Some items may not be available due to labs closing per local guidance. Read our FAQ for more info about COVID-19 impacts.
LAST UPDATED: February 28, 2020
EFFECTIVE DATE: January 1, 2020
The privacy and security of your information is very important to us. We have made changes to the Privacy Notice that apply with respect to information that you provide on or after the date indicated in the “Last Updated” legend above. These changes include:
(1) Detailed information regarding what personal information and other information we collect from you, how we collect it, and how it is used;
(2) Further descriptions of the parties with whom and for what purposes your data is shared; and
(3) What rights are available to residents of California and to individuals in the EU/EEA.To learn more, please review the full Privacy Notice below.
CafePress values your privacy.
This Privacy Notice (“Notice”) describes the types of information that CafePress Inc. (“CafePress,” “we,” “us,” or “our”) collects, uses, shares, and discloses and the choices you have. CafePress Inc. is the data controller and the entity responsible for your personal information.
This Notice describes our practices in connection with the information we collect from you when you visit this website, or any website that links to this Notice (collectively the “Site”),when you use any applications we make available to you through a computer or mobile device, and the services available through our Site (with “Site,” the “Services”). This Notice excludes those websites and online services that have separate privacy notices and do not link to this Notice or incorporate it by reference. “You” or “your” refers to those who access and use CafePress’ Site and/or Services.
PLEASE READ THIS NOTICE AND THE TERMS AND CONDITIONS IN FULL SO YOU UNDERSTAND OUR PRIVACY PRACTICES BEFORE YOU USE OUR SERVICES. BY USING OUR SERVICES AND BY PROVIDING YOUR PERSONAL INFORMATION AND OTHER INFORMATION THROUGH THE SERVICES, YOU ACKNOWLEDGE THAT YOUR PERSONAL INFORMATION WILL BE PROCESSED PURSUANT TO THE TERMS OF THIS NOTICE. IF YOU DO NOT AGREE TO ANY TERM IN THIS NOTICE, PLEASE DO NOT USE THE SERVICES OR PROVIDE ANY PERSONAL INFORMATION.
We collect information directly from you as a user of our Site and Services, such as when you use our Services to create or buy products that are uniquely you, sign up to receive special offers from us or register for an account with us. We also collect certain information automatically through your use of our Site or Services. Often, you choose what information to provide, but sometimes we require certain information for you to use and for us to provide you the Services.
1.1. Personal information you provide.
The term “personal information” refers to any information relating to an identified or identifiable individual, or as defined under applicable law.
The kinds of personal information that we collect depend on the types of products and Services you use. We collect personal information directly from you, such as:
Registration and account set up data: When you sign up to use our Services, you may provide us with your name (first and last), email address, date of birth (month/date), and a password to access your CafePress account. We use this information to create your CafePress account, where all of your content, creations, and other activities are stored. We also use this information to help verify your identity, account and account activities to ensure the safety and security of your transactions. We use your date of birth to provide you discounts and other Services that may be of interest to you on your birthday.
Profile data: When you sign up for a CafePress account, you may choose to create an account profile. When you choose to do so, we collect your name, username (if different than your name or email address), your photo or other image, your location (country and city), a link to your social media handle (e.g., via Facebook, Pinterest, or others), and any information about yourself that you choose to provide. The name associated with your account is publicly displayed and connected to your CafePress account activity.
If you choose to make your profile public, people may see your name, the country you designate in your profile, and your “About” details for your shop. You can adjust the privacy settings to your profile at any time.
Payment details when you complete a purchase: When you complete or authorize a purchase or similar transaction, we will ask for your email address, payment information, including a credit or debit card number, credit verification code (“CVV”), name (first and last), an expiration date for your credit or debit card, shipping and billing information. We may also ask you to provide your phone number.
We use third-party payment processing companies to process your payment information. This information is used to fulfill your order, and to make your shopping experience easy and efficient. Specifically, we display your delivery and billing address(es) to you during the order process so you can confirm they are correct. We also use your delivery and billing address for address verification, and include them on our invoices to assist our production partners with the shipping and handling of your order. We may print your phone number on the shipping label of your package so that the courier may contact you in the event there’s a difficulty delivering your package.
We store your shipping and billing addresses, so you won’t have to input them every time you make a purchase.
CafePress does NOT store your full credit card number or CVV.
