Wilkie’s Custom Works · Updated September 12, 2026

Privacy Policy

Wilkie Does It, LLC, operating as Wilkie’s Custom Works ("we," "us," or "our"), uses information to provide custom products, quotes, customer accounts, and order services. This policy covers our website and information you give us about phone, email, and in-person orders. We currently serve customers in the United States.

Information we collect

• Contact and account information: your name, email, phone, sign-in provider, and account preferences. For password accounts, we store a password hash rather than your readable password.
• Project information: quote requests, messages, artwork, photographs, personalization, deadlines, quantities, and order history. This may include information about a school, team, business, or other organization you represent.
• Billing and fulfillment information: personal or organization billing details, contact person/title, shipping addresses, invoices, payment status, and transaction references.
• Technical information: session cookies, IP addresses, browser/request information, and security signals processed by our website, hosting service, and security providers. Security counters may use keyed identifiers instead of raw addresses.

We receive information directly from you, from someone authorized to place an order for you or your organization, and from the sign-in and payment providers you choose. A phone or walk-in customer record may exist before a website account is created. After identity verification, we may connect that record and earlier orders or quotes to your account.

Google and Facebook sign-in

If you choose Google sign-in, we receive basic profile information, including your name, email address, and Google account identifier. We use it to sign you in, create or connect your customer account, and provide account/order services. We do not request access to your Gmail messages, contacts, calendars, or Google Drive files. The website does not store your Google password.

Facebook sign-in similarly provides an account identifier, name, and email when available. You can manage or revoke connected-app access in your provider’s account settings. Revoking access does not itself delete your website account or necessary business records; contact us if you want those reviewed or removed.

We use Google user data only for the account and customer services described here, not for advertising profiles or sale to others. Our use and transfer of Google API information follows the Google API Services User Data Policy, including its Limited Use requirements where applicable.

How we use and share information

We use information to answer inquiries, prepare quotes, design and fulfill projects, process payments, maintain customer history, send service messages, prevent abuse, resolve problems, and meet recordkeeping and legal obligations. Staff and service providers receive access as needed for these purposes.

• Hosting and databases: DigitalOcean and our MongoDB database services support operation and storage.
• Payments: Stripe processes online payments and invoices and may store linked billing/shipping profiles. Card numbers and security codes are entered into Stripe’s payment flow, not stored in our application database. For cash, checks, and Venmo payments, we record payment status and relevant references. Stripe and Venmo also handle information under their own privacy policies.
• Artwork: Cloudinary stores uploaded images. Current artwork links can be viewed by someone who has the link; they are not a private customer-only file vault. Contact us before submitting confidential or sensitive material.
• Communications and fulfillment: email providers, delivery carriers, and production partners receive information needed to communicate with you or complete a job.
• Legal or business needs: we may disclose information when reasonably necessary to comply with law, protect rights and safety, or handle a business transfer subject to applicable privacy obligations.

We do not sell customer information.

Cookies and external services

We use session cookies for functions such as signing in and maintaining your cart. Blocking cookies may prevent those functions from working. We do not currently use advertising pixels or behavioral analytics trackers.

Registration uses Google reCAPTCHA to detect abuse. Google may process device, browser, cookie, and interaction information for this purpose. Google’s Privacy Policy and Terms of Service apply. Fonts and website assets also load from Google Fonts and jsDelivr, which receive ordinary web-request information such as your IP address. Payment and sign-in providers may use their own cookies when you interact with them.

Project photographs and promotional messages

We may photograph finished work and show it on our social media or in our marketing unless you ask us not to. Select “Please do not post photos of my project” on the quote or order form, tell us when ordering, or contact us using the details below. A quote’s recorded opt-out carries over when we convert it into an order. Please tell us before production if the work is confidential or a surprise.

This practice concerns photographs of finished work, not publication of your billing records or contact details. If you request removal later, we will remove the project from marketing channels we control; we cannot guarantee removal of copies other people have already shared.

We do not currently run promotional email or text campaigns. If we introduce them, promotional email will use a separate opt-in and an unsubscribe option; promotional texts will require separate consent and opt-out instructions before enrollment. A project-photo choice is not consent to promotional texts. Necessary account, quote, and order messages are separate from marketing.

Retention and deletion

Our website is configured to make eligible failed/expired checkouts available for cleanup after 7 days and canceled orders after 30 days. Unconverted quotes leave the active queue after 30 days and are eligible for removal after 2 years, except quotes retained with an active customer account. Identifying details on completed/refunded orders are generally eligible for anonymization after 7 years. Inactive customer accounts are generally eligible for removal after 7 years, subject to account activity and recent orders or quotes.

Cleanup runs periodically, and artwork may remain while another retained order or quote references it. These periods do not promise simultaneous deletion from correspondence, backups, or payment-provider records. We may retain information needed for outstanding transactions, legal obligations, disputes, or security; payment providers may have independent retention obligations.

Your choices and requests

You can update available profile and billing details in your account or contact us to request access, correction, or deletion. We may need to verify your identity or authority. Self-service deletion may require active orders, unpaid balances, and invoices to be resolved first; you may still contact us to request individual review. Deletion may remove reusable profiles and anonymize closed records while necessary transaction records remain.

Additional rights may apply depending on where you live and which laws cover the processing. We will handle requests under applicable law and explain any limitation. If you disagree with our response, reply to ask us to review it.

Children and security

Accounts and purchases are intended for adults age 18 or older. Parents, guardians, and authorized adults may order items for children. We do not knowingly invite children under 13 to create accounts or submit personal information directly. If you believe a child submitted information, contact us so we can review it.

We use safeguards designed to protect information, but no website, storage service, or transmission method can guarantee complete security. Do not submit payment credentials, government identification, or other highly sensitive information in artwork or project notes.

Updates and contact

We will update the date above when this policy changes and provide additional notice or seek consent when required. Material new uses of information will be handled under applicable notice and consent requirements.

Read our Terms of Service