Privacy Policy

This Privacy Policy explains how Art Shop ("we", "us", "our") collects, uses, discloses and protects personal information when you visit this website, place an order, or contact us. It's written to meet our obligations under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and comparable provincial privacy law.

By using this site, you consent to the collection and use of your information as described here. If you don't agree, please don't use the site, or contact us with questions before you do.

Information we collect

We collect information you give us directly, and a small amount automatically.

• Account and order information: name, email address, phone number, shipping address, and the products/quantities you order, when you check out or create an account.
• Contact form submissions: name, email address, phone number (optional), and whatever you write to us.
• Payment: our checkout is cash or card on delivery — we do not collect or store your card number on this site. Any card payment is handled directly between you and our delivery staff or courier's payment terminal.
• Technical information: IP address, browser type and pages visited, collected automatically in server logs for security and troubleshooting.
• Cookies: see "Cookies and similar technologies" below.

How we use your information

• To process and fulfill your orders, including in-person point-of-sale purchases.
• To respond to questions sent through the contact form or by phone/email.
• To create and manage your account, and remember your basket and language preference.
• To keep the site secure and to detect and prevent fraud or abuse.
• To meet legal, accounting and tax obligations (for example, keeping order records).
• To send you order-related communications (confirmations, shipping updates, order status).
• To send occasional marketing emails, only if you've opted in — you can withdraw that consent at any time (see "Marketing emails" below).

Cookies and similar technologies

This site currently sets only cookies that are strictly necessary to operate the store:

• Session cookie: keeps you signed in and remembers your basket between pages.
• CSRF cookie: a security token that protects forms (login, checkout, contact) from being submitted by another site on your behalf.
• Language cookie: remembers whether you chose English or French, set when you use the language switch in the header.

We don't currently run third-party analytics or advertising trackers. If that ever changes, we'll update this section and ask for your consent first where required, through a cookie banner or similar mechanism on your first visit.

Most browsers let you block or delete cookies. Blocking the essential cookies above will prevent checkout and account login from working correctly.

Marketing emails

Where we offer a newsletter or product-update sign-up, we only send marketing email to addresses that have expressly opted in, in line with Canada's Anti-Spam Legislation (CASL). Every marketing email includes a working unsubscribe link, and you can also ask us directly at any time to stop.

How we share your information

We do not sell your personal information. We share it only where necessary to run the business:

• With our email delivery and hosting providers, solely to send order/account emails and operate the site.
• With our internal team via a private notification channel when you submit the contact form, so we can respond promptly.
• With couriers or delivery partners, limited to what's needed to ship your order.
• If required by law, court order, or to protect our rights, property or safety, or that of others.

How long we keep your information

We keep order and account records for as long as needed to fulfill orders, meet tax/accounting requirements, and resolve disputes, and then delete or anonymize them. Contact form messages are kept only as long as needed to handle your inquiry.

Security

We use reasonable technical and organizational safeguards to protect your information, including encrypted connections (HTTPS) and access controls on our systems. No method of transmission or storage is completely secure, but we work to protect your information appropriately for its sensitivity.

Your rights

Under PIPEDA, you have the right to:

• Ask what personal information we hold about you and how it's used.
• Request access to, or a copy of, your personal information.
• Ask us to correct inaccurate or incomplete information.
• Withdraw consent for uses that depend on consent (such as marketing email), subject to legal or contractual limits.
• Ask us to delete your account and associated personal information, subject to our legal retention obligations.

To exercise any of these rights, contact us at hello@artshop.example.com. If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or your provincial privacy commissioner where applicable.

Children's privacy

This site is intended for business and adult consumer customers and is not directed at children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be reflected here; continued use of the site after a change means you accept the updated policy.

Contact us

Questions or concerns about this policy or your personal information can be sent to hello@artshop.example.com.

Art Shop — our registered business address is available on request via the contact details above.