Payment details when you sell products: If you choose to sell products on CafePress’ Site – whether on our marketplace or when you open a shop – we collect information such as your shop name, billing and payment information including your name (first and last), physical address, country of residence, phone number, your payment preference (e.g., via PayPal or mailing address), and date of birth in order to verify your identity, provide this service to you and comply with applicable law. If you choose to receive a commission on your sales, we also require your Social Security Number or Tax Identification Number (if receiving payment as an individual) or business name and Tax Identification Numbers (if receiving payment as a business) in order to verify your identity and comply with applicable law.
Contact information: When you contact us, we may collect your name (first and last), email address, or telephone number, order or product numbers (if any), store IDs/member numbers, and any other personal information you voluntarily provide. We use your contact information to send you newsletters, share news about new products, features, and Services, respond to your requests and inquiries, or reach out to you about issues and questions about your account.
Your photos or images: When you upload content or create products using the Services, we may collect the images that you upload. You may include image titles, and captions, and the date and time of upload.
Community postings: You can post information in CafePress blogs, forums, or other public posting areas. Any information you disclose is available to anyone with internet access. You do not have to use these features, but if you do, please use common sense and good judgment when posting in these community spaces or sharing your personal information with others through the Services.
BE EXTREMELY CAREFUL WHEN DISCLOSING INFORMATION IN PUBLIC POSTING AREAS. BE AWARE THAT ANY PERSONAL INFORMATION THAT YOU CHOOSE TO SUBMIT THERE CAN BE READ, COLLECTED, OR USED BY OTHERS, OR COULD BE USED TO SEND UNSOLICITED MESSAGES TO YOU. WE ARE NOT RESPONSIBLE FOR OTHERS’ USE OF INFORMATION THAT YOU DISCLOSE IN PUBLIC POSTING AREAS INCLUDING, BUT NOT LIMITED TO, CHAT ROOMS AND FORUMS. ANY INFORMATION YOU DON’T WANT OTHERS TO KNOW SHOULD NOT BE POSTED PUBLICLY.
CafePress reserves the right to remove content or other postings from community spaces for any reason, but we generally do not do so, and your posts may remain public after your account is closed. You are responsible for the personal information that you choose to post in community spaces through the Services.
Another CafePress member may follow your public activity on the Site, such as when you add an item to your public Favorites. You may choose to make certain activities private through your account settings.
Information you provide to us when completing our surveys: If you choose to complete any of our surveys, you may share your name, email address, age, gender, answers to our surveys or comments and other information you choose to provide us in the comment fields. Our surveys are designed to collect your feedback in order for us to continually improve our Services. Participation in our surveys is completely voluntary. You choose whether to participate, and what to disclose. If you participate in a survey, your responses may be shared with third-parties we hire to conduct our surveys. We also may contact you for additional information needed to solve any issue you identify in your survey responses. We may also contact you in response to your request for help.
Employment information (job applicants): When you apply for a position with us, we also collect information about you including your name, address, resume/CV, educational details, prior experience and qualifications and any other information you choose to provide. CafePress is an equal opportunity employer.
1.2. Personal information we collect about you from others.
We may receive information about you in connection with certain CafePress features. For example, we collect your personal information (phone numbers and email addresses) when someone invites you visit the Site or a CafePress member uploads your photo or other images.
We may receive information about you and your interaction with the Services from our third-party business partners, and we may combine it with information we already have about you. We use this combined information to update, expand, and analyze our records about you; identify potential new customers; and create advertising tailored to your interests.
1.3. Other information we automatically collect.
Like many other websites, as you navigate through and interact with our Site and Services, we may use automatic collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:
You can also learn more about cookies and how to manage them by visiting allaboutcookies.org.
Browsing history: We also collect the following information about your use of our Services: the types of content that you view or interact with, and the frequency and duration of your activities on the Services. While permission for us to collect this information is not mandatory, our access to this information is essential to helping us improve the Services’ functionality, generate web analytics, improve our product and Services offerings, and troubleshoot problems.
Mobile app: Depending on your permissions, if you download and use our mobile app we may collect or access certain information from your mobile device including:
We use this information to provide the Services and for marketing purposes including, but not limited to, sending you push notifications about unfinished transactions, unused credits, or order status. With your permission, we may also send you information via push notifications regarding discounts, special offers, and new product alerts. Depending on your device, push notifications may be turned on by default. You can opt out of push notifications at any time by adjusting your device settings. Your mobile number’s use is limited to what is described in this document.
Where we need to collect personal information by law, or under the terms of a contract we have with you, and you do not provide the information requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or Service you have with us. We will notify you if this is the case at the time.
