ArdorU Privacy Policy

ArdorU North America LLC, a Delaware limited liability company and a wholly owned subsidiary of ArdorU, Inc., a Delaware corporation (collectively, “ArdorU,” “we”, “us”, or “our”) delivers custom greeting services and communication networking services (collectively, “Services”) through a suite of greeting card product offerings (collectively, “Products”). We provide Services and Products to customers in the U.S. and deliver Products globally through our website, www.ardoru.com (the “ArdorU Site” or “Site”), and our mobile applications (“Apps”).

This Privacy Policy describes how ArdorU collects, uses, shares and otherwise processes personal data that we control in connection with providing our Services and Products, how you may share personal data through the Services, and the choices Users have concerning our privacy practices.

There are three categories of individuals who may access our Site, and within this group, there are two types of Users who may provide information to us. Specifically, our Site can be accessed by:

• Customers (User 1) – individuals who use ArdorU to select artwork, design, purchase, store and deliver customized greeting cards;
• Guests (User 2) – individuals who engage with our Services and Products, such as browsing or registering as artists or key account partners; and
• Other Visitors - individuals whose interactions with us are limited to browsing our Site or Apps or interacting with us on social media.

We refer to Customers and Guests collectively as “User” or “Users.”

If you have any questions or concerns about our use of your personal data or would like to exercise your choices in relation to your personal data, please contact us using the contact details provided in this Privacy Policy.

This Privacy Policy does not apply to personal data we process when we provide Services to a business. In those instances, we process personal data related to Business & Key Account Customers on behalf of the business in our capacity as a service provider/processor. Our use of that data is governed by our contract with the business. ArdorU is not responsible for the privacy policies or practices of business customers, and you should direct any questions or requests concerning that data to the relevant business.

Personal Data That We Collect

The personal data you provide to us varies depending on how you interact with us:

All Users:

• If you submit a request through our Site or otherwise contact us, you may provide your name, email address, or other contact information to enable us to respond and resolve your request.
• If you interact with our pages on social media platforms, such as Facebook, Instagram, TikTok, Pinterest, and X, you or the platforms may provide us with information through the platform.

Customers (User 1):

• When you register to use the Services and order Products, you voluntarily provide personal data, including your name, mailing address, postal code, phone number, email address, and username. If you register for an ArdorU account by logging in using your social media account (e.g., those owned, managed, or operated by Meta platforms Inc., Google, Apple, or their subsidiaries or affiliates), we receive information from these accounts based on your settings and the privacy policies and terms of service of those platforms. Please review those policies to understand their privacy practices.
• When you use the Services, you may provide personal data, including your name, email address, phone number, address book, photos, GIFs, videos, graphics, or other content (collectively, “User Content”).
• If you purchase greeting cards (e.g. card artwork and/or delivery services) or other Products on the ArdorU Site, our payment service providers will collect payment information (including payment card number, security code, expiration date, postal code, and country). See the “How We Share Personal Data” section for more details.
• We collect information you provide in “free form” fields on our Site or Apps (e.g., account settings, preference pages, newsletters, or survey submissions). We may also collect personal data disclosed in other areas of our Site or Apps or when you contact us for support.
• You may order other Products, such as blank cards, frames, merchandise, or tiny cards, on the ArdorU Site. If you make these purchases, you may provide information related to the items purchased, transaction and payment data, and shipping information.
• We will collect and store a history of purchases, artwork, card designs, Memory Box messages, addresses, and contact details, as well as sent and received cards in your ArdorU account for future reference. This may include information from Your Orders, Address Book, Orange Hearts Club, Favorites, Received Memory Box Cards, Upcoming Events, Account Details, Product Pages, Artist Detail Pages, Key Account Pages, and other User Content. Any Product order history will be stored in your ArdorU account.

