Privacy Policy

1Who We Are and Scope

Bestyork LLC operates Wishmascot and is responsible for the personal information described in this policy. Our business address is 333 S Yost St, Aurora, CO 80012, United States.

This policy covers our online store, customer accounts, orders, customization requests, customer service communications, and related marketing. It does not cover information that a third party collects directly from you under its own privacy notice.

2Personal Information We Collect

The information we collect depends on how you interact with us. It may include the following categories:

If someone buys a gift for you, we may receive your name, shipping address, telephone number, and delivery instructions from the purchaser. We use gift-recipient information to fulfill and support the order, not to market directly to the recipient unless the recipient separately chooses to receive marketing.

Please do not send us government identification numbers, financial-account credentials, health information, or other highly sensitive information unless we specifically request it for a lawful and necessary purpose.

3How We Collect Information

We collect personal information from the following sources:

• Directly from you when you create an account, place an order, submit customization materials, join a mailing list, request a return, or contact us.
• Automatically from your device through cookies, server logs, pixels, and similar technologies when you use our website or interact with our advertising.
• From service providers such as PayPal, delivery carriers, website hosting and security providers, analytics providers, and advertising partners.
• From other people when a purchaser provides information about a gift recipient or an authorized person contacts us on your behalf.

If you provide personal information about another person, you are responsible for ensuring that you are authorized to provide it and that the person receives any notice required by law.

4How We Use Personal Information

We use personal information to:

• create and manage customer accounts;
• process payments, fulfill orders, customize products, arrange delivery, and provide order updates;
• respond to questions, returns, cancellations, warranty matters, disputes, and other customer service requests;
• verify transactions, prevent fraud, protect our website and customers, and enforce our terms and policies;
• maintain business, accounting, tax, shipping, and legal records;
• operate, troubleshoot, analyze, and improve our website, products, services, and customer experience;
• measure advertising performance and, where permitted, personalize marketing;
• send promotional email when you have subscribed or when otherwise permitted by law;
• comply with law, respond to lawful requests, and establish, exercise, or defend legal claims; and
• carry out another purpose disclosed to you when the information is collected or with your consent.

Legal bases for EEA and UK customers

Where European data protection law applies, we process personal information as necessary to perform a contract with you, comply with legal obligations, pursue legitimate interests that are not overridden by your rights, or with your consent. Our legitimate interests include operating and securing our store, preventing fraud, supporting customers, improving our services, and measuring our marketing. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

5Cookies and Similar Technologies

We and our providers use cookies, pixels, local storage, and similar technologies to operate our website and understand how it is used. These technologies may support:

• Required functions: account login, shopping cart, checkout, security, fraud prevention, and site preferences.
• Performance and measurement: traffic measurement, error detection, and analysis of how visitors use the website.
• Advertising: measuring campaigns, limiting repeated advertising, and showing ads that may be more relevant to you where permitted by law.

Our website currently uses Google advertising technology for advertising measurement. Google may collect device identifiers, cookie information, IP address, and website activity under its own policies. You can learn more in Google's advertising privacy information.

You can manage available choices through our cookie notice and your browser settings. Blocking required cookies may prevent the cart, account, or checkout from working correctly. You can also unsubscribe from promotional email by using the link in the message or contacting us.

Because there is no single accepted standard for browser "Do Not Track" signals, our website may not respond to those signals. Where applicable law requires us to recognize a browser-based universal opt-out signal, such as Global Privacy Control, we will treat a recognized signal as a request to opt out of sale, sharing, or targeted advertising for the browser or device that sends the signal.

6How We Disclose Personal Information

We may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described in this policy:

• Service providers and contractors that support website hosting, data storage, security, email, customer service, fraud prevention, analytics, advertising measurement, and business operations.
• Payment providers, including PayPal, to process payments, refunds, disputes, and fraud checks.
• Production and fulfillment partners that manufacture or customize products using the order specifications you provide.
• Delivery and logistics providers that transport, track, clear, and deliver orders.
• Professional advisers such as accountants, insurers, auditors, and legal advisers.
• Government authorities and other parties when required by law or reasonably necessary to protect rights, safety, security, customers, or our business.
• Business transaction participants in connection with a proposed or completed merger, financing, acquisition, sale, restructuring, or transfer of all or part of our business, subject to appropriate safeguards.
• Other recipients at your direction or with your consent.

