Shopping for your family? Save 10% on 3+ items, or 15% on 10+.

Blessedly HeldShopLight a Candle

Privacy Policy

Effective date: October 31, 2026

Updated October 31, 2026: We now use the Meta Pixel on our home, shop, Brand Merch and Grand Opening pages, but only if you say yes in “Cookie choices”. It never runs on our care, support or resources pages. See “Cookies” for details.

We started an email list. See section 4.

We know you may come here on a hard day. 🤍 We want you to feel safe here. This page tells you, in plain words, what we keep and why.

Who we are

  • Blessedly Held LLC (“Blessedly Held,” “we,” “us”)
  • Mailing address: 7901 4th St N, STE 300, St. Petersburg, FL 33702
  • Email: blessedlyheld@gmail.com
  • Blessedly Held is a for-profit business, not a charity. Purchases are not tax-deductible.

The short version

  • We don’t sell your personal information for money. We share visit, sign-up and purchase-total signals with Meta for advertising only if you say yes in “Cookie choices”, and never anything from our care, support or resources pages.
  • Remembrance stars are public unless you choose to keep yours private.
  • Private stars are download-only. Their names and words never leave your device, and we don’t save them.
  • We don’t ask for your email on the star form or the prayer form.
  • You can ask us to see, fix, or delete your information.
  • You choose if you join our email list, and you can leave anytime.

What we collect, and why

1. Remembrance stars

Public stars (the usual choice)

  • What we keep: your first name, your baby’s name, the date and message if you add them, the candle color, the time, and a record of when you agreed to our notice (the date and time, and which version of the notice you saw).
  • We don’t keep: your email or your IP address. They are never stored with your star.
  • Why: to show your star in our public Remembrance Sky, and to show you said yes.
  • Who sees it: everyone who visits our website. Anyone can see your public star: the first names, date and message you add. Please use first names only.
  • Your yes: you choose a public star when you leave “Keep my star private” unticked and press “Light my star in the public sky.”
  • Some names are checked by a person before they show.
  • Private stars (download-only): if you tick “Keep my star private,” your star’s names, date, message and candle color never leave your device. We don’t receive or save them. Your star card is made on your own phone or computer, and you download it as a picture or a PDF. We can’t see it, and if you close the page first, it can’t be recovered.

Remove a public star

  • Email blessedlyheld@gmail.com with your baby’s name and the date you lit the candle.
  • We’ll remove the star and its consent record within 30 days, usually much sooner.

Please don’t share health details

  • Share only what you’re comfortable with. Please don’t include health or medical details in your message.

2. Prayer requests

  • What: your first name (or “Anonymous”), your request, the date, and how many people prayed.
  • Why: so others can pray with you.
  • Who sees it: everyone, after a person reads it. You tick a box to say yes before you share.
  • We don’t ask for your email here.
  • Remove a prayer: email us with your first name, the date, and a few words from your request. We’ll remove it within 30 days, usually much sooner.

3. Contact form

  • What: your name, your email, and your message.
  • Why: only to reply to you.
  • How it works: when you press Send, your message is emailed to blessedlyheld@gmail.com. It passes through our web host (Namecheap) and Google (Gmail), who handle it for us.
  • Our website keeps a copy of the email your message creates in our email log. It’s deleted automatically after 30 days.
  • How long: messages stay in our Gmail inbox for 2 years, then we delete them.
  • Please share only what you’re comfortable with. You don’t need to include health or medical details.
  • You can also email us from your own email app.