Guest Users (User 2):

• If you click on a newsletter signup link, the “Contact Us” button, or a contact form to register as an artist or work with us as a key account partner and voluntarily provide personal data, such as your name, phone number, or email address, your information will be added to an internal data sheet.
• If you do not have a registered ArdorU account, we may store data associated with your email address, telephone number, or other identifier. If you later register for an ArdorU account, we will automatically populate your stored account information in your account dashboard.
• When you use the Services to reply—whether messaging another Uuser (e.g.for example, a Ccustomer), posting publicly on social media, or sharing your “Save Forever” card designs through third‑party platforms—you may voluntarily provide personal data, including photos, GIFs, videos, or other Uuser‑generated content.

Sensitive Personal Data

Our Services are not designed to collect sensitive personal data. If you choose to provide such data (e.g., in User Content), we will handle it as we would any other details you make public to your audience. We do not share personal data except as described in the “How We Share Personal Data” section of this Privacy Policy.

Automatically Collected Data

When you use the Services or order Products, the following information is created and automatically logged in our systems:

• Log Data. Information your browser or Apps automatically send, including the device’s IP address, browser type and settings, the date and time of your request, and how you interacted with the Site or Apps. Your geographic location determines which Services, Products, disclosures, features, and third-party content are available to you. We may infer your general location based on IP address to provide localized services or content.
• Cookies. Information from cookies and other technologies stored on your device (collectively, “Cookies”). Cookies are small pieces of information stored on your browser or device to make it easier for you to use the Services during future visits by identifying your browser or device and to monitor traffic on our Site and Apps. Our third-party vendors and service providers may also place Cookies on your browser through your interaction with our Site. These Cookies may collect and store information about your browsing activities over time and across different websites. We use tracking tools, including Google Analytics and Meta (Facebook) Pixel, to measure and improve your experience. For more information, see our Cookie Policy. For more details, see our Cookie Policy (https://www.ardoru.com/?cookie-preferences=true).
• Device Information: Includes the type of device, operating system, settings, unique device identifiers, network information, and other device-specific information. The information collected depends on the device and its settings. Some Products include QR codes, which, when scanned, may allow us to collect non-identifiable data, such as scan time, general location (via IP), and device type, to improve the service experience.
• Usage Information: We collect information about how you use our Services and order our Products, such as the types and categories of content you view or engage with, the features you use, the actions you take, the other Users you interact with, and the time, frequency, and duration of your activities. We may receive information from app stores, payment processors, or fulfillment partners to complete transactions or enhance your experience. For example, this includes whether you open and respond to or act on a service notifications (e.g., account updates, order confirmations, important dates and Memory Box alerts) or marketing emails.

How We Use Personal Data

We use personal data for the following purposes:

To Provide and Support Our Services and Products

We use personal data to perform our contractual obligations under our Terms of Service, including:

• Authenticating Users, providing Services and Products, processing transactions, and responding to your requests;
• Sending real-time email or push notifications for upcoming event reminders, order confirmations, status updates, delivery alerts, new artist or artwork highlights, additions to your Save Forever archive, and other relevant updates; ;
• Managing our relationship with you, including sending information about our Services and Products or requesting you to review or respond to a survey.

We may use de-identified or aggregated data (non-personal) for business and analytical purposes without restriction.

To Improve, Monitor, Personalize, and Protect Our Services and Products

It is in our legitimate interests to improve and keep our Services safe, including:

• Administering and protecting our business and Services, preventing fraud, criminal activity, or misuse of our Site and Apps, and ensuring the security of our IT systems, architecture, and networks (including troubleshooting, testing, system maintenance, support, and data hosting);
• Investigating and protecting against fraudulent, harmful, unauthorized, or illegal activity;
• Understanding how visitors interact with our Services to ensure our Site is presented effectively for you or your device;
• Conducting analytics to inform our Products and marketing strategy and to enhance and personalize our communications and User experience;
• Providing customized Services, Products, and communications that may be relevant or of interest to you;
• Creating anonymized, de-identified, or aggregated data for commercial, statistical, and market research purposes;
• Conducting research.

