Privacy & Security
Your data is encrypted, your card number is never stored in full, and we never sell your personal information. We comply with GDPR and CCPA, and you can export or delete your data whenever you want. The details are all below.
Privacy & Security
How we protect your data, payments, and personal information.
How secure is my payment information?
We take this seriously. Your connection is encrypted and payments run through a PCI-compliant processor. We never store full credit card numbers, only encrypted tokens.
What personal data do you collect?
We collect: Name, email, phone, billing/shipping addresses, payment info, order history, and uploaded files. This data is used solely to fulfill orders and improve your experience.
Do you sell my data to third parties?
Never. We will NEVER sell, rent, or share your personal information with third parties for marketing purposes. Your trust is everything to us.
Who has access to my uploaded files?
Only authorized ZOOGABOOG! staff working on your order. Files are stored on secure servers with encryption. We never share your designs with anyone outside our production team.
Are my files stored after my order is complete?
Yes, for your convenience. Files stay with your account so you can reorder easily. If you want a file removed, message us from your dashboard and we delete it.
Can I request deletion of my account and data?
Yes, absolutely. Contact us to request account deletion. We'll permanently delete your personal data within 30 days. Order/invoice records may be retained for 7 years (legal/tax requirements).
Do you use cookies?
Yes. We use cookies to remember your login, cart contents, and preferences. You can disable cookies in your browser, but some features may not work properly. See our Cookie Policy for details.
Are you GDPR compliant?
We are a small shop, and we take your data seriously. We protect it, we do not sell it, and we do not share it with anyone who does not need it to finish your order. Ask us anytime to see, correct or delete what we hold on you.
How do you protect against data breaches?
Multiple layers: 1) Encrypted databases, 2) Secure servers with firewalls, 3) Regular security audits, 4) Staff training, 5) 2FA authentication option. We take security seriously.
What happens if there's a data breach?
We'll notify affected users within 72 hours and provide clear instructions on protective measures. In plain language, with what to do about it, from a real person.
Can I enable two-factor authentication (2FA)?
Yes! Enable 2FA in Account Settings > Security. We support SMS codes and authenticator apps (Google Authenticator, Authy). 2FA adds an extra layer of protection to your account.
What third-party services do you share data with?
We share minimal data with: Payment processors (Stripe), Shipping carriers (USPS, UPS, FedEx), Email service (for order notifications). All partners have strict data protection agreements.
How long do you retain my personal data?
As long as your account is active. After account deletion, personal data is removed within 30 days. Financial records (invoices, payments) are retained for 7 years per legal requirements.
Can I see what data you have about me?
Yes! Request a data export from Account Settings > Privacy. You'll receive a downloadable file with all your personal data, order history, and uploaded files.
Is my password encrypted?
Yes, with industry-standard hashing. We use bcrypt encryption for passwords. We can never see your actual password, only a secure, irreversible hash. Even our staff can't access your password.
What if I suspect unauthorized access to my account?
Contact us immediately! We'll lock your account, investigate, and help you secure it. Change your password ASAP. Check Account Settings > Login History to see recent access.
Do you track my activity on your website?
Basic analytics only. We track page views, clicks, and cart behavior to improve user experience. No personal identifiers are shared with third parties. You can opt out via Do Not Track browser settings.
Are my design files confidential?
100% confidential. We'll never use your designs for marketing, portfolios, or examples without explicit written permission. We can sign NDAs if required for sensitive projects.
Can I update my privacy preferences?
Yes! Go to Account Settings > Privacy & Communication. Control email preferences, data sharing options, and marketing consent. Changes apply immediately.
Do you use my email for marketing without permission?
Never. Marketing emails are opt-in only. You'll receive order/account notifications regardless, but marketing emails require your explicit consent. Unsubscribe anytime.
What's your data backup policy?
Daily encrypted backups stored on separate secure servers. In the unlikely event of data loss, we can restore your account and files within 24 hours.
Can I control who sees my order history?
Your order history is private to your account login: only someone signed in to your account can see it. Separate team member logins with their own permission levels are on our roadmap.
Are you CCPA compliant (California residents)?
We are a small shop, and we handle California customers the same way we handle everyone: we protect your data, we do not sell it, and you can ask us at any time to tell you what we have or to delete it.
Do you encrypt data in transit and at rest?
Yes, both! All data transmitted to/from our servers uses SSL/TLS encryption. Data stored in our databases is encrypted at rest using AES-256 encryption.
Can I request a copy of your privacy policy?
It's public! View our full Privacy Policy at zoogaboog.com/privacy or in your dashboard footer. It's written in plain English, not legal jargon.
What if I'm under 18?
ZOOGABOOG! is for users 18 and older. If you're under 18, have a parent/guardian create the account. We don't knowingly collect data from minors.
How do you handle subpoenas or legal requests for data?
We comply with valid legal requests but fight overly broad ones. We'll notify you if possible (unless prohibited by law). We provide only the minimum data required by law.
Can I opt out of data collection entirely?
Not entirely. We need basic data (name, email, payment) to fulfill orders. You can opt out of non-essential tracking (analytics, marketing) in Account Settings > Privacy.
What's your policy on government surveillance?
We don't provide backdoor access to any government. We comply with legal orders when required but challenge overly broad requests. Your privacy is our priority.
Do you have a Data Protection Officer (DPO)?
Not a titled one. We are a small shop. Send any privacy question to privacy@zoogaboog.com and a real person will answer it.
Are there any countries where my data might be processed?
Your data is primarily stored and processed in US-based servers. Some third-party services (payment processing, email) may process data in other countries with adequate data protection laws.
How transparent are you about data usage?
Completely transparent. Our Privacy Policy explains exactly what we collect, why, and how it's used. Want to know what we hold on you, or who has asked us for it? Email privacy@zoogaboog.com and a real person will tell you. No hidden data practices.
Can I contact you about privacy concerns?
Always! Email privacy@zoogaboog.com or call 1-888-ZOOGABOOG (1-888-966-4226). We take privacy seriously and will address any concerns promptly and thoroughly.
Didn't Find Your Answer?
A real person answers messages and calls. Doc, our chat assistant, is here around the clock.
Doc
Chat, around the clock
< 2 hours
Email Response
Mon-Fri
9am - 5pm PT
Real reviews on Google • Real humans, not bots • Tell us if anything misses, and we make it right.
