We keep it
short and honest.

Effective April 2026

Who we are

Tohfa Custom Gifts is operated in Vancouver, British Columbia, Canada. This policy applies to tohfacustomgifts.ca and any related order, sample, or inquiry flows.

What we collect

• When you place an order: name, email, phone, billing and shipping addresses, the contents of your order, and any engraving or card text you provide. Payment details go directly to Stripe, we never see your full card number.
• When you request a sample: name, email, brokerage or firm, role, shipping address, and anything you wrote in the note field.
• When you subscribe to the newsletter: your email address.
• When you use the site: page views and basic browser information via Plausible, a privacy-first analytics service that does not use cookies or build profiles.

What we use it for

• Fulfilling your order, packing it, routing delivery, emailing confirmations.
• Answering your questions.
• Sending the monthly newsletter (if you opted in). You can unsubscribe in one click.
• Understanding which pages of the site are useful, in aggregate.

What we do not do

• We do not sell your information. To anyone. Ever.
• We do not share it with advertisers or data brokers.
• We do not track you across the web.

Who we share it with

Only the companies that help us run the store:

• Stripe, processes your payment.
• Resend, sends our transactional and newsletter emails.
• Vercel, hosts this website.
• Plausible, aggregates anonymous page view data.
• Cloudflare, runs a silent “are you human” check on our forms. It sees your IP address and nothing else about you.
• Upstash, stores short-lived counters that stop bots from flooding our forms. Keys expire within hours.
• Sentry, catches errors when the site breaks. We strip your email, name, and address from error reports before sending.
• Our delivery partners, receive only the shipping address and recipient name needed to get your box there.

Retention

We keep order records for seven years because Canadian tax law requires it. Newsletter emails stay on file until you unsubscribe. Sample and inquiry notes are kept for two years so we can remember the context of the conversation, then deleted.

Your rights

Under PIPEDA (Canada's federal privacy law), you have the right to ask what we have on file, correct it, or request deletion. Email tohfacustomgifts@gmail.comwith the subject “Privacy request” and we'll respond within 30 days.

Security

We use industry-standard encryption (HTTPS everywhere) and store as little personal data as we can get away with. No system is perfectly secure, and we will tell you if anything goes wrong.

Changes

We'll update the “Effective” date at the top if this policy changes. Material changes get a note on the homepage and, if you're on our newsletter, an email.