To Enforce Our Agreements, to Comply with Legal Obligations, and Defend Against Legal Claims or Disputes

We may use your personal data in our legitimate interests to:

• Enforce and comply with our Terms and Policies;
• Protect our and others’ rights, privacy, safety, or property;
• Ensure the integrity of our Services;
• Defend against legal claims or disputes;
• Recover payments due to us.

Some processing may be necessary to comply with legal obligations, such as keeping transaction records or responding to judicial processes or governmental agency requests.

For Marketing and Advertising Purposes

We may use personal data to promote our Services, Products, or business where it is in our legitimate interest. Where required by law, we will obtain your consent for such activities, which you may withdraw at any time.

• Email Communications: We will send you updates and information about new Services, Products, or promotions by email. You can unsubscribe or opt out at any time via the link located in the footer of the email. If you opt out of receiving marketing emails, Customers may still receive non-marketing emails related to Orders, Order Status Updates, Cancelations, Upcoming Events, Reminders, Orange Hearts Club, and other business-critical information. If you have any questions about our communications, please contact us at hello@ardoru.com or our contact form on ardoru.com.
• Offsite Targeted Advertising: We may use personal data to display ArdorU advertising on other websites you visit after interacting with our Site and to measure advertising effectiveness. We use Cookies and other technologies for these purposes to inform you about Services and Products you’ve shown interest in or that we believe will interest you. You can limit online tracking as described in our Cookie Policy https://www.ardoru.com/?cookie-preferences=true.

How We Share Personal Data

We share personal data with certain third parties in the following circumstances:

• Service Providers: We share your personal data with third-party companies and individuals that provide services and products on our behalf or help us operate our Services and provide Products (e.g., customer support, hosting, analytics, email delivery, marketing, advertising measurement, and database management). ArdorU may use shipment tracking services (e.g., USPS, UPS, FedEx). By placing an order, you consent to ArdorU collecting tracking information, such as delivery confirmations and estimated delivery times. We may receive address updates from carriers (e.g., USPS) to improve future deliveries. Users are responsible for providing accurate shipping details.
• Advertising Partners: We may share your personal data with third-party advertising companies for offsite ArdorU targeted advertising, as described above. See our Cookie Policy https://www.ardoru.com/?cookie-preferences=true for details on third parties that may place Cookies and your choices regarding Cookies.
• Business Users: If you use the Services as an authorized User on behalf of a business, we may share your account information, details about your use of ArdorU, and personal data with that business.
• Professional Advisors: We share personal data with professional advisors (e.g., lawyers, auditors, bankers,insurers) where necessary for their services. Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of assets, or transition of a service to another provider, your personal data and other information may be transferred to a successor or affiliate as part of that transaction.
• Legal Requirements: We may share personal data if required by law, regulation, or in the good-faith belief that such action is necessary to:
  • Comply with a legal obligations, including national security or law enforcement requirements;
  • Protect and defend our rights or property;
  • Act in urgent circumstances to protect the personal safety of Users or the public;
  • Protect ArdorU against legal liability.

How You May Share Personal Data on the ArdorU Site or Apps

We allow Users to share their data (or direct us to share their data) with other Users and the public, including:

• Other Users: By sharing User Content, stored, sent, or received cards, artworks, or pages hosted on ardoru.com with other Users.
• Social Media Platforms: By posting User Content related to your use of our Services or Products to social media.
• Public: By establishing a public profile, you may share certain profile information publicly via our Apps and Site, including your ArdorU user and artist profile pages, social account, event pages, microsites, PenPal pages, and the Users you follow. Content submitted to public areas of the Site (e.g., “Get Inspired”, ) may be publicly visible. Do not share confidential or sensitive information in these sections.

Your Rights and Choices

Updating Your Account

If you have an account and need to change or correct your personal data, you can update it yourself in your account settings on our Site or Apps or email hello@ardoru.com for support. We will address your request as required by applicable law.

