Skip to main content

Privacy Policy

Last updated: July 4, 2026

This Privacy Policy describes how tobEwobE Photography (“tobEwobE,” “we,” “us”) collects, uses, shares, and retains information when you visit our storefront at tobewobe.com or use our mobile applications (together, the “Service”).

1. Information we collect

We collect the following categories of information:

  • Account information. Your email address and (optionally) a display name when you create an account. Passwords are stored as one-way hashes by our authentication provider (Amazon Cognito); we never see your plaintext password.
  • Order information. Shipping address, billing address, order contents, and order history when you place an order.
  • Payment information. Card details are collected directly by our payment processors (Stripe and PayPal) — we never see or store your full card number. We retain a payment reference (charge ID) and the last four digits for reconciliation and refunds.
  • Communications. Emails you send us (support requests, order questions) and any messages tied to your orders.
  • Usage & device data. Standard web-server logs (IP address, user-agent, page URL, timestamp) and, on the mobile app, a device identifier used for push notifications (Firebase Cloud Messaging).
  • Newsletter opt-in. If you subscribe to our newsletter, we store the email address you provide and the date you subscribed.

2. How we use your information

We use your information to:

  • Fulfill your orders (print production, shipping, and delivery confirmation).
  • Authenticate you when you sign in and keep your account secure.
  • Send transactional email — order confirmations, shipping updates, receipts, and account notifications — via Amazon Simple Email Service (SES).
  • Respond to your support requests and other messages you send us.
  • Process refunds and handle disputes.
  • Send our newsletter, if you have opted in. You can unsubscribe at any time from the link at the bottom of every newsletter email.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with our legal and tax obligations.

3. How we share your information

We do not sell your personal information. We share only what a specific service provider needs to do its job:

  • Amazon Web Services (AWS). Hosting, storage, authentication (Cognito), and email delivery (Amazon SES). All storefront data lives in the AWS us-east-1 region.
  • Stripe and PayPal. Payment processing. They receive the information they need to complete your transaction and are governed by their own privacy policies.
  • White House Custom Colour (WHCC). Our print-and-ship fulfillment partner. They receive the recipient name, shipping address, and print specifications required to produce and ship your order.
  • Firebase Cloud Messaging (Google). Push notification delivery on Android. Only an opaque device token is shared — no order or account details.
  • Legal disclosures. When we are required to disclose information by law, court order, or lawful government request.

We do not share your personal information for third-party advertising, and we do not run advertising trackers on the storefront.

4. Cookies and similar technologies

We use a small number of first-party cookies to keep you signed in, remember your cart, and keep the Service secure (CSRF protection). We do not set third-party advertising or analytics cookies. You can clear or block cookies in your browser settings; doing so may prevent you from staying signed in or completing an order.

5. Data retention

We keep your information only as long as we need it for the purposes described above:

  • Account data — kept while your account is active. If you delete your account, personal contact details are removed within 24 hours.
  • Order records — retained for at least seven (7) years after the order for tax and accounting purposes. After account deletion these records are anonymized: they retain the order contents, amounts, and dates, but personal contact details are removed.
  • Payment records — retained per the requirements of our payment processors and applicable tax law.
  • Server logs — retained for up to 90 days for security and troubleshooting.
  • Newsletter subscriptions — retained until you unsubscribe.

6. Your rights

You can:

  • Access or update your account information from your account page.
  • Request account deletion from the account deletion page. We use a 24-hour grace window so you can change your mind before the delete takes effect.
  • Unsubscribe from marketing email using the link in any newsletter, or by emailing us. This does not affect transactional email tied to orders you have placed.
  • Request a copy of your data by emailing privacy@tobewobe.com. We will respond within 30 days.
  • Ask us to correct or delete specific information by emailing privacy@tobewobe.com.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the EU/UK General Data Protection Regulation (GDPR). Contact us to exercise any of them — we will honor them regardless of your location.

7. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Security

We use industry-standard measures to protect your information: encryption in transit (HTTPS), encryption at rest for stored data, least-privilege access controls, and audit logging of administrative actions. No system is perfectly secure — if you believe your account has been compromised, please contact support@tobewobe.com right away.

9. International users

Our infrastructure is located in the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S., where privacy laws may differ from those in your country.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the “Last updated” date at the top of this page. For material changes we'll also notify account holders by email before the change takes effect.

11. Contact us

Questions about this policy or about how we handle your information? Email privacy@tobewobe.com. For order or account help, use support@tobewobe.com.