Your words are personal.
We treat them that way.

Information you provide

• Account information: your name, email address and a securely hashed password when you register.
• Card and order information: sender name, greetings, recipient names and postal addresses, chosen cards, postage options and order records.
• Contact preferences: the checkout email and an optional WhatsApp number when you opt in to delivery updates. WhatsApp updates are not currently connected.
• Customer memories: the display name, optional location, title, memory and publication consent you submit.

Please provide recipient details only where you are entitled to share them for sending a card.

Why the portal uses this information

Information is used to maintain accounts, save orders, display each card’s progress, support administration, protect access and review customer memories. Once physical fulfilment opens, greetings and delivery details will also be needed by the team handwriting and posting your cards.

Submission of a customer memory requires separate consent. A memory is published only after admin approval. The public entry contains the chosen display name, optional location and memory; it does not include your account email or recipient address.

Cookies & browser storage

Essential session cookies identify customer, administrator and guest sessions. They are used for sign-in and access to orders. The portal also uses browser session storage for your cart, checkout choices and the payment confirmation screen.

You can clear cookies and browser storage in your browser settings. Doing so can sign you out, remove your browser’s cart and remove access to guest orders from that browser.

Hosting & service providers

The Vercel version uses Vercel for hosting and image storage and Neon Postgres for account and order records. Information is processed through these providers as needed to run the portal. Their infrastructure may process information outside your country.

The demo checkout does not collect card numbers, CVV codes or banking credentials. A live payment provider and its privacy information will be identified before real payments are enabled. Postal and communication providers will be identified when those services are connected.

Security & retention

Passwords are hashed, and account and administrator sessions are separated. Order access is restricted to the relevant account or guest session and authorised administrators. No internet service can guarantee absolute security.

Account, order and audit records are stored in the portal database. A final retention schedule, deletion process and any recordkeeping obligations will be confirmed before paid orders open.

Your requests & choices

You can update your account name and change your password after signing in. WhatsApp opt-in is optional. Publication consent for customer memories is separate from checkout.

For access, correction, deletion or memory withdrawal requests, email support@thelittle.love. Applicable privacy rights are not limited by this policy. Significant changes to these practices will be reflected on this page.

Contact & business details

The Little Love is operated by Molly Joseph, the legal trading owner.

For customer support, order queries and policy requests, email support@thelittle.love. A designated grievance contact will be published before paid orders open.

Please do not send card greetings, recipient addresses, passwords or payment details in a public customer memory.