.

The following policies apply to the payment information they collect:

If you have a question about a payment, contact the payment provider directly. We’ll help where we can.

5. How We Use Your Information

We use personal information only for these purposes:

  • to process and confirm your order and payment;

  • to send you your private writing link, save your progress, and remind you if your notes are not yet finished;

  • to print, pack, and ship your cards to your recipient;

  • to answer your questions and handle any problem with your order, including replacements or refunds;

  • to keep the business and tax records the law requires; and

  • to send you news or offers, only if you have opted in. You can unsubscribe at any time using the link in any such email.

We will not use your information for any other purpose without first telling you and, where required, asking for your consent. We do not read your messages for any reason other than producing your order and checking they meet the content standards in our Terms of Service.

6. Consent

When you place an order, you consent to us collecting, using, and sharing personal information as this policy describes, for the purposes above. That consent includes the limited sharing with service providers in section 7, which we cannot make or deliver your order without.

You may withdraw your consent at any time by contacting us, subject to legal or contractual limits. If you withdraw consent before your order ships, we may be unable to complete it; we will explain what that means for your order and any refund under our Terms of Service.

7. Who We Share Information With

We share personal information only with the service providers below, and only the information each needs to do its job for us. They may not use it for their own marketing or any other purpose.

  • Squarespace hosts our website, store, and checkout. Information involved: buyer and recipient details, order details, and site usage. See the Squarespace Privacy Policy.

  • Payment processors handle your payment. Information involved: payment details. See section 4 for their policies.

  • Google Workspace runs our business email, the private writing page, and the secure files we use to manage and print orders. Information involved: buyer and recipient details, and Personalization Content. See the Google Privacy Policy.

  • Shipping carriers [Canada Post, Chit Chats] deliver your order. Information involved: recipient name and shipping address, and sometimes the buyer's email for tracking.

Apart from these providers, we will only disclose personal information:

  • with the consent of the person it is about;

  • where required or authorized by law, such as a court order, subpoena, or a lawful request from a government authority; or

  • to protect someone's safety in an emergency, as PIPA allows.

If the business is ever sold or merged, personal information would transfer only to the new owner under the same protections in this policy, and we would tell you beforehand.

8. Where Your Information Is Stored

Some of our service providers, including Squarespace and Google, store and process information on servers outside Canada, mainly in the United States. While stored there, it may be accessible to courts, law enforcement, and national security authorities of that country under its laws. We choose providers with strong security and contractual privacy commitments, but we want you to know this before you order. If you have questions about storage outside Canada, contact our Privacy Officer.

9. How Long We Keep Your Information

We keep personal information only as long as we need it:

  • Your messages: deleted from our files [90 days] after your order ships. This gives us time to reprint if your order arrives damaged. Once deleted, we cannot reprint or recover them, so please keep your own copy of anything you want to keep.

  • Order, payment, and shipping records: kept for [7 years] to meet Canadian tax and accounting requirements, then securely deleted.

  • Emails and messages you send us: kept as long as needed to resolve your question, and no longer than our order records.

If we use your personal information to make a decision that directly affects you (for example, refusing an order under our content standards), we keep it for at least one year after that decision, as PIPA requires, so you have a chance to ask about it.

10. How We Protect Your Information

We use reasonable security safeguards suited to how personal the information is. These include password-protected business accounts with two-step verification, private writing links unique to each order, access limited to the people who produce and ship your order, and secure deletion on the schedule above. Printed cards are kept secure until shipped, and misprints or spares are shredded.

No system is perfectly secure, and we cannot guarantee information sent over the internet. If you think your writing link has been shared with someone it should not have been, contact us and we will help.

11. If Something Goes Wrong

If we learn of a privacy breach involving your personal information that could reasonably cause you significant harm, we will tell you as soon as we reasonably can, explain what happened and what we are doing about it, and suggest steps you can take. Where appropriate or required, we will also report it to the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada. We keep a record of any breach.

12. Cookies and Website Analytics

Our website runs on Squarespace, which uses cookies to keep the site and shopping cart working and to give us basic, combined statistics about visits (for example, how many people viewed a page). We do not use this information to identify you, and we do not run advertising tracking on our site. You can control or block cookies in your browser settings, though parts of the site, such as the cart, may then not work. Squarespace explains its cookies in its Cookie Policy.

Our private writing page may save your unfinished notes in your own browser so you do not lose your work. That copy stays on your device; it is cleared when you submit your notes, or you can clear it through your browser settings.

13. Your Rights

Under PIPA and PIPEDA, you have the right to:

  • ask what personal information we hold about you, how it has been used, and who it has been shared with;

  • ask us to correct information that is inaccurate or incomplete;

  • withdraw your consent, as described in section 6; and

  • ask us to delete your information, subject to the records we must keep by law.

Send your request in writing to the email address in section 16. We may need to confirm your identity first. We will respond within 30 business days, as PIPA requires, and tell you if we need more time and why. There is no charge for most requests; if a fee applies, we will tell you in advance. If we cannot give you some information (for example, because it would reveal personal information about someone else), we will explain why.

14. Children

Our site and orders are intended for adults. We do not knowingly collect personal information from children under 13 except as content written for or about them by an adult placing an order, or notes written by students as part of a class gift arranged by a parent, teacher, or other responsible adult.

15. Changes to This Policy

We may update this policy from time to time. The latest version will always be posted on this page with its effective date. If we make a significant change to how we use personal information, we will tell customers with active orders by email.

16. Contact Us and Complaints

For questions about this policy, you can contact us at email: info@littlethingsworthsaying.com

If you have a concern, please contact us first; we will do our best to resolve it. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia or, for matters involving information that crossed provincial or national borders, the Office of the Privacy Commissioner of Canada.

October 1st 2026