Last updated:
\nThis Privacy Policy explains what personal information Blanket Loft collects when you visit blanketloft.com, place an order or contact us, why we collect it, who we share it with, how long we keep it, how we protect it, and the choices and rights you have. Personalized blankets are a little different from most online shopping: to make yours, we may handle names, dates and family photos that matter a great deal to you. This policy explains how we treat that material too.
\nBlanket Loft is the business responsible for your personal information. Our business address is 1806 E. Sequoia Trail, Sioux Falls, SD 57103, United States. For any privacy question or request, email support@blanketloft.com.
\nThis policy applies to visitors to blanketloft.com, customers who buy from us, people who receive a blanket as a gift (because we receive their name and address from the person who ordered), and anyone who emails our support team. It does not cover other websites that we link to, such as a carrier’s tracking page or a payment provider’s checkout window; those services have their own privacy policies.
\nWe sell to customers in the United States, Canada, Australia and New Zealand. Section 10 explains the additional rights people in those countries, and in some US states, have under local law.
\nWhen you email us or submit a ticket, we receive your email address, your name if you include it, and whatever you choose to write or attach, such as photos of a delivered blanket or a description of a problem. Please do not send card numbers, passwords or government ID; we never need them.
\nIf you create an account, we store your login email, a securely hashed password (we cannot read it), your saved addresses and your order history. Accounts are optional; you can check out as a guest.
\nWhen you browse the site, our servers and our content delivery and security provider automatically receive technical information that every web browser sends: your IP address, browser type and version, device type, operating system, the pages you request, the page that referred you, and the date and time of each request. This information is used to deliver pages, keep the site secure and diagnose problems. We do not use it to build a profile of you.
\n| Category | \nExamples | \nSource | \n
|---|---|---|
| Identifiers and contact details | \nName, email, phone, postal addresses | \nYou, or the person sending you a gift | \n
| Commercial information | \nOrder contents, prices, order history, returns | \nYou, our store system | \n
| Personalization content | \nNames, dates, messages, uploaded photos | \nYou | \n
| Payment information (limited) | \nPayment method type, last four digits, payment status | \nPayment provider | \n
| Internet and device activity | \nIP address, browser, pages requested, timestamps | \nYour browser, automatically | \n
| Customer support records | \nEmails, tickets, photos of delivered items | \nYou | \n
| Delivery information | \nTracking events, delivery confirmation | \nCarriers | \n
| Purpose | \nInformation used | \nLegal basis where one is required | \n
|---|---|---|
| Making your blanket exactly as ordered | \nOrder details, personalization content | \nPerforming our contract with you | \n
| Delivering it and sending order and shipping emails | \nContact and delivery details, tracking | \nPerforming our contract with you | \n
| Handling returns, exchanges, refunds and claims | \nOrder details, support records, photos you send | \nPerforming our contract; legal obligations | \n
| Answering questions and support requests | \nContact details, messages | \nOur legitimate interest in helping customers; contract | \n
| Preventing fraud and keeping the site secure | \nIP address, device data, order and payment status | \nOur legitimate interests; legal obligations | \n
| Keeping tax and accounting records | \nOrder and payment records | \nLegal obligations | \n
| Improving products and the site | \nAggregated order and support trends | \nOur legitimate interests | \n
| Marketing emails, only if you opt in | \nEmail address, preferences | \nYour consent | \n
We do not use your personalization content for any purpose other than making and supporting your order. We do not use your photos in advertising, on social media or on the website unless you have given us separate, explicit written permission for a specific photo, and you can withdraw that permission at any time.
\nWe do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Fraud screening may flag an order for a human to review; a person always makes the final decision.
\nWe send order and shipping emails because they are part of your purchase. We do not add you to a marketing list automatically. At the date of this policy we do not run a newsletter. If we start one, it will only be sent to people who choose to subscribe, every email will include an unsubscribe link that works with one click, and this policy will be updated before the first email goes out.
\nWe share personal information only with the service providers who help us run the store, and only the information each one needs to do its job. They are not allowed to use it for their own purposes.