CafePress uses the personal information in a number of ways and only when it has a legal basis to do so as set forth below.
Performance of a contract: We process your personal information in order to fulfill a contractual agreement with you when you use our Services. This may include:
Legitimate business reasons: We process personal information described above when we have legitimate business reasons to do so, pursued by us or a third party, as long as it is does not override your interests, rights and freedoms. This may include:
Legal obligation compliance: We process personal information described in this Notice where it is necessary to comply with legal obligations to which we may be bound. This includes:
With your consent: We process your personal information (including your name, email address, or physical address/telephone number) when we have your consent to do so. This includes:
We also process your personal information in order to enter into a contract with you, including to consider an application for employment, including review of your supplied resume. The data may be saved in our files for future review and consideration. The data will be shared internally on a need-to-know basis, and will not be given to any third parties other than our service providers who process data on our behalf.
If you do not want us to use your personal information, for example, to send you newsletters or directly market our products of services, you can withdraw your consent and opt out at any time by contacting us at the details in Section 16 below.
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us at the details in Section 16 below.
Our Services may contain links to other third-party sites that we do not own or control, such as social networking sites, such as Facebook, or third-party analytics tools that collect information about visitor traffic on our websites or apps. The Notice does not address nor do we control or have responsibility for the policies or practices of any third parties or any third-party sites to which our Services link. If you provide any information to such third parties, different rules regarding the collection and use of your personal information may apply.
The providers of third-party apps, tools, widgets and plug-ins on our websites and apps, such as Facebook ”Like“ button, also may use automated means to collect information regarding your interactions with these features. This information is subject to the privacy policies or notices of these providers. Please review the third party’s privacy policies before providing any information to them.
CafePress takes appropriate steps to manage the privacy of your personal information and the security of the Services. We have implemented commercially reasonable administrative, technical, and physical security controls that are designed to safeguard personal information. Nonetheless, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, CafePress cannot guarantee the security of your personal information. If you have any questions about the security of our Site, you can contact us at the contact details provided below in Section 16.
You should take steps to protect against unauthorized access to your password, mobile device, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, changing your password over time, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity, except where otherwise required by applicable law.
We retain your personal information for the period necessary to fulfill the purpose outlined in this Notice unless a longer retention period is required or permitted by applicable law.
We may also retain your payment information for recordkeeping purposes and/or to complete transactions (e.g., when you make a purchase), and you may not be able to change or delete the personal information you provided until after completion of such purchase. For more information on how to close or delete your account, please visit Section 10 below.
Transactional emails: We occasionally send transactional emails notifying you about your orders, account information, changes to the Services, updates to our online documents, and other matters as required by law. You may not opt out of transactional emails.
Commercial marketing emails: We may send you marketing communications from time to time. If you are in the EU and you are our current or former customer, we may send you commercial marketing emails relating to products or services similar to those which have been previously purchased by you. You can also opt in to receive from us other types of commercial marketing communications. Regardless of your location, you can always stop marketing communications by unsubscribing as instructed in each email, or by contacting us here, or by changing your preferences in your CafePress account settings page.
Traditional marketing mail: Depending on where you live, you may receive marketing communications from us by post. You can stop these communications by contacting Customer Support for your region.
Third-party marketing, advertising, and other communications: You can opt in to receive marketing, advertising and other email communications from our partners, vendors, or affiliates. If you do opt in, you will be subject to the third party’s separate privacy notice, and you are responsible for managing your email preferences according to that privacy notice. Some marketing and advertising companies may collect information about your use of the Services through cookies, web beacons, and other technologies so they can market products or services to you, monitor the ads served to your browser, and learn which webpages you viewed when ads were delivered. To learn more about this practice, and your choices, please click here. We are not responsible for marketing emails sent by our partners and other third parties, and you need to visit their webpages for instructions on how to stop e-mails from them.
Push notifications: You can opt out of receiving push notifications using your mobile application or device settings. Opting out of push notifications may impact the functionality of our Services.
Platform Out-Opt Tools: Google and Facebook offer opt-out features that let you opt out of using your information for interest-based advertising:
Google: You may prevent your information from being used by Google Analytics by downloading and installing the Google Analytics Opt-out Browser Add On. You can opt out of Google Analytics by following the instructions at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
You can also learn more about the options available to you to limit third party advertisers that use tracking or targeting tools in connection with our Services:
Do not track: Currently we do not alter our data collection and use practices in response to Do Not Track signals.
