Privacy policy
Last updated: September 10, 2026
Yesterday’s Keeps (“Yesterday’s Keeps,” “we,” “us,” or “our”) respects your privacy and is committed to handling personal information responsibly.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, place an order, upload photographs or other content, communicate with us, or otherwise use our products and services (collectively, the “Services”).
Yesterday’s Keeps is a small business located in Ontario, Canada.
This Privacy Policy should be read together with our Terms of Service. If there is a conflict between this Privacy Policy and our Terms of Service regarding the collection, use, disclosure, retention, or protection of personal information, this Privacy Policy will govern that specific issue.
1. Personal Information We Collect
“Personal information” generally means information about an identifiable individual.
Depending on how you interact with Yesterday’s Keeps, we may collect or process the following categories of personal information:
Contact Information
This may include your name, email address, telephone number, billing address, shipping address, and other contact details you provide.
Order and Transaction Information
This may include products purchased, quantities, customization selections, order history, transaction details, shipping information, and customer-service records relating to your orders.
Payment Information
Payment information may be collected and processed by Shopify, our payment processors, or other ecommerce service providers.
Depending on the payment method used, we may receive information such as payment status, transaction confirmation, payment method, and limited payment details. We generally do not need to retain your complete credit-card number.
Photographs and Customer Content
Because Yesterday’s Keeps creates personalized photo products, we may collect and process photographs, images, artwork, text, names, dates, designs, and other materials you submit for an order (“Customer Content”).
Customer Content may contain personal information about you and other individuals appearing in the submitted content.
Communications
We may collect information you provide when you contact us by email, contact form, social media, messaging services, or other communication methods, including the contents of your communications.
Device and Website Information
When you use our website, we may automatically receive information such as your IP address, browser type, device information, operating system, referring website, pages viewed, approximate location derived from technical information, and other technical or usage information.
Cookies and Similar Technologies
We may collect information using cookies, pixels, analytics tools, and similar technologies. Additional information is provided in Section 8.
2. Photographs and Customer Content
Photographs and other Customer Content are central to our Services.
We may collect, store, access, transmit, reproduce, and otherwise process Customer Content as reasonably necessary to:
-
Process and produce your order;
-
Prepare photographs and files for production;
-
Create your customized products;
-
Transmit files to production or fulfillment providers where necessary;
-
Package and ship your order;
-
Communicate with you about your order;
-
Provide customer service;
-
Investigate or resolve production, quality, or shipping issues;
-
Prevent fraud or misuse;
-
Protect our systems and business;
-
Comply with legal obligations; and
-
Otherwise provide the Services you requested.
We do not claim ownership of photographs or other Customer Content that you upload.
The fact that we process your photographs to fulfill an order does not give us ownership of those photographs.
3. Promotional Use of Customer Photographs
Your photographs may need to be processed to fulfill your order whether or not you provide promotional consent.
Separately, we may ask whether you would like to allow us to use selected photographs, finished magnets, or other Customer Content for social media, advertising, marketing, portfolio, or other promotional purposes.
Promotional permission is optional and is not required to purchase from Yesterday’s Keeps.
Where available, our checkout or another part of our Services may include a separate consent mechanism such as:
“I give Yesterday’s Keeps permission to use the photos uploaded with my order for social media, website, advertising, marketing, and promotional purposes.”
If you do not provide promotional consent, we will not use your photographs for those promotional purposes based solely on your purchase or submission of the photographs.
If you provide promotional consent, we may use the relevant Customer Content in accordance with that consent and our Terms of Service.
You may withdraw promotional consent by contacting us using the information in Section 20.
Withdrawal does not affect the lawfulness of promotional use that occurred before withdrawal.
4. How We Collect Personal Information
We may collect personal information:
-
Directly from you when you place an order, upload photographs, communicate with us, sign up for an account if available, or otherwise interact with us;
-
Automatically when you browse or use our website, including through cookies and similar technologies;
-
From service providers that help us operate our business; and
-
From other third parties where permitted by applicable law.
We aim to collect only personal information that is reasonably necessary for the purposes described in this Privacy Policy.