\n| Recipient | \nWhat they receive | \nWhy | \n
|---|---|---|
| Website hosting provider | \nAll data stored by the store, on secure servers | \nTo run blanketloft.com | \n
| Content delivery and security network (Cloudflare) | \nIP address, request data | \nTo deliver pages quickly and block attacks | \n
| Payment provider shown at checkout | \nName, billing address, email, order amount, payment details you enter | \nTo take and refund payments | \n
| Production partners, where one makes your blanket for us | \nPersonalization content, blanket specification, and the shipping details needed for the label | \nTo make and ship your blanket | \n
| Shipping carriers and postal services | \nRecipient name, shipping address, phone if needed for delivery | \nTo deliver your parcel and handle customs for international orders | \n
| Email service provider | \nEmail address, message content | \nTo send order emails and our replies | \n
We may also disclose information when we are legally required to, for example in response to a valid court order; when it is necessary to protect the rights, property or safety of our customers, ourselves or others, such as investigating a fraudulent order; or as part of a business transfer, such as a sale of the business, in which case the buyer must honor this policy for information collected under it.
\nWe do not sell or rent personal information. We do not share personal information for cross-context behavioral advertising, and we have not done so in the past 12 months.
\nPhotos are the most personal thing most customers send us. A photo blanket might show a newborn, a grandparent who has passed away, or a dog who slept on every couch in the house. We treat these images with extra care:
\nOnly upload photos you have the right to use. If a photo shows other adults, please make sure they are comfortable with it being printed on a blanket. If a photo shows a child, you should be the child’s parent or guardian, or have their permission.
\nCookies are small text files a website stores in your browser. Blanket Loft uses only the cookies needed to make the store work and to keep it secure. We do not use advertising cookies, social media tracking pixels or third-party analytics at the date of this policy.
\n| Cookie or storage | \nSet by | \nPurpose | \nHow long it lasts | \n
|---|---|---|---|
| woocommerce_cart_hash, woocommerce_items_in_cart | \nBlanket Loft (WooCommerce) | \nRemember what is in your cart | \nSession | \n
| wp_woocommerce_session_* | \nBlanket Loft (WooCommerce) | \nKeep your cart and checkout linked to your visit | \nUp to 2 days | \n
| wordpress_logged_in_*, wordpress_sec_* | \nBlanket Loft (WordPress) | \nKeep you signed in to your account, if you have one | \nSession, or 14 days if you choose “Remember me” | \n
| woocommerce_recently_viewed | \nBlanket Loft (WooCommerce) | \nShow blankets you looked at recently | \nSession | \n
| __cf_bm and similar security cookies | \nCloudflare | \nTell people apart from automated bots and protect the site from attacks | \nAbout 30 minutes | \n
These cookies are essential: without them the cart, checkout and account pages cannot work, so they do not need consent under most laws. You can still block or delete cookies in your browser settings, but if you block essential cookies the cart and checkout will stop working. If we ever add analytics or advertising tools, we will update this table first and, where the law requires it, ask for your consent before those cookies are set.
\nOur site does not currently respond differently to browser “Do Not Track” signals, because we do not track you across other websites in the first place. Where a law requires us to treat a Global Privacy Control signal as an opt-out of sale or sharing, we do so; since we do not sell or share personal information, no further action is needed.
\n| Information | \nHow long we keep it | \nWhy | \n
|---|---|---|
| Uploaded photos and design files | \n90 days after delivery, or until an open claim is resolved | \nReturns, exchanges and reprints | \n
| Order records and invoices | \nAs long as US tax and accounting rules require, generally up to 7 years | \nLegal obligations | \n
| Support emails and tickets | \nUp to 2 years after the conversation ends | \nResolving follow-up questions and disputes | \n
| Customer account | \nUntil you ask us to close it, or after 3 years without a sign-in | \nOrder history and saved addresses | \n
| Server and security logs | \nUp to 30 days, longer only when investigating an attack | \nSecurity and troubleshooting | \n
| Abandoned carts | \nUp to 2 days in the session data | \nKeeping your cart while you shop | \n
When information is no longer needed, we delete it or make it anonymous so it can no longer identify you. Backups follow the same rules and are overwritten on a rolling schedule.
\nIf someone sent you a blanket, we received your name and shipping address from them, and possibly your name and photos as part of the design. We use that information only to make and deliver the gift and to handle any return you start. We do not contact you for marketing. You can exercise every right described in section 10, including asking us to delete your details, by emailing support@blanketloft.com. If you ask us to delete the details of a gift order, we will keep only what the law requires for the purchaser’s tax and accounting records.