4. Emails from us

  • Order emails: our store (WooCommerce) sends emails about your order, like your receipt and shipping updates. They’re part of your purchase.
  • Free guide emails: if you ask us to email you one of our free guides (like our church packet or our guide for family and friends), we use your name, your email, and your church if you add it, only to send you that one email. We don’t add you to any list, and we never sell your details or share them for advertising. Our website keeps a copy of that email in our email log for 30 days, then deletes it automatically.
  • Our email list (newsletter): you can choose to join our email list.
    • What we keep: your email address and a record of your yes: when you signed up (and confirmed, if you used our newsletter form), which form you used, the words next to the box, and your language. It also includes the IP address you used to sign up (and to confirm, if you used our newsletter form).
    • Why: to send occasional emails with news and new designs.
    • Your yes: tick the box on our newsletter form or our Grand Opening form. It’s never ticked for you. On the newsletter form, we then send you one email with a link, and you’re only on our list after you click it. On the Grand Opening form, ticking the box adds you right away. Asking for a Grand Opening code without ticking the box doesn’t add you. Buying something or asking for a free guide doesn’t add you to our list either. You can unsubscribe anytime with the link in any of our emails.
    • How it works: we use MailPoet, a plugin on our own website. Your details are kept in our website’s database. Our emails are sent from our own email address through our web host, Namecheap.
    • Opens and clicks: our emails use a small image and tracked links. They tell us if you opened an email and which links you clicked. This is tied to your email address, along with the type of email app or device used. We use this to see what you like and to stop emailing people who never open. We keep it while you’re on our list. If you unsubscribe, we delete it. To avoid it, block images in your email app, use the “Stop tracking” link at the bottom of our emails, or unsubscribe.
    • Stop anytime: every newsletter has an “Unsubscribe” link. You can also email blessedlyheld@gmail.com. It’s free, and we stop within 10 business days, usually much sooner.
    • Grand Opening code: if you ask for our Grand Opening code, we keep your email to send you the code and to track one use per email. We only send you news if you tick the box, and you can unsubscribe anytime. We delete code-only emails by December 1, 2026.

5. Orders

  • What: your name, email, billing and shipping address, your phone number if you choose to give it, what you bought, and your order history.
  • Why: to take payment, make and ship your order, send order and shipping emails, and help if something goes wrong.
  • Membership: Memberships are not available yet. If we offer them in the future, we’ll update this policy first.

Technical information

  • Spam checks: apart from email list sign-ups (see section 4), our site doesn’t save your IP address. To stop spam, it keeps a scrambled (hashed) version for a short time, then deletes it automatically: 10 minutes for public stars and prayers, 1 hour for the contact form, and 1 day for “I prayed” taps and reports. A private star isn’t sent to us, so there’s nothing to check.
  • Our web host and Cloudflare may keep short technical logs that include IP addresses.
  • Visit counts: Cloudflare Web Analytics tells us how many people visit each page and how fast our pages load. Cloudflare says it doesn’t use cookies to do this. It never gets the names or words from your star, prayer or message.
  • No Google Analytics: we don’t use Google Analytics. If we turn on another analytics tool, we’ll update this policy first.
  • Microphone (candle): our candle may ask to use your microphone. The sound stays on your device. We don’t record it or upload it.
  • Haven, our helper: Haven is a simple guide. It doesn’t save what you tap. Haven remembers on your device whether you’ve seen or closed it. Nothing is sent to us.

Cookies

Cookies are small files your browser keeps. We use cookies the site needs. If you say yes in “Cookie choices”, we also use a Meta (Facebook) advertising cookie. If you say no, or don’t choose, it never loads.

