Privacy Policy
Last updated: {{LAST_UPDATED}}
The short version
- We collect what we need to design, make and deliver your rug: your email address, what you tell us about your town, any photos you upload, and your order and shipping details.
- We share it only with the companies that help us do that (for payments, email, creating your design, hosting, and printing and shipping your rug), and each gets only what it needs.
- We don't sell your information or use it for advertising. We don't use advertising or tracking cookies.
- If you give us your email on the design form, we save your design so you can finish it later, and if you leave without ordering we may send you up to three reminders. Each has a one-click unsubscribe. We only send news and offers if the box asking for them is ticked; it starts ticked, and you can untick it.
- If you don't finish an order, or it's canceled before your rug is printed, its details and photos are deleted after 90 days. Designs we print are kept for a year, in case you need a reprint.
- You can ask to see, correct or delete your information at any time by emailing hello@tinytownrugs.com.
- Our rugs are for children, but our website is for adults. It isn't meant for children under 13.
1. Who we are
TinyTown Rugs (tinytownrugs.com) is run by Beachy Dreams, LLC, {{BUSINESS_ADDRESS}} ("we", "us" or "our"). We're responsible for the personal information described in this policy. If you have any questions about it, email hello@tinytownrugs.com.
This policy covers our website and the rugs we make. It works alongside our Terms of Service.
2. What we collect
What you give us
- Your email address, so we can save the design you're working on and send you a link to finish it, send you your proof and updates on your order, and sign you in to see them.
- Whether you'd like news and offers: the box on the design form starts ticked. If it is still ticked when you give us your email, we record that you agreed, when, and the exact words you agreed to. Untick it and we won't add you.
- Your design details: the town, business or school you choose, the places you ask us to include, the changes you ask for, and the size and style you pick. Some of this can be personal to your family, like the school your child goes to, so we use it only to make your rug.
- Photos you upload, for example of a favorite local place. We only need pictures of buildings and places, so please leave out people, especially children, and anything else you'd rather not share.
- Order details: your name, shipping and billing addresses, your phone number if you give one, what you ordered and what you paid. Your card details go straight to Stripe, our payment provider. We never see or store your full card number.
- Messages you send us, for example about a problem with your rug, including any photos.
What we make for you
- Your design: each proof and version of your rug, and the research notes we put together about the places on it. Those notes are about public places, not about you.
What we collect automatically
- Technical information: your IP address, browser and device type, and which pages you visit and when. Our servers and security tools record this as a normal part of running a website.
- Basic usage statistics: we use Cloudflare's cookie-free analytics to count visits and see which pages are popular. It doesn't use cookies, and it isn't used to follow you around other websites.
- How you found us: the website or ad that brought you here (for example, a link from Instagram, or a campaign tag in the link you clicked). Your browser keeps a note of it from your first visit and sends it with your design or order, so we can tell which of our marketing works. It isn't shared with advertisers.
We don't ask for sensitive information such as government ID numbers or health information, and we don't use facial recognition on any photos.
3. How we use it
- Once you've ordered, to research your town, design your rug, and make the changes you ask for.
- To take payment, calculate sales tax, and keep the records the law requires.
- To review your order, have your rug printed and shipped, and send you tracking information.
- To email you about your designs and orders, and to answer your questions.
- To deal with problems, reprints and refunds.
- To keep the site secure and prevent fraud and misuse, for example by checking that orders come from people rather than bots.
- To understand how the site is used and to improve it. We sometimes look back at designs to learn how to design better rugs; this stays within TinyTown Rugs.
- To comply with the law, and to protect our rights if there's a dispute.
Emails. We send emails about your designs and orders. If you start a design, give us your email and leave without ordering, we may send you up to three reminders over the following few days, each with a link back to your design; they stop as soon as you order, and every one has a one-click unsubscribe link. We only send you news or offers if the box asking for them is ticked when you give us your email (it starts ticked, and you can untick it), and you can unsubscribe from those at any time.
Marketing. We won't use your design, your photos or pictures of your rug in our advertising, or show them publicly, without your permission.