\nWherever you live, you can ask us to:
\nWe will not treat you differently for exercising your rights: no different prices, no lower quality of service.
\nResidents of states with comprehensive privacy laws, such as California, Colorado, Connecticut, Virginia, Oregon, Texas and others, have rights to know, access, correct and delete personal information, to obtain a portable copy, and to opt out of the sale of personal information, targeted advertising and certain profiling. Because we do not sell personal information, do not share it for cross-context behavioral advertising and do not profile customers in ways that produce legal effects, there is nothing to opt out of; you may still ask us to confirm this in writing.
\nCalifornia residents: the categories of personal information we collected in the past 12 months, their sources, and the purposes for which we use them are listed in sections 2 and 3. We disclose personal information for business purposes only to the categories of service providers listed in section 5. We do not collect sensitive personal information for the purpose of inferring characteristics about you. You may use an authorized agent to make a request; we may ask the agent for proof of authorization and ask you to verify your identity directly.
\nIf we decline a request, you can appeal by replying to our decision with the word “Appeal”. We respond to appeals within the time your state’s law requires, and if you are not satisfied you may contact your state attorney general.
\nUnder the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, you can access and correct your personal information and withdraw consent, subject to legal and contractual limits. We collect personal information with your knowledge and consent, use it only for the purposes described here, and protect it with safeguards appropriate to its sensitivity. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.
\nWe handle personal information of people in Australia in line with the Australian Privacy Principles where they apply to us. You can ask for access to and correction of your personal information. Personal information is held in the United States, as explained in section 12. If you have a complaint, please contact us first; if you are not satisfied with our response within 30 days, you can contact the Office of the Australian Information Commissioner (OAIC).
\nUnder the Privacy Act 2020 you have the right to ask for access to and correction of your personal information. If you are not satisfied with how we handle a request or complaint, you can contact the Office of the Privacy Commissioner in New Zealand.
\nThe whole site is served over encrypted HTTPS connections. Administrative access to the store is limited to the people who need it, protected by strong unique passwords, and reviewed regularly. Payments are processed by the payment provider’s own secure systems, so full card numbers never touch our servers. Uploaded photos are stored on the store’s server, are not publicly listed, and are deleted on the schedule above. Our content delivery network filters malicious traffic before it reaches the site.
\nNo method of transmission or storage is completely secure. If a security incident affects your personal information, we will investigate promptly, take steps to contain it, and notify you and the relevant authorities where the law requires.
\nBlanket Loft is based in the United States, and the store and its data are hosted on servers in the United States. If you live in Canada, Australia or New Zealand, your personal information is transferred to and processed in the United States, where privacy laws may differ from those at home. We only transfer the information needed to provide our service, we require our service providers to protect it, and we remain responsible for it under this policy.
\nBlanket Loft sells to adults. The site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under 16 where local law sets a higher age). Children’s names and photos often appear on baby and family blankets; that information is provided by a parent, guardian or relative ordering the blanket and is handled under section 6. If you believe a child has given us personal information directly, contact us and we will delete it.
\nTeenagers sometimes order a blanket as a present for a parent or grandparent. If you are under 18, please ask a parent or guardian to place the order or to check it with you, because buying online involves a contract and a payment method in an adult’s name.
\nOur site links to carrier tracking pages and, at checkout, to the payment provider’s secure pages. When you follow those links, the other site’s privacy policy applies. We are not responsible for how other websites handle your information.
\nWe will update this policy when our practices change, for example if we connect a new payment provider, add analytics or start a newsletter, and when the law changes. The “Last updated” date at the top shows the latest version. For significant changes, we will also post a notice on the site, and email customers with open orders when the change affects them.
\nEarlier versions: this is the first version of the Blanket Loft Privacy Policy, published when the store opened. When we change it, we keep a copy of each earlier version and will send it to you on request, so you can see exactly what changed and when. If a change would let us use information we already hold in a new way that you would not reasonably expect, we will ask for your consent first rather than relying on a notice.
\nMost of the emails you receive from us are service messages that are part of your order. You cannot unsubscribe from them while an order is open, because they carry information you need, but they never contain advertising.