  • Cart: woocommerce_cart_hash and woocommerce_items_in_cart (end when you close your browser), and wp_woocommerce_session_ (2 days, or 7 days if you’re signed in to your account). They start when you add something to your cart, and they remember it.
  • Payments: Stripe’s __stripe_mid (1 year), __stripe_sid (30 minutes), and m on stripe.com (about 13 months). They help stop fraud.
  • Security cookie: Cloudflare may set a cookie (cf_clearance) if it checks that you’re a real person, to protect the site from bots.
  • On your device (not cookies):
    • If your public star is waiting for review, your browser keeps a note of it on your device for up to 30 days so you can see it’s pending. We can’t see this note. Clearing your browser data removes it.
  • Signing in: if you have an account, WordPress uses login cookies to keep you signed in.
  • You can clear cookies in your browser at any time.
  • Meta Pixel (only if you say yes): on our home, shop, Brand Merch and Grand Opening pages, Meta’s code tells Meta that someone visited, and on the Grand Opening page that someone signed up. It doesn’t send your email or your code. When you buy, our website tells Meta only the order total and currency, and only if you said yes. We never send Meta product names, your name, email, phone or address. Meta’s code never runs on product, cart or checkout pages, our care, support or resources pages, in Haven, or on star, prayer or message forms. Meta may connect this to your Facebook or Instagram account to measure our ads and show ads. Meta’s policy: https://www.facebook.com/privacy/policy. Change your choice anytime with “Cookie choices” at the bottom of every page.
  • _fbp (Meta): tells Meta it’s the same browser on later visits, to measure and show our ads. Set only after you say yes. Lasts up to 90 days.
  • _fbc (Meta): set only if you came from one of our Facebook or Instagram ads, to tell Meta the ad worked. Set only after you say yes. Lasts up to 90 days.
  • bh_mp_consent (ours): remembers your yes or no in “Cookie choices” so we don’t ask again. Set when you choose, yes or no. Lasts 180 days.
  • bh_mp_rid (ours): a random ID, not your name, that links your choice to our consent record. If you buy after saying yes, we save it with your order to show you agreed. Set when you choose, or when your browser sends Global Privacy Control. Lasts 180 days.
  • We keep a record of your cookie choice (a random ID, your choice and the date, with no name, email or IP address) for 13 months, so we can show we respected it. Then it’s deleted.

“Do Not Track”

Some browsers send a “Do Not Track” signal. We don’t let ad companies track you here unless you say yes in “Cookie choices”. If your browser sends Global Privacy Control, we treat it as a no.

Other companies that may see your activity

  • Stripe uses cookies and device details to stop fraud. Stripe may recognize the same device on other stores that use Stripe. See https://stripe.com/privacy
  • Cloudflare protects our site from attacks and bots.
  • Meta (Facebook) collects information only on our home, shop, Brand Merch and Grand Opening pages, and only if you say yes in “Cookie choices”.

Tracking across other sites

  • No other company collects your health data across websites through our site.
  • Meta’s code never runs on pages about loss, infertility, care or support.

Who we share it with

  • Public stars and prayers show on our website for everyone.
  • Private stars: their names and words never leave your device, so we can’t share them.
  • Service providers help us run the shop. They may use your information only to help us, not for their own ads:
    • Namecheap hosts our website and handles contact-form email on the way to us.
    • Cloudflare protects our site.
    • WooCommerce (software on our own site) runs our store.
    • Stripe handles card payments. We never see or store your full card number.
    • Printful makes and ships your order. It gets your name, shipping address, what you ordered, your email (for tracking updates) and your phone number if you gave one.
    • Google (Gmail) holds our email inbox.
    • MailPoet, a plugin on our own website, runs our email list. Your details stay in our website’s database.
  • Meta Platforms (advertising cookie, only with your yes).
  • When the law requires it: we may share information if the law requires it, like a valid court order, or if someone’s safety is at risk.
  • We don’t sell your information for money. If you say yes in “Cookie choices”, we share visit, sign-up and purchase-total signals with Meta for advertising. Some state privacy laws call this a “sale” or “sharing” for targeted ads. You can say no anytime in “Cookie choices”, and we treat Global Privacy Control as a no.

