Privacy policy.

BrandMyBags is operated by US Printing and Packaging, LLC, a Michigan limited liability company. Our website lives at brandmybags.com. Throughout this policy, "we", "us", and "our" refer to that company.

Forms and quote requests

When you request a quote, send us artwork, place an order, or contact us through any form on this site, we collect the data shown in that form (typically name, email, company, phone, project specifications, and uploaded files), your IP address, and a browser user-agent string. We use this information to follow up on your inquiry, prepare your quote, deliver your order, and protect against spam.

Account information

If you create a customer account, we store your email and an encrypted password. If you complete a profile, we additionally store your company name, phone number, shipping address, and any artwork files you choose to save. You can view, edit, or delete this information from your account page at any time.

Order and payment data

When you place a paid order, we store the order details (specifications, quantities, pricing, status) along with your billing and shipping addresses. Payment-card information is processed by our payment provider (Intuit QuickBooks Payments). We retain only a transaction reference (charge ID) for tax, audit, and customer-service purposes.

Media you upload

If you upload artwork or any image to the website, please avoid uploading images with embedded location data (EXIF GPS) — that metadata is preserved by the upload and could be readable by anyone we share a proof with.

Cookies

Strictly-necessary cookies — short-lived session cookies that keep you logged in and preserve your shopping cart between pages. These cannot be disabled without breaking site functionality.

Preference cookies — if you ask us to remember your contact details for future quote requests, we save those in a one-year cookie purely for your convenience.

Analytics cookies — we use Google Analytics 4 and Microsoft Clarity to understand which pages get traffic and how customers move through the site. These set cookies that expire within two years. We do not sell this data or use it for third-party advertising.

Analytics

We use two third-party analytics providers to understand how the site is used: Google Analytics 4 for aggregate traffic, traffic sources, and conversion paths, and Microsoft Clarity for anonymized session replays and heatmaps that show how visitors interact with a page. Both collect usage data such as the pages you view, approximate location derived from your IP address, and your device and browser type. We do not run third-party advertising trackers, and we do not sell behavioral data.

This data is processed by Google and Microsoft under their own privacy terms (Google, Microsoft). You can opt out of Google Analytics with Google's opt-out browser add-on. Where required by law (CCPA, GDPR), we honor opt-out signals such as the Global Privacy Control header.

Embedded content

Posts on our blog may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves the same way as if you had visited that other website directly — those websites may collect data, set cookies, and track your interaction with the embedded content.

We don't sell your personal data, and we don't share it with advertising networks. The only third parties we share data with are operational vendors required to fulfill your order:

• Payment processors (Intuit QuickBooks Payments) to charge for paid orders.
• Shipping carriers (UPS, FedEx, freight providers) to deliver your packaging.
• Cloud infrastructure (Supabase, Vercel) where customer accounts, orders, and artwork files are stored.
• Email service providers for order confirmations and quote follow-ups.
• Anti-spam and fraud-prevention services for form submissions and account creation.
• Analytics providers (Google Analytics, Microsoft Clarity) to measure site usage — aggregate and behavioral analytics only, never for advertising.

All vendors are contractually required to handle your data in accordance with applicable privacy law and only for the purposes we engaged them for. Where legally required, we may also disclose data in response to lawful subpoenas, court orders, or to protect against imminent harm.

If you leave a comment, the comment and its metadata are retained indefinitely so we can recognize and approve any follow-up comments automatically.

For users that register on our website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

You can request a complete export of the personal data we hold about you, request that we correct inaccurate data, or request that we erase your data — at any time. We honor these requests for any user, regardless of state of residence.

California residents have additional rights under the CCPA / CPRA, including the right to opt out of the sale or sharing of personal information (we do not sell or share personal information for advertising purposes), and the right to limit use of sensitive personal information.

EU and UK residents have additional rights under GDPR, including the right to data portability and the right to object to processing.

Email info@brandmybags.com with the subject line "Privacy request" and we'll respond within five business days. We may need to verify your identity before fulfilling certain requests.

We retain data we are legally required to keep (tax records, contracts, audit trails) regardless of erasure requests. The remainder is erased on request.

Customer accounts, orders, artwork files, and analytics are stored on infrastructure located inside the United States.

Form submissions may be screened by automated spam-detection services that operate globally. Email delivery flows through providers operating in North America and the EU.

For visitors located outside the United States, your data is transferred to the U.S. for processing and storage. We rely on the relevant Standard Contractual Clauses or comparable transfer mechanisms when required by GDPR.

For privacy questions, data export requests, or deletion requests, email info@brandmybags.com. We respond within five business days.