AI training. We don't use your photos or designs to train AI models. OpenAI, the AI company we use, says it doesn't train its models on information sent through its business service (more on this below).
6. How long we keep it
- Orders that don't go ahead: if you start a design or an order but don't finish checking out, or your order is canceled or refunded before your rug is printed, the details you entered and any proofs are deleted 90 days after you last worked on them. Photos you upload but never order with are deleted after a week.
- Our mailing list: if you asked for news and offers, we keep your email address and the record of your consent until you unsubscribe. After that we keep only a note that you unsubscribed, so we never email you news again by mistake.
- Rugs we print: the design you approved, with its details and photos, is kept for one year after your order, in case your rug needs a reprint. Then it's deleted.
- Order records (your name, addresses, what you bought, what you paid and the tax charged) are kept for as long as tax and accounting laws require, which is usually several years.
- Your email address is kept as long as the order details above are, and as part of any order records.
- Messages between us are kept while we need them to help you, and with your order records if they're about an order.
- Server and security logs, which include IP addresses, are kept for a short time and then deleted automatically.
You can ask us to delete your designs and photos sooner (see section 8). Deleted information may stay in our backups for a short time, until those backups are replaced. The companies listed above keep information under their own rules; for example, Stripe keeps payment records as financial regulations require.
7. Keeping it safe
We take reasonable steps to protect your information, including encrypted connections (HTTPS), letting only the people who run TinyTown Rugs and the companies listed above see it, and choosing providers with strong security. No system is perfectly secure, though. If a security breach ever affects your information, we'll tell you as the law requires.
Your proofs and photos are private to you. We don't publish them or show them to other customers.
8. Your choices and rights
Wherever you live in the United States, you can ask us to:
- show you the personal information we hold about you, and give you a copy in a common format;
- correct anything that's wrong;
- delete your information, including your designs and photos.
Some states, including California, Virginia, Colorado, Connecticut, Texas and Oregon, give their residents these rights by law, along with the right to opt out of the sale of personal information, targeted advertising and certain kinds of profiling. We don't do any of those things, so there's nothing to opt out of. Whether or not your state's law applies to a business of our size, we'll honor these requests from any customer, and we won't treat you differently for using your privacy rights.
How to make a request
Email hello@tinytownrugs.com from the email address you used with us, with "Privacy request" in the subject line, and tell us what you'd like us to do. To protect you, we may need to confirm that the request really comes from you, usually by replying to that email address. You can also ask someone you trust to make a request for you; we'll need proof that you've authorized them.
We'll respond within 45 days. If we need longer, we'll tell you why, and we may take up to another 45 days.
There may be some things we have to keep even when you ask us to delete them, such as order records that tax law requires us to keep, or a rug that's already being printed. If so, we'll tell you what we kept and why. If you ask us to delete your design or photos before you've approved your proof, we can't make your rug without them, so we'll cancel your order and refund you in full.
If you disagree with our answer
You can appeal by replying to our answer with "Appeal" in the subject line. We'll respond to your appeal within 45 days. If you're still not satisfied, you can contact your state's attorney general.
9. Children
Our rugs are made for children to play on, but our website is for adults. You must be 18 or older to place an order. The site isn't directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email hello@tinytownrugs.com and we'll delete it.
When you tell us about your child's school or upload photos of places your family knows, please share only what the design needs.
10. Home addresses and map data (coming later)
We plan to add an option to put your own street and home on your rug. If you choose it, you'll give us an address, which we'll use only to make your design. It will be kept and deleted along with your design, as section 6 describes. Before this option goes live, we'll update this policy to explain exactly how the address is used and who, if anyone, it's shared with.
The map data for this feature comes from OpenStreetMap. Map data © OpenStreetMap contributors, available under the Open Database License (ODbL).
11. Where your information is kept
We're based in the United States and we sell only to US customers. We and the companies we use store and process your information mainly in the United States.
12. Changes to this policy
We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top. If we make a significant change to how we use your information, we'll tell you by email or on the site before it takes effect.
13. Contact us
Beachy Dreams, LLC, doing business as TinyTown Rugs
{{BUSINESS_ADDRESS}}
Email: hello@tinytownrugs.com