How long we keep it

  • Public stars and their consent record: until you ask us to remove them.
  • Private stars: download-only. Never sent to us, so never kept.
  • Prayers: until you ask us to remove them.
  • Stars and prayers waiting for review, or reported, are kept until we review them. We delete the ones we hide or don’t approve within 30 days.
  • Contact messages: 2 years, then deleted, in our Gmail inbox.
  • Email log: our website keeps a copy of the emails it sends (like order emails and replies to forms) for 30 days, then deletes them automatically.
  • Email list: while you’re on our list. If you unsubscribe, we stop emailing you and keep only a short note: your email, the date you unsubscribed, and the record of your yes. This makes sure we don’t email you again, and shows we had your yes. We delete the record of your yes 3 years after you unsubscribe. We keep your email and unsubscribe date on our “do not email” list for as long as we have an email list. Sign-ups that are never confirmed are deleted after 30 days.
  • Orders: 7 years, for tax and accounting records.
  • Backups: if your information is in a backup, it’s deleted from the backup within 6 months.

Children

  • Our site is for adults. Some of our shirts and gifts are made for kids, but they’re bought by grown-ups.
  • You must be 13 or older to light a candle, share a prayer, or send us a message.
  • We don’t knowingly collect personal information from children under 13. If we learn we have, we delete it.
  • Parents: if you think your child shared something here, email blessedlyheld@gmail.com and we’ll remove it.

Your choices and rights

You can ask us to:

  • tell you what we have about you, and who we shared it with;
  • fix it if it’s wrong;
  • stop using it (take back your yes);
  • delete it.
  • Leave our email list: use the “Unsubscribe” link in any newsletter, or email blessedlyheld@gmail.com. If you also want your sign-up record deleted, just ask. We’ll keep only your email on our “do not email” list, so we never email you by mistake.

Fixing a mistake: if something in your public star is wrong, email us and we’ll fix it.

How to ask: email blessedlyheld@gmail.com. For a star, include your baby’s name and the date you lit the candle.

How long it takes: we’ll answer within 30 days. If we need more time, we’ll tell you why. For health information, see our Consumer Health Data Privacy Policy.

Keeping it safe

We use secure connections (HTTPS), limit who can see your information, and keep our software updated. If a breach could harm you, we’ll tell you.

Visitors from Canada and Mexico

Privacy contact (for everyone, including Canada and Mexico): Blessedly Held LLC is responsible for your information. Its owner is the person designated to handle all privacy requests. Email blessedlyheld@gmail.com, or write to Blessedly Held LLC, 7901 4th St N, STE 300, St. Petersburg, FL 33702, USA.

Where your information goes: we are a U.S. business. Your information is stored and handled in the United States by us and by the service providers listed above (for example Namecheap, Cloudflare, Stripe, Printful, Google, and MailPoet). They may use it only to help us, for the reasons on this page. While it is outside your country, it may be accessed by the courts, police and national security authorities of that country.

  • Canada: You can ask to see the information we have about you, where it came from, how we used it and who we shared it with. You can ask us to fix it, and you can take back your yes for things like a public star. We’ll answer within 30 days. If we need more time, we’ll tell you why within those 30 days. It’s free. If you’re not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca/en/report-a-concern/
  • Mexico: our Spanish privacy notice (aviso de privacidad) is at /es/privacy-policy/. You can ask to see, fix or delete your information, or object to how we use it (your ARCO rights). Email us with your name, how to reach you, what you want us to do, and anything that helps us find your information. We may ask you to confirm it’s you. We’ll answer within 20 business days. If we say yes, we’ll do it within 15 business days after that. If needed, we may take one more period of the same length, and we’ll tell you why. It’s free. If you’re not satisfied with our answer, or if we don’t answer in time, you can go to the Secretaría Anticorrupción y Buen Gobierno.

Health information

Some things you share may say something about your health, like a pregnancy loss or infertility. We treat this with special care. Please read our Consumer Health Data Privacy Policy.

Changes

If we make a big change, we’ll update the date at the top and post a short note on this page for 30 days. If you have an account, we’ll also email you before the change starts.

Contact

Blessedly Held LLC · 7901 4th St N, STE 300, St. Petersburg, FL 33702 · blessedlyheld@gmail.com