Privacy policy

What we collect

• Your order. What you configured, the price, and the artwork you uploaded.
• Contact and delivery details. Name, email address, shipping address, and a phone number if the carrier needs one.
• Correspondence. Proof approvals, change requests and emails about your order.
• Technical data. Ordinary web server logs, and the IP address recorded against an artwork upload so that abuse of the uploader can be traced.

We do not run advertising trackers and we do not sell or rent your information to anybody.

Payment information

We never see your card number. Payments are processed by Stripe, and card details go directly to Stripe rather than through this site. We receive confirmation that a payment succeeded, the amount, and the last four digits and card brand for reconciliation. Stripe handles that data under its own privacy policy.

Your artwork

Uploaded artwork is stored so we can print your order, send you a proof, and reprint it if there is a problem or you reorder the same design.

TODO decide how long artwork files are kept after an order completes, and state that period here — a common choice is two years so that reorders work, after which files are deleted

You can ask us to delete your artwork at any time. If an order is in production we will delete it once that order ships.

Who else handles your data

We use a small number of service providers, and only to run the shop:

• Cloudflare — hosting, the database, artwork storage, and the bot check that protects the uploader from automated abuse.
• Stripe — payment processing.
• TODO list the shipping-rate/label provider and the email provider once they are live, and confirm where each one stores data

Some of these providers process data outside Canada, which means it may be subject to the laws of the country it is processed in.

Cookies

This site uses only what it needs to work: a cookie that keeps you signed in to your order page, and Cloudflare's bot check on the upload form. There are no advertising or analytics cookies, which is why you are not being asked to dismiss a banner.

How long we keep things

Order and transaction records are kept as long as Canadian tax and business record keeping requires. Artwork is kept for the period above. Correspondence is kept while it is useful for supporting your orders.

Your rights

Under Canadian privacy law (PIPEDA, and any provincial law that applies to you) you can ask what personal information we hold about you, ask us to correct it, ask us to delete it where we are not required to keep it, and withdraw consent for anything that is not needed to fulfil an order you have placed.

TODO insert the privacy contact address, and name whoever is responsible for privacy at the business

If you are not satisfied with our answer you may complain to the Office of the Privacy Commissioner of Canada.