Privacy Policy

Version 1.0 · Effective September 10, 2026

1. The short version

We collect what we need to make and deliver your calendar. We don't sell personal information for money.

2. What we collect

Before payment: the "for" person's name, relationship, selected album, uploaded photo(s), the preview if offered, optional email, and technical data (device type, approximate location from IP, pages viewed, referral source).
At payment: buyer name, email, shipping address, optional phone, items, amount paid, payment confirmation. Full card numbers are never stored by us.
After payment: generated artworks, print file, order and shipping status, support messages.

3. Photos — including babies and children

Photos usually show someone other than the buyer. You must have that person's permission; for a child or baby, you must be the parent/legal guardian or have their permission.
Photos are processed by automated image-generation tools and may be viewed by authorized staff for quality checks and support.
We do not use any photo, especially a child's photo, for advertising, social posts, or public promotion without separate, specific permission from the adult or parent/guardian. This is never part of checkout.
Photos are not submitted as public training material.

4. Why we use your information

Create and review artwork; print and deliver; order emails and support; fraud prevention; improving the site; legal, tax, and accounting duties.

5. Who we share it with

Only service providers who need it, in these categories: hosting, database/file storage, image generation, printing and fulfillment, shipping carriers, email, payment processing, analytics. Providers may change. We may disclose information when required by law or to defend legal claims.

6. How long we keep it

Paid orders: photos, artwork and print files are kept for 90 days after your order is delivered (to support, reprint, or fix problems), then deleted. You can ask us to delete them sooner at any time.
Transaction and support records: kept as long as legal/accounting rules require.
Backups may hold deleted data until they expire.

7. Where it's processed

Providers may process data in the United States and other countries.

8. Your choices and rights

You may ask to access, correct, or delete your data (including photos and artwork), subject to legal retention and open orders; and opt out of marketing email. We won't treat you worse for using these rights. Email cs@heybarebear.com from the order email or with your order number; we may verify identity. Authorized agents are accepted with written authorization. You can appeal a refusal by replying.

9. Cookies

We use cookies that are needed for the site and checkout to work, and basic analytics. You can control cookies in your browser; some site features may stop working.

10. Marketing email

Opt-in only, with an unsubscribe link. Order-related emails continue while an order is open.

11. Security

Uploads and generated files are kept in private storage; download links are short-lived. We take reasonable precautions but can't guarantee absolute security.

12. Children's privacy

Our site and ordering are for adults (18+). We do not knowingly collect personal information directly from children under 13 (or under 18 where applicable). We do accept photos of babies and children uploaded by a parent or guardian solely to make the ordered calendar. We use these photos only to make, check, print, deliver and support that order, never for advertising or promotion, and we don't sell them. A parent/guardian can ask us at any time to access or delete a child's photo and related files by emailing cs@heybarebear.com. If you believe a child gave us information directly, contact us and we'll delete it.