Effective date: October 1, 2026

The Christmas Bridge (“we,” “us” or “our”) respects your privacy. This Privacy Policy explains what information we collect through www.thechristmasbridge.com, how we use it, when we share it and the choices available to you.

Information We Collect

Information You Provide

We may collect information you provide when you:

• Place or attempt to place an order
• Create or use a customer account
• Contact us for assistance
• Request a return, replacement or refund
• Enter an access code to begin the guided journey

This information may include:

• Name
• Billing and shipping address
• Email address
• Telephone number
• Account username and password
• Products ordered
• Order, shipping and transaction details
• Messages, photographs or other information you send to customer service

Payment Information

Payments are processed by third-party payment providers such as [Stripe, PayPal, WooPayments or other providers actually used].

We do not directly store complete credit-card numbers or card security codes. Payment providers receive and process the information needed to authorize payments, prevent fraud, issue refunds and comply with financial regulations. Their handling of information is governed by their own privacy policies.

Access-Code and Journey Information

When an access code is entered, our system may collect and maintain:

• The access code and its internal record number
• The number of times the code has been used
• The date and time of use
• A randomly generated device identifier
• Internet Protocol address
• Browser and device information, sometimes called a user agent
• The active access-code batch
• Security and administrative records related to code management

We use this information to validate access, maintain the permitted use limit, remember an authorized device, investigate misuse, provide customer support and protect the guided journey.

The system does not require a participant to provide a name, email address or written response while completing the guided journey unless a particular page clearly states otherwise.

Cookies and Similar Technologies

Our website uses cookies and similar technologies necessary to operate the store, shopping cart, checkout, customer accounts and protected journey.

These may include:

• A journey authorization cookie that remembers successful access for approximately 24 hours
• A device-identification cookie that may remain for approximately one year
• WooCommerce cookies that remember cart contents, checkout activity and customer sessions
• WordPress cookies used for account login and site administration
• Cookies used by payment providers for payment processing, security and fraud prevention

Some cookies are essential for the website to function. Blocking them may prevent the shopping cart, checkout, customer account or guided journey from working correctly.

If we add optional analytics or advertising technologies, we will update this policy and provide any consent choices required by applicable law.

How We Use Information

We use personal information to:

• Process and fulfill orders
• Collect payments and issue refunds
• Calculate taxes and shipping charges
• Deliver packages and send order updates
• Provide customer service
• Create and manage customer accounts
• Validate access codes and provide the guided journey
• Track code usage and enforce permitted-use limits
• Detect fraud, abuse and security incidents
• Maintain and improve the website
• Keep business, accounting and tax records
• Enforce our policies and legal rights
• Comply with applicable laws

How We Share Information

We may share information with service providers that help operate the business, including:

• Website and database hosting providers
• WordPress and WooCommerce service providers
• Payment processors
• Shipping carriers and fulfillment providers
• Email-delivery and customer-support providers
• Tax-calculation, accounting and fraud-prevention providers
• Professional advisers such as accountants, insurers and attorneys

These providers receive only the information reasonably needed to perform their services.

We may also disclose information when required by law or when reasonably necessary to protect customers, our business, the website or the rights and safety of others.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising based on our current website configuration. If our practices change, we will update this policy and provide any legally required choices.

Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this policy.

Order and transaction records may be retained for the period needed to fulfill orders, provide support, process returns, maintain tax and accounting records, resolve disputes and meet legal requirements.

Access-code records may be retained for the active life of the code. Code-usage and security records may be retained afterward when reasonably necessary to provide support, prevent misuse, resolve disputes or protect the service.

Customer accounts remain until they are deleted, anonymized or no longer reasonably needed. Some information may remain in backups for a limited period or may be retained when required by law.

Information Security

We use reasonable administrative, technical and organizational safeguards intended to protect personal information. However, no website, database or transmission over the internet can be guaranteed to be completely secure.

Customers are responsible for protecting their account credentials and access codes and should not publish or distribute them publicly.

Children’s Privacy

The store, checkout, customer accounts and access-code entry are intended for adults. Purchases and access to the guided journey should be initiated and supervised by a parent or legal guardian.

We do not ask children to create accounts, make purchases or submit names, email addresses, home addresses, photographs or other personal information through the guided journey.

If you believe a child has submitted personal information to us without appropriate parental involvement, contact us at [privacy email address] so we can review and, where appropriate, delete it.

Your Privacy Choices

Depending on where you live, you may have the right to request:

• Access to personal information we maintain about you
• Correction of inaccurate information
• Deletion or anonymization of eligible information
• A portable copy of certain information
• Restriction of or objection to certain uses
• Withdrawal of consent where processing relies on consent
• Information about categories of data collected and disclosed

Some records may be retained when necessary to complete a transaction, prevent fraud, maintain security, comply with tax or accounting obligations, establish legal claims or meet other legal requirements.

To submit a privacy request, contact [privacy email address]. We may need to verify your identity before completing a request.

Third-Party Websites and Services

The website may link to services operated by third parties. Their privacy practices are governed by their own policies, and we are not responsible for the privacy practices of websites or services we do not control.

International Processing

Our service providers may process information in locations outside your state, province or country. When required, appropriate protections will be used for these transfers.

Changes to This Policy

We may update this Privacy Policy as the business, website or legal requirements change. The revised version will be posted on this page with a new effective date.

Material changes may also be communicated through the website or by another appropriate method.

Contact Us

Questions or requests concerning privacy may be sent to:

[Legal business name]
Doing business as The Christmas Bridge
Email: [privacy email address]
Mailing address: [business mailing address]
Website: [website address]