Effective Date: 12/2/2025
Governing Jurisdiction: State of Texas

1. Definitions

For purposes of this Privacy Policy (“Policy”):

• “Company,” “We,” “Us,” “Our” refers to Christmas Deliveries, owned and operated by Tristan James Gunderson, a Texas sole proprietorship.
• “Customer,” “You,” or “Your” refers to any natural person or entity accessing, purchasing from, or interacting with the Company.
• “Personal Information” means any information relating to an identified or identifiable natural person.
• “Services” includes Christmas tree delivery, holiday delivery, gift procurement, Toy Fund administration, and any related offerings.
• “Toy Fund” refers exclusively to the Company’s discretionary, for-profit community initiative. 

By using the Services, Customer consents to the data practices described herein.

2. Legal and Business Status

Christmas Deliveries is a for-profit business.
It is not a nonprofit organization, not a charity, and not a 501(c)(3).

This Privacy Policy reflects commercial, not charitable, data-handling standards.

3. Categories of Personal Information Collected

The Company may collect, receive, or process the following categories of Personal Information (“PI”):

3.1 Identifiers

• Name
• Email address 
• Phone number
• Billing or delivery address 
• Payment-related name (from payment processors)
   

3.2 Commercial Information

• Purchases, transactions, and order history
• Delivery instructions 
• Sponsorship amounts
• Customer selections or preferences

3.3 Internet & Technical Data

• IP address
• Device identifiers
• Browser type
• Access timestamps
• Pages viewed on the website
   

3.4 Payment Information

• Payments are processed exclusively by third-party processors (e.g., Stripe, PayPal).
• The Company does not store or retain full credit card numbers or bank details.
   

3.5 Minor Information (Strictly Limited)

The Company does not knowingly collect the personal information of minors except when voluntarily provided by parents/guardians for delivery purposes only.
All minor-related data is minimized and deleted after use.

4. Methods of Data Collection

The Company may collect data from:

• Direct Customer submissions (forms, purchase checkout, messages) 
• Automated website technologies (cookies, analytics tools) 
• Delivery and scheduling systems
• Payment processors
• SMS and email communication services
  

5. Purposes for Collecting and Using Personal Information

The Company uses Personal Information for the following legitimate business purposes:

5.1 Service Delivery

• Fulfillment of delivery orders
• Coordinating holiday deliveries 
• Processing Toy Fund contributions 
• Verifying identity for delivery 
• Managing communications and updates

5.2 Business Operations

• Payment processing and fraud prevention 
• Internal recordkeeping 
• Website maintenance and optimization 
• Customer service and inquiry response
   

5.3 Legal and Compliance

• Responding to lawful subpoenas or court orders 
• Investigating fraud, chargebacks, or unauthorized activity 
• Enforcing Company Terms & Conditions
   

5.4 Communication

• Sending transactional emails 
• Sending SMS delivery notifications 
• Administrative and account-related communications

Marketing emails are used sparingly and only with customer consent.

6. Data Retention

Personal Information is retained solely for the period reasonably necessary to:

• Complete requested Services 
• Maintain accurate business records 
• Satisfy legal, tax, or regulatory obligations
• Resolve disputes or chargeback claims 

Toy Fund-related PI is deleted as soon as operational needs are fulfilled unless retention is required for legal purposes.

7. Sharing and Disclosure of Personal Information

The Company does not sell or rent Personal Information.

However, the Company may disclose PI to the following categories of third parties strictly for business purposes:

7.1 Service Providers

• Payment processors (Stripe, PayPal) 
• SMS delivery services 
• Email communication providers 
• Website hosting and security vendors
   

7.2 Delivery Personnel / Contractors

Limited PI (name, delivery address, instructions) may be shared with contractors solely to complete delivery obligations.

7.3 Legal and Compliance Authorities

PI may be disclosed when required by:

• Court orders 
• Legal subpoenas 
• Law enforcement requests 
• Fraud or chargeback investigations
   

7.4 Business Transfers

If the Company undergoes a transfer of ownership or assets, PI may be part of the transferred records, subject to this Policy.

The Company will never disclose unnecessary minor information.

8. Protection of Minor Information

The Company is committed to compliance with the Children’s Online Privacy Protection Act (COPPA).

Accordingly:

• No data is knowingly collected directly from minors under 13. 
• All minor-related information must be submitted by an adult. 
• The Company immediately deletes any minor-related data that is not necessary for delivery. 
• The Company does not use minor information for marketing, profiling, or analytics.
   

9. Customer Rights

While Texas does not impose California-style data rights, the Company voluntarily allows Customers to request:

• Access to their stored information 
• Correction of inaccurate data 
• Deletion of certain data when no longer needed 
• Clarification of data-handling practices
   

Requests may be submitted via the contact information in Section 14.

10. Security Measures

The Company employs commercially reasonable safeguards to protect Personal Information, including:

• Encrypted payment processing (via third parties) 
• Restricted internal access 
• Secure password-protected systems 
• HTTPS website encryption 
• Regular system monitoring
   

Despite these measures, no data transmission is completely secure.
Customer assumes inherent risk when transmitting information online.

11. Cookies and Tracking Technologies

The Company may use:

• Essential cookies 
• Performance cookies 
• Analytics tools (e.g., basic website analytics) 
• Device/session logs
   

These are used solely to ensure site functionality, prevent fraud, and improve service quality.
The Company does not engage in cross-site behavioral advertising.

12. Third-Party Links

The website may contain links to external sites.
The Company is not responsible for the privacy policies, content, or data-handling practices of third-party websites.

13. Legal Basis for Processing (Commercial Context)

Because the Company operates commercially, PI is processed under the following bases:

• Contractual necessity — to fulfill Customer orders 
• Legitimate business interests — fraud prevention, logistics, service optimization 
• Legal compliance — tax records, transaction logs 
• Customer consent — where applicable
   

14. Contact Information

For privacy-related inquiries, deletion requests, or questions:

Christmas Deliveries
Owner: Tristan James Gunderson
4301 W. William Cannon Dr., Suite 150 PMB 403
Austin, TX 78749
Email: customersupport@christmasdeliveries.com

15. Changes to This Privacy Policy

The Company reserves the unilateral right to modify, amend, or update this Policy at any time.
Continued use of the Services constitutes acceptance of any revised Policy.