Privacy Policy
How Hashtag uses the personal information you give us when you shop, upload designs or contact us.
Last updated 2026-10-02
What we collect
- Order and delivery details: your name, email address, phone number and delivery address.
- What you order: pack sizes, sticker designs, any artwork or photos you upload, and printing quote requests.
- Payment records: the payment method, amounts and any bank-transfer receipt you upload. We never receive or store card numbers; card payments are handled by the payment provider.
- Account details (if you create an account): your password (stored only as a secure hash), saved addresses and, if you choose to add it, your birthday (day and month only).
- Your marketing choices: whether you opted in to marketing emails, when, and where.
- Technical data: basic usage information collected through analytics (see Cookies and analytics).
How we use it
- To make, print and deliver your order, and to send emails about it (confirmation, payment, dispatch and delivery). These service emails are part of your order, so they don’t depend on your marketing choices.
- To prepare and send printing quotes you request.
- To keep accounting and tax records, prevent fraud and keep the site secure.
- To understand how the site is used so we can improve it.
- To send marketing emails, only if you opted in.
Marketing emails
Marketing (offers, new sticker drops, promotions and birthday surprises) is always a separate, optional choice. It is never a condition of ordering, and accepting our Terms does not sign you up. The box at checkout is unticked unless you tick it.
Every marketing email has an unsubscribe link and a link to your email preferences. Unsubscribing takes effect for future campaigns straight away. You’ll still get emails about orders you place. We record when and where you opted in or out, so we can show we respected your choice.
How long we keep it
- Order records: as long as needed for accounting and legal obligations.
- Files attached to orders: 365 days after the order.
- Quote artwork: 180 days after the quote is closed.
- Uploads never used in an order: 7 days.
- Marketing preferences and their history: while you’re a customer, so your choices keep being respected.
Your choices and rights
Under Sri Lanka’s Personal Data Protection Act No. 9 of 2022 you can ask to see the personal data we hold about you, correct it, withdraw your consent, or ask us to delete it (we may need to keep order records we’re legally required to keep). You can change marketing emails anytime from the link in any marketing email or from your account.
Contact
Questions or requests about your data: orders@hashtag.hashanthini.com.