Sale, sharing, and targeted advertising

We do not sell personal information in exchange for money. Our use of advertising and measurement technologies may involve disclosing identifiers, device information, internet or network activity, and commercial information to advertising or analytics providers. Some U.S. state privacy laws may define these disclosures as a "sale," "sharing," or processing for targeted advertising even when no money is exchanged.

Where a legal opt-out right applies, you may opt out as described in Section 9. We do not knowingly sell or share the personal information of anyone under 16. We do not use or disclose sensitive personal information to infer characteristics about you.

7Data Retention and Security

Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy. The retention period depends on the type of information, our relationship with you, and applicable legal, tax, accounting, fraud-prevention, warranty, shipping, chargeback, and dispute-resolution requirements. When information is no longer required, we take reasonable steps to delete, anonymize, or securely dispose of it.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. Payment information is transmitted directly to PayPal through its payment environment.

8Your Choices and Privacy Rights

Depending on where you live and subject to legal exceptions, you may have the right to:

• know whether we process your personal information and request access to it;
• request correction of inaccurate information;
• request deletion of certain information;
• receive certain information in a portable format;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent;
• opt out of sale, sharing, targeted advertising, or certain profiling where applicable;
• appeal our decision on a privacy request where applicable; and
• exercise your rights without unlawful discrimination.

How to submit a request

Email sale@wishmascot.com with the subject line Privacy Request, or use our Contact Us page. Describe the right you want to exercise and the email address or order information connected with your request. To protect your information, we may ask for reasonable information to verify your identity and authority. Do not email a password, full payment-card number, or government identification unless we specifically provide a secure method and explain why it is needed.

You may use an authorized agent where permitted by law. We may request proof of the agent's authority and may need to verify your identity directly. If we deny a request and your local law provides an appeal right, reply to our decision with the subject line Privacy Appeal and explain why you believe the decision should be reconsidered.

California residents

California residents may have rights to know, access, correct, delete, and obtain information about categories of personal information collected, sources, purposes, and disclosures, and to opt out of sale or sharing. Sections 2, 3, 4, and 6 provide our notice at collection and describe those categories and practices. We do not offer financial incentives for personal information.

Colorado and other U.S. state residents

Residents of Colorado and certain other states may have rights to access, correct, delete, or obtain a portable copy of personal data and to opt out of sale, targeted advertising, or certain profiling. Where required, we recognize applicable universal opt-out signals and provide an appeal process as described above.

EEA, UK, and Switzerland

Where applicable, you may request access, correction, erasure, restriction, or portability; object to processing based on legitimate interests or for direct marketing; and withdraw consent. You may also lodge a complaint with the data protection authority in the country where you live or work or where you believe a violation occurred.

Account and marketing choices

You can update certain account information by signing in to your account. You can stop promotional email by using the unsubscribe link in the message or contacting us. Even after you opt out of marketing, we may still send non-promotional messages about orders, account security, policy updates, or customer service.

9International Data Transfers

Wishmascot is based in the United States. If you access our website or place an order from another country, your personal information may be transferred to and processed in the United States and other countries where our providers operate. Privacy laws in those countries may differ from those in your country.

Where required by applicable law, we use appropriate safeguards for international transfers and provide additional information about those safeguards upon request.

10Children's Privacy

Our online store is intended for adults purchasing products and is not directed to children under 13. We do not knowingly collect personal information online from children under 13. If you are a parent or guardian and believe a child has provided personal information to us, please contact us so we can review and delete it as appropriate.

11Third-Party Links and Services

Our website may link to third-party websites or services. We do not control those third parties and are not responsible for their content, security, or privacy practices. Review the privacy notice of a third party before providing information directly to it.

12Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, practices, providers, or legal obligations. We will post the revised policy on this page and update the "Last updated" date. Where required by law, we will provide additional notice or request consent before a material change takes effect.