Privacy Policy

The short version

Everform sells cremation urns and keepsakes. Buying one means telling us where to ship it, and often what to engrave on it. This page explains what happens to that information.

• We do not have customer accounts. There is nothing to sign into and no password to store.
• Payment happens on Shopify's checkout. We never receive or hold your card number.
• We do not sell your personal information, and we do not share the name or the inscription you choose with advertisers.

What we collect

When you place an order

• Where it ships and who to reach: name, shipping address, email address, and a phone number if the carrier needs one.
• What you asked us to make: the piece you chose, the size and finish, and any inscription text you enter.
• Payment confirmation: Shopify processes the payment and tells us the order succeeded. We receive the billing name and the last four digits of the card. The full card number is never sent to us and never touches our servers.

When you browse

Standard technical information that any web server receives: your IP address, browser and device type, the pages you visit, and the site or ad that referred you. This is also what our analytics and advertising tags read. See Cookies and tracking below.

What we do not collect

We do not ask for and do not want the death certificate, the obituary, medical or funeral-home records, or the date of death. If you send any of it to us anyway, we use it only to answer you and we delete it once that is done.

The inscription you choose

An inscription is usually a person's name, sometimes their dates, sometimes a line that mattered to them. We treat it as the most sensitive thing you give us, because it is.

• It is used to produce your piece and to check it before it ships. Nothing else.
• It is never used in marketing, never shown as an example, and never published in a gallery, a review, or an ad.
• It is never sent to an advertising or analytics platform. Our advertising tags record that a purchase happened and its value. They do not receive the text you engraved.
• It reaches only the people producing your order. Everform pieces are made in-house.

Photographs you upload

Some keepsakes let you upload a photograph. When you do, the file is stored in our Supabase storage account, which is access-controlled and used solely to produce your order.

Your photograph is not used for marketing, not shown to other customers, and not used to train any machine-learning model. If you want it deleted, email us and we will remove it once your order is complete.

Who we share it with

We do not sell your personal information. We share it only with the services that make an order work, and only the part each one needs:

• Shopify runs our checkout and processes payment. Your card details go to Shopify and its payment processors, not to us. Shopify also sends your order confirmation and shipping email.
• Supabase hosts our database and file storage, which is where order records and any uploaded photograph live.
• Shipping carriers receive the name and address on the label so the parcel can be delivered and tracked.
• Analytics and advertising platforms receive browsing and conversion data through the tags described below. They do not receive your inscription or your photograph.

We may also disclose information where the law requires it, or to protect our rights, our customers, or the public.

We make every urn and keepsake ourselves, in our own workshop. Production is never sent to a third party, so the names, dates, and words you give us for a piece are never shared with an outside manufacturer.

Cookies and tracking

Everform uses cookies and similar technologies in three categories:

• Necessary: keeping your cart intact and carrying you through checkout. The site does not work without these.
• Analytics: understanding which pages people visit and where they leave, so we can improve the store. This is aggregate, not a profile of you by name.
• Advertising and measurement: we advertise on search and social platforms, and we use their tags and cookies to measure which ads lead to orders. This can include Google, Microsoft, Meta, and Pinterest. These tags may set cookies, read your device and browsing signals, and report conversion events such as a completed purchase and its value.

Where an advertising platform is sent an identifier to match a conversion, it is hashed before it leaves our systems. Advertising platforms never receive your inscription text or any photograph you upload.

You can block or delete cookies in your browser settings. Necessary cookies cannot be turned off without breaking checkout. You can also opt out of personalized advertising directly with each platform through its own ad settings.

How long we keep it

• Order records are kept as long as we need them for warranty, accounting, and tax purposes.
• Uploaded photographs are kept while your order is in production and for a short period afterwards in case a replacement is needed, then deleted. Ask us and we will delete sooner.
• Support email is kept while we are helping you and for a reasonable period afterwards.

Security

The site is served over HTTPS. Payment card data is handled by Shopify's PCI-compliant checkout and never reaches our servers. Order data and uploaded files sit in access-controlled Supabase storage, and access is limited to the people who need it to produce and ship your order.

No system is perfectly secure, and we will not claim otherwise. If a breach affects your information, we will tell you and the relevant authorities as the law requires.

Your choices

Email us and we will act on any of the following. Because we have no accounts, there is no self-service dashboard; a message to the address below is the way to reach us.

• Ask what personal information we hold about you.
• Ask us to correct something that is wrong.
• Ask us to delete your information, including any photograph, subject to records we must keep for tax and accounting.
• Ask for a copy of your information in a portable format.
• Unsubscribe from marketing email. Transactional messages about an order you placed will still be sent.

Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA, including the right not to be discriminated against for exercising them. We honor these requests regardless of where you live.

Children

Everform is intended for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

If we change how we handle your information, we will update this page and revise the date shown at the top. Significant changes will be described here rather than made quietly.

Contact us

Questions about this policy, or a request about your information:

• Email: hello@myeverform.com