Privacy Policy

Information you provide

Card checkout asks for your name, phone number, and each card’s business name and location so the card can be connected to the correct Google review page. Stripe’s payment form collects payment information, email, and a shipping address. Our application receives order references, payment status, line items, and customer/order metadata; card numbers and security codes are handled by Stripe, not stored in our application database.

Inquiry forms collect your name, business, email, selected product or service, and the details you choose to provide. Website design inquiries can include image uploads. Contact messages sent by email are handled through our support mailbox. Please do not submit passwords, card details, health information, government identification, or other unnecessary sensitive information.

There is no customer account-registration flow on this website. If account functionality is added, this policy will need to be updated.

Purposes and applicable legal bases

We use these details to respond to inquiries, process purchases, program cards, discuss service requirements, provide support, and send order and shipping messages. Technical data is used to operate the site, diagnose errors, and maintain security.

Where applicable privacy law requires a legal basis, processing may be necessary to take steps at your request or perform a contract, meet legal obligations, or pursue legitimate operational and security interests subject to applicable safeguards. Optional analytics requires a separate choice where consent is required. This is not a claim that every legal basis applies in every jurisdiction; mandatory local requirements remain applicable.

Payments, providers, and third-party services

The site uses Stripe for payment processing and Lovable Cloud for hosting, request storage, image storage, and transactional email delivery. Google Fonts serves our fonts and receives a request from your browser. Our support address is a Gmail mailbox. Providers may handle technical data such as IP addresses when their services are accessed.

Cards link to Google review pages; the review demo on this site is simulated and does not submit a review. Google’s own terms and privacy policy apply when you leave this site. Carrier tracking links, when included in a shipping notification, lead to the selected carrier’s site. Carrier availability in the notification tool is not a promise of a particular shipping method.

Providers handle information needed for their services. Information may also need to be disclosed where required by applicable law. Provider processing locations and any required international-transfer safeguards should be confirmed for your circumstances; we do not promise that data remains in one country.

Cookies and technical information

The published hosting layer includes a visitor-analytics script that can send page URLs, referrer, browser information, language, approximate country inferred from time zone, and a session identifier. Its observed session cookie is named session-id and is renewed with a 30-minute lifetime. Hosting also includes an event-telemetry script. Error reporting and payment services can process technical information needed to operate their tools.

Use Privacy choices to choose optional visitor analytics or withdraw that choice. Your selection is stored locally in your browser. Necessary payment and operational tools remain available. Browser settings can also remove or restrict cookies, though doing so may affect payment functions. Hosting-layer consent gating must be verified on the final published site before this draft is released.

No advertising pixel or marketing newsletter signup is implemented in the application. Google Search Console verification is present; it is not a Google Analytics tag. This policy does not describe unimplemented cookie controls for third-party sites.

Retention and privacy requests

There is currently no automated deletion schedule or customer self-service deletion tool. Records and uploads remain until removed through the business’s service tools; processor and mailbox records may follow separate retention requirements. Contact digify.nfc@gmail.com to request access, correction, or deletion. We may need enough information to identify the relevant request or order without requesting unnecessary sensitive documents.

Available rights and exceptions depend on applicable law, including recordkeeping obligations. A request is not a promise that every record can be deleted immediately. The retention schedule, verification process, and response procedures require owner confirmation before this draft is published.

Security and children

The implementation uses encrypted connections and a private image-storage bucket. Access restrictions and input checks reduce risk, but no system or transmission can be guaranteed secure. Do not send confidential credentials in an inquiry or upload.

This site is not directed to children under 13. If you believe a child under 13 provided personal information, contact us so the situation can be reviewed.

Updates and contact

Changes will be reflected by the last-updated date. For privacy questions, write to digify.nfc@gmail.com. The trading name used here is Digify NFC; the legal operator’s identity and business address require owner confirmation before publication.