We collect only the information needed to fulfil your order — name, contact details, delivery address, personalization content, and any photos or logos you send. We do not sell your data.

Personalization files you upload

When you upload a photo, logo, fingerprint, signature or handwriting image on a product page, the file is sent directly to a private storage bucket. It is used for one purpose only: producing your order.

What we accept. JPG, PNG, HEIC and WEBP images; logos may also be PDF or SVG. Maximum 20 MB per file. File type is verified on our server, not just in your browser.
Where it is stored. A private bucket with no public access. Files are stored under randomly generated names — never your filename — and cannot be browsed, guessed or listed by anyone.
Who can see it. Only our production team, through a short-lived link that expires after 10 minutes and is regenerated each time it is used.
Sensitive content. Fingerprints, signatures, handwriting and photographs of people (including close-ups of eyes) are treated as sensitive personal information under Canada's PIPEDA.
Never shared. Filenames, storage locations, links, thumbnails and file contents are never sent to analytics, advertising or error-reporting services, and are never shared with third parties beyond producing your order.

How long we keep uploaded files

Uploaded files are automatically deleted 90 days after the file is uploaded. Deletion runs as a scheduled daily job — it is not dependent on anyone remembering to do it. Uploads that are abandoned before checkout are deleted within 24 hours. If our team records an earlier deletion date for a specific order, that earlier date is used instead.

The private link our production team uses to retrieve your file expires on the same 90-day schedule, and is invalidated immediately when the file is deleted.

You can ask us to delete your uploaded files at any time by emailing hello@oruzgifts.com with your order number. We honour deletion requests within 30 days, unless we still need the file to complete an order already in production.

Personalization text

Text you enter for engraving or printing is stored with your order and used only to produce it.

Analytics

We use analytics to understand aggregate traffic patterns. We do not send personalization text, uploaded files, file names, storage links, email addresses or other personally identifiable information to analytics.

For the full privacy policy of record, please refer to our main store policies.