Privacy policy

Minimal tracking, by design.

Pick Card is based in Vancouver, British Columbia. This policy explains what personal information we collect when you order a card, manage a digital profile or tap a card, why we collect it, and the choices you have. We handle personal information in line with Canada's PIPEDA and British Columbia's Personal Information Protection Act.

We never sell
Your personal information
Tap analytics
IP addresses truncated before storage
No ad tracking
No advertising cookies or pixels

Free business tools

The website service menu builder processes your menu text, logo and exported files on your device. We do not upload this content to our servers or send it to an AI provider. When browser storage is available, edits save a draft in local storage on that browser; other people using the same browser profile may be able to open it. The draft remains until you replace it or clear your browser data.

Download an editable backup to keep a copy or move your menu to another device. Backups contain your menu details and any embedded logo. Keep them private when they contain information you do not want to share. The builder does not create a public menu link. Ordinary website hosting requests still reach our hosting provider, but the menu editor does not send your artwork or service list with those requests.

Information we collect

When you order or contact us: your name, email address, phone number, business name, shipping address, the logo, artwork and details you send for your card, and our emails with you about the order.

For your digital profile: the details you choose to show, such as your name, title, company, phone, email, website, address and social links, plus the email address you use to sign in to your dashboard.

When someone taps a card: the time of the tap, a truncated IP address (the last part is removed before it is stored), the browser's user agent and the referring page.

Optional website analytics: For visits from Canada and the United States, Google Analytics starts when you open a shopping page, unless you previously turned it off or your browser sends a Global Privacy Control signal. For other or unknown locations, it starts only after you choose Allow analytics. Google Analytics measures visits to our shopping pages, traffic sources, campaign labels, approximate location, device information and shopping steps such as customizing a card, saving a design, adding or removing cart items and starting checkout. We do not send names, email addresses, artwork, design contents, account links or customer card profile details to Google Analytics. You can also exclude visits from a particular browser through Analytics preferences; this setting stays in that browser, and private windows have their own preferences.

Payments: payments are processed by Shopify and its payment providers. We do not receive or store full card numbers.

How we use it

  • To design, proof, engrave, ship and support your order.
  • To host your digital profile and let you sign in and update it.
  • To show you tap counts for your own cards, and to detect abuse.
  • To understand visits to our shopping pages and improve our website.
  • To reply to your questions and send messages about your order or account.
  • To meet legal, tax and accounting requirements.

Your public profile

A Pick Card profile is designed to be shared: anyone who taps your card, scans its QR code or has your profile link can see the details you publish. You choose what to include, can edit it at any time from your dashboard, and can switch your profile off so it is no longer public.

Who we share it with

We do not sell or rent personal information. We share it only with service providers who help us run Pick Card, and only as needed for that purpose:

  • Website hosting (Vercel).
  • Database, sign-in and sign-in emails (Supabase).
  • Shipping carriers, to deliver your order.
  • Shopify and its payment providers, to process checkout and payment.
  • Google Maps, which loads only on profiles that include an address.
  • Google Analytics, unless optional website analytics is off, to understand visits and how people find our shop.

These providers may store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law. We may also disclose information when required by law.

Cookies and similar technology

We do not use advertising or cross-site tracking cookies. Signing in to your dashboard uses essential cookies to keep you signed in. We use your approximate country to display regional prices, without storing your full IP address for pricing. A first-party cookie remembers your selected shopping region; final checkout prices and currency follow your shipping address. Optional Google Analytics uses cookies to measure shopping visits. For visits from Canada and the United States, Google Analytics starts when you open a shopping page, unless you previously turned it off or your browser sends a Global Privacy Control signal. For other or unknown locations, it starts only after you choose Allow analytics. Choose Turn off analytics, Keep analytics off, or use Analytics preferences to change your choice anytime. Turning analytics off stops further website analytics events and removes Google Analytics cookies in this browser. Previously collected information is not automatically deleted. Your preference is saved in your browser. We disable advertising personalization in our website analytics. Account, sign-in, order management and customer profile pages are excluded. Shopify checkout uses its own checkout and session technology. Card taps do not set cookies. Profiles may use temporary browser session storage for things like remembering that an intro animation has already played. If a profile shows a Google Map, Google may set its own cookies when the map loads.

How long we keep it

We keep order records for as long as needed to support your order and to meet tax and accounting requirements. Profile information and tap history are kept while your card or profile is active. When information is no longer needed, we delete it or make it anonymous.

How we protect it

Information is stored with access controls so that a card owner can see and edit only their own profile and tap data. Connections to the site are encrypted, sign-in uses one-time email links instead of passwords, and access to order information is limited to the people who need it.

Your choices and rights

You can ask to access the personal information we hold about you, correct it, or have it deleted, and you can withdraw your consent to uses that are not required to fulfil your order. Most profile details can be changed directly in your dashboard.

To make a request, email orders@pick-card.com. We will respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.

Children

Pick Card is a business product and is not directed to children. We do not knowingly collect personal information from anyone under 16.

Changes and contact

We will update this page if our practices change and revise the date below. Questions about this policy can be sent to our privacy contact at orders@pick-card.com. See also our Terms of Sale & Service.

Last updated October 18, 2026

STILL HAVE A QUESTION?

Email us. We're happy to help.