Skip to content
Free US shipping on orders $35+

Menu

Collections

Help

Privacy policy

Last updated

Who we are

This website, thepandahug.com (the "Site"), is run by KZD LLC, which operates ThePandaHug ("we", "us", "our"). We sell personalized shirts and sweatshirts that we make to order. Questions about this policy? Email support@vivdrop.com.

Information we collect

  • Order information: your name, email address, shipping address, phone number (if you give us one) and what you ordered, including the personalization details you enter. If you are sending a gift, this includes the name and address of the person receiving it. We need this to make and ship your order.
  • Payment information: payments are processed by Stripe, Inc. We never receive or store your full card number. Stripe gives us limited details, such as the card type, the last four digits and the billing postal code, which we use to prevent fraud.
  • Account information: if you create an account, we store your email address and the sign-in details needed to run it, using Supabase authentication. If you sign in with Google, Google shares basic profile information, such as your name and email address, with us.
  • Images you upload: if a design lets you upload an image to personalize your item, we store that file (using Supabase Storage) so we can make your order.
  • Messages: the emails you send us and our replies, so we can help you.
  • Marketing choices: if you choose to receive marketing emails, for example by opting in at checkout, we store your email address and when you agreed. We send these emails through Resend.
  • Technical and usage information: your IP address, browser type, device, the pages you view and how you found us, collected through cookies and similar tools (see "Cookies and analytics" below).

How we use your information

  • To make, ship and support your orders, including tracking and customer service.
  • To send order emails: confirmation, shipping and delivery updates, cancellations and refunds.
  • To send marketing emails if you opted in. You can unsubscribe at any time.
  • To detect fraud and keep the Site secure.
  • To keep records and meet legal obligations, such as tax.
  • To understand how the Site is used, improve it and measure our advertising (see "Cookies and analytics" below).

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:

  • Contract: to process your order and talk to you about it.
  • Legitimate interests: to prevent fraud, improve the Site and defend legal claims.
  • Consent: for marketing emails and, where required, for non-essential cookies. You can withdraw consent at any time.
  • Legal obligation: to keep tax and accounting records.

Who we share information with

We do not sell your personal information. We share it only with the services and people we need to run the shop:

  • Stripe: payment processing (stripe.com/privacy).
  • Supabase: our database, sign-in and file storage (supabase.com/privacy). Your data is stored in the United States.
  • Resend: sending order emails and, if you opted in, marketing emails.
  • Shipping and tracking services (currently ShipHunt and ShipStation) and the carrier that delivers your package, for example USPS, UPS or FedEx. They receive your name and shipping address so they can make labels and deliver your order.
  • Hosting and infrastructure providers that run the Site and our order-production tools.
  • Advertising and analytics providers, as described under "Cookies and analytics" below.
  • Legal authorities: where the law, a subpoena or a court order requires it, or to protect the rights, property or safety of ThePandaHug, our customers or others.

Cookies and analytics

Essential: your cart is kept in your browser's local storage, and a cookie keeps you signed in if you have an account. Stripe also sets cookies at checkout to prevent fraud.

Analytics and advertising: we may use Google Analytics, Google Ads conversion tracking and the Meta (Facebook) Pixel to understand how the Site is used and to measure our advertising. These tools use cookies and similar technologies to collect information such as the pages and products you view, items you add to your cart, checkout steps and purchases, including the order value.

If you are signed in, or when you place an order, we may share hashed (scrambled) versions of details such as your email address, name, city, state, ZIP code and country with Meta, so that purchases can be matched to ads.

You can limit these tools through your browser's cookie settings, the ad settings in your Google and Meta accounts, or a browser extension that blocks trackers.

How long we keep information

  • Order records are kept for 7 years for tax and accounting.
  • Images you upload to personalize an order are kept as long as we need them to make the order and handle any remake or support request. You can ask us to delete them, subject to legal retention requirements.
  • Marketing consent records are kept until you unsubscribe.
  • Account data is kept until you ask us to delete it.
  • Emails you send us are kept as long as needed to help you and to keep our records.

Your rights

Depending on where you live, you may have the right to:

  • Access: ask for a copy of the personal information we hold about you.
  • Correction: ask us to correct information that is wrong.
  • Deletion: ask us to delete your personal information, subject to legal retention requirements.
  • Portability: receive your information in a structured, machine-readable format.
  • Opt out of marketing: you can unsubscribe at any time. Email us and we will remove you from our marketing list.
  • California residents (CCPA): the right to know what personal information we collect, to delete it and to opt out of its sale. We do not sell personal information.

To use any of these rights, email support@vivdrop.com with your full name and the email address on your order or account. We will respond within 30 days.

Children's privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it promptly.

Data security

We use reasonable technical and organizational safeguards to protect your information, including encrypted connections (HTTPS) and access controls. No method of sending or storing data is completely secure, so we cannot guarantee absolute security.

International transfers

Our service providers (such as Supabase, Stripe and Resend) may store or process your information in the United States. If you are in the EEA or the UK, we rely on appropriate safeguards for these transfers, such as Standard Contractual Clauses.

Changes to this policy

We may update this policy from time to time. The "last updated" date on this page shows the latest version. If we make a material change, we will tell customers by email where we have their contact information. Using the Site after a change means you accept the updated policy.

Contact

Questions about this policy? Email support@vivdrop.com.