Information that you provide during registration is available in your CafePress online account. You must enter your email address and password to access your account.
Updating account information: You may correct, amend or update profile or account information at any time by adjusting that information in your account settings. If you need further assistance correcting inaccurate information, please contact us at firstname.lastname@example.org.
Account closure: You can close your CafePress account at any time by accessing your account settings. If you request to close your account, we will disable all access to your account. Your account information, including any designs, will not be accessible to you, but we will archive your account in case you want to rejoin or re-activate your account in the future.
Account deletion: If you request to delete your CafePress account, we will remove personal information from your account. Your account will not be accessible to you even if you choose to rejoin or reactivate your account at a later date.
Please note however, that information necessary for the purposes of maintaining business records regarding a deleted or cancelled account, including records of credit transactions and account ownership, will be retained in accordance with applicable law. Please see Section 8 regarding our data retention practices for more information.
You can delete your CafePress account by contacting us by email at email@example.com.
11.1. Personal information collected
If you are a California resident, the California Consumer Privacy Act ( “CCPA”) gives you additional rights about the collection, processing and sale of your personal information, which are explained below.
We collect categories of personal information as defined under the CCPA, which includes the following:
We collect this personal information from you, other customers, social media platforms, and third-party partners such as analytics or travel partners or others. For more information, please see Section 1.
11.2. Purposes for use of your information.
We use and disclose the categories of personal information for businesses purposes including in order to:
We also use and disclose the information we collect for commercial purposes including to provide you our Services.
For information regarding the purposes for which we collect and use the personal information we collect regarding California consumers, please see Section 3.
11.3. Disclosure of your information
In the preceding twelve (12) months, we have disclosed your personal information for a business purpose, including to the following categories of third parties:
For information regarding the third parties with whom we disclose personal information for a business purpose please see Section 5.
11.4. Your rights.
The CCPA also provides you with specific rights regarding your personal information. These include:
Information about collection, sale or disclosure: You have the right to be informed of the categories of personal information that we collect about you in the preceding (12) months, including the categories of sources from which the personal information was collected, the business or commercial purposes for which the personal information is used, disclosed, or sold, and the categories of third parties with whom we share the personal information, as also set forth in this Notice.
Access to specific information: You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past twelve (12) months. The information that we will provide to you will be masked, meaning that portions of it will be omitted so that it can’t be used fraudulently. For example, your telephone number may display as (123)-XXX-4567. Once we have verified your identity, we will disclose the specific pieces of personal information we collected about you, which will be made in writing and delivered through your account with us, if you maintain such an account.
Deletion request rights: You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Please note that if you delete your personal information, some of our Services may not work the same.
Exceptions: We may not be able to fulfill your request if we (or our service providers) are required to retain your personal information for one or more of the following reasons:
Right to opt out of sale of Personal Information: You have the right to opt out of the sale of your personal information, as defined in the CCPA. The term “sale” is defined broadly under the California Consumer Privacy Act. To the extent that “sale” under the CCPA is interpreted to include interest-based advertising or other data uses described in the “Cookies and Other Technologies” Section above, we will comply with applicable law as to those activities. You can read more in our Cookies Notice.
To opt out of receiving interest-based advertising, you can exercise your choice by using your device’s or browser’s privacy settings.
Non-discrimination: We will not discriminate against you for exercising any of your privacy rights under CCPA or applicable law, including by, denying you goods or services, charging you different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties, providing you a different level of quality of goods or services, or suggesting that you will receive a different price or rate for goods or services or a different level of quality of goods or services.
11.5. Exercising your consumer rights
To exercise your rights, you can:
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. You may receive follow-up communications from us requesting additional information that will help us match your identity with the information we maintain about you. For example, if there is a discrepancy between the information in our systems and the information you provided with your request, we may ask that you submit additional information to validate your identity such as your order history or other contact information (e.g., e-mail address, telephone number, billing address) you may have used to order products or use our services.
You may also exercise your rights via an authorized agent (“Authorized Agent”). An Authorized Agent can be a third party that you authorize to act on your behalf, such as a third party with power of attorney. If you are a resident of California, an Authorized Agent can only be a person or a business entity that you authorize to act on your behalf to submit a verifiable consumer request related to your personal information.
When an Authorized Agent is submitting a request on your behalf, we will require your Authorized Agent to provide evidence of their entitlement, which must include information sufficient to identify you and the purpose of the request, and at least one of the following:
Absent such documentation, we reserve the right to refuse to comply with third-party requests for information.
