Privacy Policy

Last updated: 2026-06-22

At ROAM & POST, your privacy is just as important to us as your memories. This Privacy Policy explains how we collect, use, and protect your information when you visit our online store, upload photos, place an order, or contact us. The data controller is ROAM & POST (PO Box 5481, Denver, CO, 80217, US).

Customer-Uploaded Photos & Memories

Our magnets and postcards are made to order using the photos and text that you upload at checkout. We treat these uploads as sensitive personal data.

• We use uploaded photos and text strictly to produce and ship your order.
• We do not use your personal photos for marketing, social media, website examples, or any other purpose, unless you have given us separate, explicit consent.
• Uploaded images are processed through our personalization application NINEMAGS and our e-commerce platform Shopify, strictly to fulfill your order.
• Photos are retained only for as long as needed to fulfill your order, handle any remake requests, and meet accounting record-keeping obligations. After that period, files are deleted from our active production storage.

Notice at Collection (California Residents — CCPA / CPRA)

We collect the following categories of personal information:

• Identifiers & contact data — name, email, phone, billing/shipping address, IP address.
• Commercial information — order history, order details, returns, remake requests.
• Customer-uploaded content — photos and personalization text you submit at checkout.
• Internet activity — pages viewed, cookies, analytics identifiers, device and browser data.
• Geolocation — approximate location derived from IP address for fraud prevention and tax.

We do not sell personal information for monetary consideration. To opt out of any "sale" or "sharing" as defined under the CCPA / CPRA, email hello@roam-and-post.com.

How We Use Your Information

• To process, produce, and ship your custom orders.
• To communicate order updates and respond to your customer support inquiries.
• To detect and prevent fraud, abuse, or unauthorized access.
• To comply with tax, accounting, and legal record-keeping obligations.
• To send marketing emails — only if you have opted in. You can unsubscribe at any time using the link in every marketing email.

Service Providers

We share personal information with third-party processors strictly to operate the store: Shopify (our e-commerce platform and payment processor), NINEMAGS (our product personalization app), shipping carriers such as USPS and UPS, and our email providers. Each provider is bound to use your information only as needed to perform its service for us.

Your Privacy Rights

California (CCPA / CPRA): right to know, delete, correct, opt out of sale or sharing, and non-discrimination for exercising your rights.

Other U.S. state consumers (Virginia, Colorado, Connecticut, Texas, Utah, etc.): right to access, correct, delete, and opt out of targeted advertising or profiling, where applicable.

To exercise any right, email hello@roam-and-post.com. We may need to verify your identity before fulfilling the request.

Children's Privacy (COPPA)

Our store is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

Security

We use commercially reasonable technical and physical safeguards to protect your personal information. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new "Last updated" date.

Contact Us

If you have questions about your privacy or wish to exercise your rights, please reach out to us at:
Email: hello@roam-and-post.com
Mail: ROAM & POST, PO Box 5481, Denver, CO, 80217, US