Communications and Service Choices

You have the following choices in connection with our Services:

• Opt out of email communications at any time via the link in the footer of every non business critical email, by contacting hello@ardoru.com or via our contact from on ardoru.com
• Withdraw consent to receive text messages by replying “STOP.” We will send a confirmation text, and thereafter, we will not send text message invitations through our Services, except for text messages required to log into your ArdorU account.
• As a customer, you may choose whether your written message appears in the “Get Inspired” section within the customization flow. This voluntary feature requires you to opt in freely, and your respective handwritten message will become visible to other customers to inspire their own writing. We will share only your first name, nationality, and, potentially, your PenPal number, enabling other Users to send you a card to thank you for your inspiration. If you prefer that your name not appear in the “Get Inspired” feature, contact hello@ardoru.com to remove it. 
• Users may contact us to appeal decisions related to content removal or account actions. We review appeals in good faith.

Privacy Rights

We offer you choices regarding how we handle the personal data, including:

• Information: Request information about how we collect and use your personal data (provided in this Privacy Policy).
• Access: Request a copy of the personal data that we have collected about you, provided the information in a portable, machine-readable format.
• Correction: Request correction of inaccurate or outdated personal data.
• Deletion: Request deletion of personal data we no longer need to provide Services, deliver Products, or for other lawful purposes.
• Opt Out of Sharing: We share personal data with advertising partners for offsite targeted advertising, which may qualify as “selling” or “sharing” personal data under applicable laws. You can opt out by enabling the Global Privacy Control setting in your browser learn more at https://globalprivacycontrol.org/) or as described in our Cookie Policy https://www.ardoru.com/?cookie-preferences=true Please note that your opt out will be specific to the device and browser you use when you opt out. Users may contact us to appeal decisions related to content removal or account actions. We review appeals in good faith.
• Additional rights: Object to or request restriction of our use of your personal data, or withdraw consent where applicable.

To make a request, email hello@ardoru.com or visit https://www.ardoru.com/p/contact. We may request information to confirm your identity. If authorized by applicable law depending where you reside, you may be entitled to empower an authorized agent to submit requests on your behalf, subject to identity and authority verification in accordance with applicable laws. You are entitled to exercise the rights free from discrimination.

Limits on Your Rights and Choices: In some instances, Your choices may be limited if fulfilling your request would impair others’ rights, our ability to provide requested Services, or our ability to comply with legal obligations or enforce legal rights. If you are not satisfied with how we address your request, contact us at https://www.ardoru.com/p/contact. Depending on your state of residence, you may have the right to complain to a data protection agency. 

Do Not Track

Some browsers may send “Do Not Track” signals. We currently do not respond to such signals. Learn more at http://www.allaboutdnt.com/”.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, and processed in accordance with our retention policies and applicable laws, or until you withdraw your consent (where applicable). You can also delete any Apps downloaded on your mobile devices or request account deletion by contacting hello@ardoru.com.

If you have elected to receive marketing communications from us, we retain information about your marketing preferences until you opt out. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we use your personal data, and whether we can achieve those purposes through other means, as well as applicable legal requirements. We may anonymize your personal data so it is no longer associated with you, in which case it is no longer personal data. You are responsible for maintaining copies of any data you upload or store. ArdorU does not guarantee preservation or future accessibility of this content. Retention periods are available upon request. Inactive accounts may be deleted after four (4) years of inactivity.

International Data Transfers

ArdorU is based in the United States. When you use our Services or order Products, you provide personal data directly to us in the United States. We may transfer your personal data to affiliates and service providers, as described in the “How We Share Personal Data” section, who may be located in the United States, the European Economic Area (EEA), or other countries where we or our service providers maintain facilities and other jurisdictions that may not provide the same protections as your home country’s data protection laws. Where required, we ensure safeguards are in place to afford adequate protection. By using our Services, you consent to the transfer and processing of your information in the United States, which may have different data protection laws. For more information, contact us at https://www.ardoru.com/p/contact.

Data Privacy Framework.

The U.S. Department of Commerce, with partner agencies in Europe, has established the Data Privacy Framework (DPF) principles. If there is any conflict between this Privacy Policy and the DPF principles, the DPF principles govern. Learn more and view our certification at https://www.dataprivacyframework.gov/.