11.6. California Shine the Light
Under California Civil Code section 1798.83, California residents who have an established business relationship with us are entitled to ask us for a notice describing the types of personal customer information we have shared with third parties for those parties’ direct marketing purposes during the preceding calendar year. That notice will identify the categories of information shared with third parties, the names and addresses of those third parties, and examples of the types of services or products marketed by those third parties.
If you are a California resident and would like to request a copy of this notice or exercise your rights under the CCPA, please contact us as set forth in Section 16.
Under applicable law and regulations, you may, at any time, exercise certain rights, including the following:
Access: The right to request access to your personal information, which includes the right to obtain confirmation from us as to whether or not personal information concerning you is being processed, and where that is the case, access to the personal information and information related to how it is processed.
Rectify or erase: The right to rectification or erasure of your personal information, which includes the right to have incomplete personal information completed;
Restrict: The right to obtain a restriction of processing concerning your personal information, which includes restricting us from continuing to process your personal information under certain circumstances (e.g., where you contest the accuracy of your personal information, for a period enabling us to verify the accuracy of the personal information);
Object: The right to object to the processing of your personal information under certain circumstances, including objecting to processing your personal information for direct marketing purposes, or objecting to processing your personal information when it is done based upon legitimate interests;
Data portability: The right to data portability, which includes certain rights to have your personal information transmitted from us to another controller; and
Consent: Where data processing is based on your consent, the right to withdraw consent at any time.
In France, the right to define the instructions as to the use of your personal information post mortem.
If you think we have not complied with a data protection law, you may also have the right to lodge a complaint with a supervisory authority, a list of which is available at https://edpb.europa.eu/about-edpb/board/members_en. We would, however, appreciate the chance to deal with your concerns before you approach any authority so please contact us in the first instance.
If you want to exercise one or more of the above rights, you can contact us at GDPR@cafepress.com. We will respond within a reasonable timeframe and in any case as required by applicable law.
The personal information and other information that we collect from you will be transferred to, and stored in the United States. It also may be processed by staff operating outside the EU/EEA who work for us or other entities acting as data processors processing data on our behalf. This includes staff and providers engaged in, among other things, the fulfillment of your request or order and the provision of support services. More information on to whom your data is disclosed can be found in Section 5.
CafePress complies with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries and Switzerland transferred to the United States pursuant to Privacy Shield. CafePress has certified that it adheres to the Privacy Shield Principles with respect to such data. If there is any conflict between the policies in this Notice and data subject rights under the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification page, please visit https://www.privacyshield.gov/.
With respect to personal information received or transferred pursuant to the Privacy Shield Frameworks, CafePress is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission.
We will provide an individual opt-out or opt-in choice before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To limit the use and disclosure of your personal information, please submit a written request to GDPR@cafepress.com.
CafePress’ accountability for personal information that it receives under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, CafePress remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process the personal information on its behalf do so in a manner inconsistent with the Principles, unless CafePress proves that it is not responsible for the event giving rise to the damage.
In compliance with the Privacy Shield Principles, CafePress commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to Privacy Shield. European Union and Swiss individuals with Privacy Shield inquiries or complaints should first contact CafePress at GDPR@cafepress.com.
CafePress has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD, operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/EU-privacy-shield/for-eu-consumers for more information and to file a complaint. This service is provided free of charge to you.
If your Privacy Shield complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Privacy Shield Annex 1 at https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
The Services are for individuals age 18-years-old or older. CafePress does not intend that any portion of its Services will be accessed or used by children under the age of 18, and such use is prohibited.
While we encourage parents to use our Services as a family activity with their children, we recommend carefully monitoring any Internet activities (including use of the Services) engaged in by their children. If you are a parent or guardian of a child under the age of 18 and believe he or she has disclosed personal information to us please contact us at firstname.lastname@example.org.
We periodically update this Notice, and encourage you to review it each time you visit the Services. We will notify you of any material changes made to the Notice and will post those changes through a prominent notice on our Services, along with an update to the Effective Date. Depending on where you live, we may give you an opportunity to accept these changes prior to continuing on our Services. If you do not agree to any changes made to this Notice, you should stop using our Services.
If you have any questions or concerns about our Privacy Notice or our privacy practices, please contact Customer Support or mail us at +1-877-809-1659 Toll-Free (US & Canada) or at +1-919-323-4480 International:
11909 Shelbyville Road
Louisville, KY 40243