\n| When it is sent | \nWhat it contains | \n|
|---|---|---|
| Order confirmation | \nStraight after checkout | \nYour order details and personalization text, so you can check spelling within 24 hours | \n
| Personalization question | \nOnly if something looks wrong | \nA specific question about a name, date or photo | \n
| Shipping confirmation | \nWhen the parcel leaves us | \nTracking number and carrier link | \n
| Return and refund updates | \nAt each step of a return or claim | \nAuthorization, label, receipt and refund confirmation | \n
| Replies to your messages | \nWhen you contact us | \nOur answer | \n
| Account emails | \nOnly if you have an account | \nPassword reset links and account changes | \n
When you pay, you enter your payment details directly into the payment provider’s secure form, which may appear inside our checkout page or open in a separate window. The provider processes the payment under its own privacy policy and security standards, including the Payment Card Industry Data Security Standard for cards. We receive only a confirmation that the payment succeeded, a transaction reference and limited details such as the type of payment method. The payment options shown at checkout tell you which provider handles your payment; our Payment Methods page lists them once they are active.
\nPayment providers may run their own fraud checks on a transaction, which can involve your IP address, device information and billing details. That processing is done by the provider as an independent business and is covered by its privacy policy.
\nIf a government agency, court or law enforcement body asks us for customer information, we check that the request is valid and lawful, disclose only what is required, and, where the law allows, tell the customer concerned before we do so. We do not provide bulk access to customer data and we do not respond to informal requests that lack legal authority.
\nIf the business is ever sold, merged or reorganized, customer information may be transferred to the new owner as part of the business. The new owner would have to keep using it only in line with this policy, or ask for your consent before using it differently, and we would post a notice on the site before the transfer took effect.
\nBeing clear about what we leave out is as useful as listing what we collect. Blanket Loft does not ask for or knowingly collect:
\nPersonalized blankets naturally involve other people: the baby whose name goes on a blanket, the family members in a collage, the friend receiving a gift. When you give us someone else’s name, address or photo, you confirm that you are allowed to share it with us for that purpose. In practice this usually means you are a parent or guardian, a close family member, or the person has agreed. We use that information only for the order, and the person can contact us directly to exercise their own rights.
\nPlease think twice before printing a photo of someone who might not want it on a blanket, such as a colleague or an ex-partner, and never upload images of people who have asked not to be photographed.
\nYou upload a photo of your late father with his dog. We use it to prepare the design, check that it prints clearly, make the blanket and inspect it. If the print is too dark and we need to remake it, we reuse the same file. Ninety days after delivery, if there is no open claim, the photo and design file are deleted. If you want them deleted the day the blanket arrives, tell us and we will do it.
\nYou order a family-name throw for your sister in Brisbane. Her name and address go to the carrier so the parcel can be delivered, and to customs as part of the import paperwork the carrier prepares. She does not receive marketing from us. If she later starts a return, we use her email address only for that conversation.
\nYou ask whether a photo from your phone is sharp enough. We look at the attachment, answer, and keep the conversation for up to 2 years so we can see the history if you write again. The photo itself is not used for anything else.
\nIf you have difficulty reading this policy on screen, or would like it in a different format such as a plain-text email, write to us and we will send it. We are also happy to explain any part of it in simpler terms; privacy policies should not need a lawyer to understand.
\n| If you want to | \nDo this | \n
|---|---|
| Delete your uploaded photos early | \nEmail us with your order number and “Delete my photos” | \n
| Correct a name or address on an order | \nEmail us within 24 hours of ordering, or any time for future orders | \n
| Get a copy of your information | \nSend a privacy request (section 10.5) | \n
| Close your account | \nEmail us from the account’s email address | \n
| Stop cookies | \nChange your browser settings; the cart needs essential cookies to work | \n
| Make a complaint | \nEmail us first; you can also contact your local privacy regulator (section 10) | \n
For any privacy question, request or complaint, email support@blanketloft.com or write to Blanket Loft, 1806 E. Sequoia Trail, Sioux Falls, SD 57103, United States. We reply within 1 business day. Related pages: Terms of Service, Payment Methods, Intellectual Property Policy and Contact Us.
\n","visible_characters":28058,"meta_description":"How Blanket Loft collects, uses, protects and deletes personal information and uploaded photos, cookies we use, and your rights in the US, CA, AU and NZ.","parent":null,"published_at":"2026-10-07T09:45:59+00:00","updated_at":"2026-10-07T12:19:19+00:00"}}