We may be accountable for the personal data that we transfer to third-party service providers (described in the “How We Share Personal Data” section above). If such providers process data inconsistently with DPF principles, we are responsible for any harm caused.

California Consumer Privacy Act (CCPA) Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Your Rights Under the CCPA

• Right to Know: Request information about the categories and specific pieces of personal information we have collected about you over the past 12 months.
• Right to Delete: Request deletion of your personal information, subject to exceptions.
• Right to Opt-Out of Sale: Opt out of the sale of your personal information to third parties.
• Right to Non-Discrimination: Exercise your CCPA rights without discrimination.

How to Exercise Your Rights

Submit a request by:

• Emailing hello@ardoru.com.
• Visiting https://www.ardoru.com/p/contact.

We will respond within 45 days, as required by law, unless we need additional time (up to 90 days) due to the complexity of your request. If we need more time, we will notify you and explain why.

Verification of Identity

In order to fulfill your request, we may need to verify your identity. This helps ensure that we are responding to the correct individual. We may request information such as your name, address, and any relevant details related to your interactions with us. If we cannot verify your identity, we may not be able to fulfill your request.

Authorized Agent

If you are an authorized agents must provide written authorization from the resident.

Sharing of Personal Information

In the past 12 months, we may have shared personal information for business purposes. See the "How We Share Personal Data" section for details. California residents may request information once per year about personal information shared with third parties for direct marketing purposes. California residents may contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs at www.dca.ca.gov or 800-952-5210.

Colorado Privacy Act (CPA) Privacy Rights

If you are a Colorado resident, you have specific rights regarding your personal data under the Colorado Privacy Act (CPA):

Your Rights Under the CPA

• Right to Access: Request access to and a copy of your personal data in a portable format.
• Right to Correct: Request correction of inaccurate personal data.
• Right to Deletion: Request deletion of your personal data, that we have collected, subject to certain exceptions.
• Right to Opt-Out of Sale or Sharing: Opt out of the sale or sharing of your personal data with third parties for purposes such as targeted advertising or other commercial purposes.
• Right to Data Portability: Request your personal data in a structured, commonly used, machine-readable format.
• Right to Non-Discrimination:Exercise your CPA rights without discrimination.

Data retention periods by CCPA category are available upon request.

How to Exercise Your Rights

Submit a request by:

• Emailing hello@ardoru.com.
• Visiting https://www.ardoru.com/p/contact.

We will respond within 30 days, as required by law. If we require more time (up to 60 days we notify you of the reason for the delay.

Verification of Identity

We may request information to verify your identity. If we cannot verify your identity, we may not be able to fulfill your request.

Authorized Agents

Authorized agents must provide written authorization from the resident.

Sharing of Personal Information

In the past 12 months, we may have shared personal information with third parties for business purposes. See the "How We Share Personal Data" section for details.

Virginia Consumer Data Protection Act (VCDPA) Compliance

If you are a Virginia resident, you have specific rights under the Virginia Consumer Data Protection Act (VCDPA):

Consumer Rights Under the VCDPA

• Right to Access: Confirm whether we process your personal data and access it.
• Right to Correction: Request correction of inaccurate personal data.
• Right to Deletion: Request deletion of your personal data, subject to exceptions.
• Right to Data Portability: Obtain a copy of your personal data in a portable format.
• Right to Opt-Out: Opt out of the processing of your personal data for targeted advertising, sale of personal data, or certain types of profiling.

Exercising Your Rights To exercise your rights under the VCDPA, please contact us at hello@ardoru.com or https://www.ardoru.com/p/contact. We will respond to your request within the required timeframe as required by law. If we deny your request, you may appeal our decision by contacting us.

Third-Party Sharing and Data Sales

We do not sell personal data as defined under the VCDPA. We may share personal data with service providers and third parties for business purposes, including:

• Payment processors;
• Marketing and advertising partners;
• Data analytics providers.

