Privacy policy

Last updated: September 7, 2026

This policy explains what personal information Deskmith ("we", "us") collects when you visit or buy from deskmith.com, why we collect it, who we share it with, how long we keep it, and the choices you have. We’ve tried to write it the way we’d want to read it — specific and short. Questions at any point: contact@deskmith.com.

1. WHO WE ARE

Deskmith operates the store at deskmith.com, hosted on Shopify. For any privacy request — access, correction, deletion, or a question — email contact@deskmith.com or use the contact form. We reply within 24 hours on business days and resolve requests within 30 days.

2. WHAT WE COLLECT

Order information. When you place an order: your name, shipping address, email address, phone number (if provided), the items you bought — including any custom desktop dimensions you enter — and your order history.

Payment information. Payments are made through PayPal at checkout. PayPal handles your payment credentials; Deskmith does not receive or store your PayPal password or full card number.

Communications. What you send us through the contact form, by email, or on WhatsApp, so we can resolve your request and keep a record of what was agreed (for example, custom-size confirmations and warranty claims).

Newsletter signup. Your email address, only if you subscribe with the consent box checked.

Device and usage data. Standard technical data collected automatically via cookies: IP address, browser and device type, pages viewed, and how you found us. See section 5.

We do not collect more than we need, and we never buy personal data about you from third parties.

3. WHY WE USE IT

To fulfill your order — process payment, produce custom desktops to your measurements, ship, and send order and tracking emails.
To support you — answer questions, handle returns, warranty claims and cancellations.
To send the newsletter — only with your consent; see section 4.
To run and improve the store — understand which pages and products work, fix problems, prevent fraud.
To meet legal obligations — tax, accounting and consumer-protection records.

4. NEWSLETTER

You only receive marketing email from us if you subscribed yourself, with the consent checkbox ticked. Every email includes a one-click unsubscribe link, and unsubscribing stops marketing email immediately — it never affects order or shipping notifications. We don’t share our mailing list with anyone.

5. COOKIES

Essential cookies keep your cart and checkout working — the store can’t function without them. Analytics cookies (Shopify analytics) tell us in aggregate how the store is used. If we ever add advertising pixels (for example for social media ads), we will update this section first. You can manage or delete cookies in your browser settings at any time; blocking essential cookies may break checkout.

6. WHO WE SHARE IT WITH

Only what each party needs to do its job, and nothing more:

Shopify — hosts the store and processes orders (see Shopify’s privacy policy).
PayPal — processes your payment under its own privacy policy.
Fulfillment warehouses and carriers — receive your name, shipping address, phone (for delivery) and the contents of your parcel, because they physically pick, pack and deliver it.
Email service — sends order notifications and, if subscribed, the newsletter.

We never sell your personal information, and we never share it for third-party advertising. We may disclose information if the law requires it (for example, a valid legal request).

7. WHERE IT’S PROCESSED

Our store and its data are processed on Shopify’s infrastructure, primarily in the United States. If you order from outside the US, your information is transferred to the US to fulfill your order.

8. HOW LONG WE KEEP IT

Order records — kept as long as required for tax, accounting and warranty purposes (our desk warranty runs 10 years, so order records are kept at least that long).
Support conversations — kept for up to 3 years after the issue is closed, so we can honor what was agreed.
Newsletter email — kept until you unsubscribe, then removed from the active list.
Analytics data — aggregated; not tied to you long-term.

9. YOUR RIGHTS

Wherever you live, you can ask us to:

Access — get a copy of the personal information we hold about you;
Correct — fix inaccurate information;
Delete — erase your information, except records we’re legally required to keep (for example tax records);
Export — receive your data in a portable format;
Opt out — stop marketing email at any time (unsubscribe link, or just tell us).

To exercise any of these, email contact@deskmith.com. We’ll verify it’s you (usually by confirming your order email), act within 30 days, and never charge for a request. California residents: the rights above cover your CCPA rights to know, delete, correct and opt out of sale/sharing — and as stated in section 6, we don’t sell or share your data for advertising in the first place. EU/UK visitors: the same rights apply, and you may also lodge a complaint with your local data-protection authority.

10. SECURITY

The whole store runs over HTTPS. Checkout and payment are handled by Shopify’s PCI-DSS-certified systems. Access to order data is limited to the people who need it to fulfill and support your order.

11. CHILDREN

The store is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has given us personal information, contact us and we’ll delete it.

12. CHANGES TO THIS POLICY

When we change this policy, we update it here with a new “last updated” date. Material changes (for example, adding advertising pixels) will be noted at the top of this page for 30 days.