5. How We Use Personal Information
We may use personal information for the following purposes:
Providing and Fulfilling Orders
We use personal information to process payments, produce customized products, fulfill orders, arrange shipping, provide customer support, and otherwise provide the Services you request.
Communicating With You
We may use your contact information to respond to inquiries, provide order confirmations, communicate about production or customization, provide shipping updates, and address customer-service matters.
Improving Our Services
We may use information about how customers interact with our website and Services to maintain, understand, troubleshoot, improve, and develop our website, products, and customer experience.
Where reasonably possible, information used for analytical or improvement purposes may be aggregated or otherwise used in a manner that does not directly identify individual customers.
Marketing
Where permitted by law and where any required consent has been obtained, we may use your contact information to send marketing communications.
You can unsubscribe from promotional emails by following the unsubscribe instructions included in those communications.
We may continue to send non-promotional transactional communications that are reasonably necessary to provide your orders or respond to your requests.
Social Media and Advertising
Customer photographs will only be used for our social-media, advertising, marketing, portfolio, or other promotional purposes where we have obtained the applicable optional permission described in this Privacy Policy and our Terms of Service.
Security and Fraud Prevention
We may use personal information to protect our website and business, investigate suspected fraud or misuse, prevent unauthorized activity, protect customers and others, and maintain the security of our Services.
Legal and Regulatory Requirements
We may collect, use, retain, or disclose personal information where reasonably necessary to comply with applicable law, legal processes, court orders, government requests, or other legal obligations.
6. How We Share Personal Information
We may share personal information with service providers and other parties where reasonably necessary to operate our business and provide the Services.
These may include providers involved in:
-
Website hosting and ecommerce;
-
Payment processing;
-
Printing and production;
-
Order fulfillment;
-
Shipping and delivery;
-
Cloud storage;
-
Website analytics;
-
Customer support;
-
Email and communications;
-
Fraud prevention; and
-
Other business operations.
Where a service provider or production partner needs access to Customer Content to perform services for us, photographs or other files may be transmitted to that provider.
We may also disclose personal information:
-
When you direct us to do so;
-
With your consent;
-
When required or permitted by law;
-
To protect our legal rights or the rights of others;
-
To prevent or investigate fraud, security threats, or unlawful activity; or
-
In connection with a business sale, merger, financing, restructuring, or similar transaction, subject to applicable law.
We do not sell your personal photographs.
7. Shopify and Other Service Providers
Our online store is powered by Shopify. Shopify and other third-party service providers may collect, use, store, or otherwise process personal information on our behalf or as necessary to provide their services, including ecommerce hosting, payment processing, website functionality, analytics, security, fraud prevention, order fulfillment, and other business operations.
Information submitted through our website may be transmitted to Shopify and other service providers where reasonably necessary to provide the Services.
Some service providers may process personal information outside Canada, as described in Section 12.
Third-party service providers may have their own privacy policies and terms governing their handling of personal information.
8. Cookies and Similar Technologies
Our website may use cookies, pixels, local storage, analytics tools, and similar technologies.
These technologies may be used to:
-
Keep the website functioning;
-
Remember preferences;
-
Understand how visitors use our website;
-
Measure website performance;
-
Improve our Services;
-
Maintain security; and
-
Support marketing or advertising activities where permitted.
You may be able to control certain cookies through your browser or device settings. Disabling some cookies may affect the functionality of our website.
Where required by applicable law, we will obtain consent before using cookies or similar technologies that require consent.
9. Retention of Personal Information and Customer Photos
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:
-
Complete and support orders;
-
Provide customer service;
-
Maintain appropriate business and transaction records;
-
Resolve disputes;
-
Prevent fraud;
-
Comply with legal, accounting, tax, or regulatory obligations; and
-
Enforce our agreements and policies.
Retention periods vary depending on the type of information and why it was collected.
We do not promise that photographs will be deleted immediately after an order is completed. Photographs and other Customer Content may remain in systems used to operate our business for a reasonable period after fulfillment, including for customer service, quality control, backup, security, dispute resolution, and legal or record-keeping purposes.