Recourse, Enforcement, Liability

We commit to resolving complaints about our collection or use of your personal data. Contact us at https://www.ardoru.com/p/contact. If unresolved, a binding arbitration option may be available under certain conditions via the Data Privacy Framework Panel (https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2). We are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission for DPF-related data.

Notice of Financial Incentive & ArdorU Orange Hearts Club

The ArdorU Orange Hearts Club is one way in which ArdorU endeavors to reward and thank loyal customers for using our Services and purchasing ArdorU products. Members of the ArdorU Orange Hearts Club opt in by registering an ArdorU account through the ArdorU App or otherwise online and are able to earn and accumulate "Hearts" that can be redeemed for ArdorU Orange Hearts Club benefits. If you would like to learn more about the ArdorU Orange Hearts Club, please log into your account and see the ArdorU Orange Hearts Club terms and procedures available at: https://www.ardoru.com/dashboard/orange-hearts-club.

ArdorU collects and uses personal information described in the “Information We Collect” section, including information you voluntarily provide us (such as your name and email), information we collect automatically, and information from other sources to operate the ArdorU Orange Hearts Club loyalty program, including sending promotions, content, and special offers and the other uses described in this Notice. We work with many service providers and business partners to offer the benefits of our ArdorU Orange Hearts Club loyalty program. Those partners may fall into the following categories: delivery partners, licensees, subsidiaries, and affiliates, and or service providers and business partners. You can learn about the business partners with whom we share your information by referring to the “How We Disclose Your Information” section. ArdorU does not assign a monetary value to the information collected through the Orange Hearts Club. You may opt out of promotional emails by clicking the “unsubscribe” link included within the footer of any promotional email. To withdraw from the ArdorU Hearts Club, contact us via https://www.ardoru.com/p/contact. Withdrawing means you will lose access to any previously earned, purchased or accumulated “Hearts” and related information, or to other information related to your prior membership in the ArdorU Hearts Club, but you can continue using the ArdorU web app. All points and rewards you have earned until the time of withdrawal will no longer be available. As previously shared, to communicate and provide services to you through the ArdorU Orange Hearts Club loyalty program, we need to use your personal information. Therefore, if you choose to deleting your personal information from the ArdorU Orange Hearts Club will prevent us from providing loyalty program services.

Based on our reasonable and good faith estimate, we receive value from the ArdorU Hearts Club that may be measured in increased customer loyalty and patronage, though any value derived will vary from User to User, depending on numerous factors, including, without limitation, purchases made, which offers a member takes advantage of, frequency of use, among other factors.

Children’s Privacy

Our Services are not intended for children under 13. Our services are not directed to children under 13. We do not knowingly collect personal information from children in violation of the Children’s Online Privacy Protection Act (COPPA). If you are a parent or guardian and you have reason to believe that a child under the age of 13 has provided personal data to ArdorU through the Sites or Apps, please contact us via https://www.ardoru.com/p/contact.

Links to Other Websites

Our Site may contain links to or integrations with third-party websites not operated or controlled by us (“Third-Party Sites”), including social media platforms, artist websites, search engines, new media sites, and similar services. The information that you share with Third-Party Sites will be governed by their specific privacy policies and terms of service, of such Third-Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have review these sites. Please contact them directly for information on their privacy practices and policies.

Security

We maintain organizational, administrative, and technical safeguards designed to protect your personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

Changes to Our Privacy Policy

We may update this Privacy Policy at any time. If we make material changes, we will notify you by updating the date of this Privacy Policy and posting it on our Services.

Contact Us

ArdorU North America LLC is the entity responsible for the processing of your personal data, and is the data controller for the personal data we collect or otherwise process as described in this Privacy Policy. For questions about our Privacy Policy, data practices, or to exercise your rights with respect to your personal data, please contact us at:

Email: hello@ardoru.com

Address: ArdorU North America LLC, 295 Madison Ave, 12FL, New York, NY 10017

Phone: (212) 404-2736

You can access our privacy snapshot here.

Effective: July 17th, 2025