Where Customer Content is no longer reasonably required for these purposes, we will take reasonable steps to delete, destroy, or de-identify it, subject to technical limitations and legal or business record-keeping requirements.
10. Protecting Your Information
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, or destruction.
These safeguards may include access controls, secure systems, service-provider controls, and other measures appropriate to the nature and sensitivity of the information.
However, no method of transmitting or storing information is completely secure. We cannot guarantee absolute security.
11. Privacy Breaches
If we become aware of a privacy breach involving personal information, we will take reasonable steps to contain, investigate, and address the incident.
Where required by applicable law, we will notify affected individuals and/or the appropriate authorities of a breach.
12. International Processing
Some of our service providers may be located outside Canada.
As a result, personal information may be transferred to, stored in, or processed in other countries, including the United States.
When personal information is processed outside Canada, it may be subject to the laws of the jurisdiction in which it is processed and may be accessible to courts, law-enforcement authorities, or regulatory authorities in that jurisdiction.
We take reasonable steps to select service providers and manage personal information in accordance with applicable Canadian privacy requirements.
13. Privacy Law
Yesterday’s Keeps is a small business located in Ontario, Canada.
We collect, use, disclose, retain, and protect personal information in accordance with applicable privacy laws and requirements that apply to our business.
We aim to follow generally recognized privacy principles relating to accountability, identifying purposes, consent, limiting collection, limiting use and disclosure, accuracy, safeguards, openness, access, and individual privacy requests.
The specific privacy rights and requirements that apply may depend on applicable law and the circumstances of the individual.
14. Your Privacy Rights
Depending on applicable law and where you live, you may have certain rights in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and may be subject to exceptions or limitations permitted by law.
Depending on the circumstances, these rights may include:
-
Requesting access to personal information we hold about you;
-
Asking us to correct inaccurate or incomplete personal information;
-
Asking questions about how your personal information is collected, used, or disclosed;
-
Withdrawing consent to certain uses of personal information, subject to legal, contractual, or other restrictions;
-
Requesting deletion or destruction of personal information where applicable; and
-
Making a complaint about our handling of personal information.
You may exercise applicable privacy rights by contacting us using the information provided in Section 20.
To make a privacy request, we may need to verify your identity before providing access to personal information or making certain changes.
We will respond to privacy requests in a timely manner.
Some requests may be denied where permitted or required by law, including where information must be retained for legal, accounting, tax, security, fraud-prevention, or other legitimate purposes.
15. Marketing Communications
Where permitted by law, we may send promotional communications by email or other permitted communication methods.
You may unsubscribe from promotional emails using the unsubscribe mechanism provided in the communication.
Unsubscribing from promotional communications does not prevent us from sending transactional or service-related communications that are reasonably necessary to complete or support an order or respond to a request.
16. Children's Privacy
Our Services are not directed toward children, and we do not knowingly solicit or collect personal information directly from children where prohibited by applicable law.
However, our products are designed to preserve personal memories, and customers may upload photographs that contain children or other individuals.
A photograph containing a child does not necessarily mean that we have knowingly collected personal information directly from that child.
The person submitting an order is responsible for ensuring that they have the appropriate authority and permissions to provide photographs and other Customer Content to us for the purposes of the order.
If you believe a child has directly provided personal information to us in circumstances where it should not have been collected, please contact us using the information below.
17. Third-Party Websites and Services
Our website may contain links to third-party websites, social-media platforms, payment services, or other services.
We are not responsible for the privacy practices, security, or content of third-party websites or services that we do not control.
We encourage you to review the privacy policies and terms of any third-party services you use.
18. Privacy Complaints
If you have a concern or complaint about how Yesterday’s Keeps handles your personal information, please contact us first so that we can understand and attempt to resolve the issue.
We will review your concern and respond in a timely manner.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business practices, Services, technology, service providers, or legal requirements.
When we make changes, we will update the “Last updated” date at the top of this Privacy Policy and provide any additional notice required by applicable law.
We encourage you to review this Privacy Policy periodically.
20. Contact Us
If you have questions about this Privacy Policy, please contact us with the email below.
yesterdayskeeps@gmail.com