Privacy policy

This policy applies to printdeck.ca and the services offered on it. “Personal information” means information about an identifiable individual.

Who is responsible

[LEGAL BUSINESS NAME], doing business as Printdeck, at [BUSINESS ADDRESS], is responsible for the personal information we hold. Our privacy contact is [PRIVACY OFFICER NAME], reachable at [PRIVACY EMAIL].

What we collect

• Account details: name, email address, phone number, and a securely hashed password.
• Order details: the items and options you configure, your fulfilment choice, billing/shipping address, any purchase-order or project notes, and order history.
• Artwork files you upload for printing.
• Agreement records: when you confirm you have the rights to your artwork, agree to our terms, approve a proof, or opt in to marketing, we record the time and your IP address, and for marketing the exact wording you agreed to. We keep these to show what was agreed.
• Payment information: card payments are processed by Stripe. We never see or store your full card number; we retain only the transaction result and a Stripe reference.
• Marketing: your email address and consent record if you subscribe to our emails.
• Technical data: server logs (IP address, timestamps, request paths) kept for security, fraud prevention, and debugging.
• Analytics and advertising data, only if you accept optional cookies: pages viewed, products and cart activity, and purchases, collected by Google Analytics and Meta (see Cookies below).

How we use it

• To price, produce, and deliver your orders.
• To send transactional email (order confirmations, proofs, and shipping updates) via our email provider, Google Workspace. These emails do not contain promotions.
• To create and secure your account, including rate limiting and abuse detection.
• To provide customer support and handle returns or reprints.
• To send marketing email only where you have opted in, or where the law lets us because you recently bought from us. Every marketing email has an unsubscribe link that works immediately.
• To measure and improve the site and our advertising, only if you accept optional cookies.
• To meet tax, accounting, and other legal obligations.

Who we share it with

We share the minimum personal information needed with providers who act on our instructions:

• Stripe: payment processing.
• UniUni: shipping label creation and parcel tracking (recipient name, address, and phone).
• Google Workspace (Gmail): delivery of transactional email.
• Sentry: error monitoring. If something breaks, it receives technical details such as your IP address and browser type.
• [HOSTING PROVIDER] and [DATABASE PROVIDER]: they host the site and store our data.
• Google (Analytics) and Meta (Pixel and Conversions API): analytics and advertising measurement, only if you accept optional cookies.

We do not sell your personal information. Some providers process or store data outside Canada, including in the United States, where it may be subject to the laws of that country and accessible to its authorities. If you live in Quebec, we assess the privacy risks of such transfers before we make them.

How long we keep it

• Uploaded artwork is deleted automatically 12 months after upload. Keep your own copy.
• Order and account records are kept while your account is active and afterwards for as long as needed for warranty, tax, and legal purposes (generally up to seven years for financial records).
• Agreement and marketing consent records are kept for as long as the related order or subscription exists, and afterwards for as long as we may need them to show what was agreed.
• Server logs are rotated on a rolling basis.

Cookies

We use one essential cookie to keep you signed in and another to remember your cookie choice. Your cart is kept in your browser’s storage. These do not need your consent.

We also use optional cookies and scripts from Google Analytics and Meta (the Meta Pixel, plus server-side events through the Meta Conversions API) to understand how the site is used and to measure advertising. We load them, and send those events, only after you choose “Accept” on our cookie banner. “Reject” is just as easy, and the site works the same either way. You can change your mind at any time using the “Cookie settings” link at the bottom of every page. We do not use session recording tools. Stripe and Cloudflare Turnstile may set their own cookies when you reach the payment or anti-bot steps.

Your rights

You may ask us to access, correct, or delete your personal information, or to withdraw your consent, including for marketing. Update your profile from your account or contact our privacy contact above. We respond within 30 days. We may keep some records we are legally required to keep, such as invoices.

If you live in Quebec, Law 25 also gives you the right to receive your personal information in a structured, commonly used format, and to ask how we made any decision about you that was based only on automated processing. We do not make decisions of that kind.

If you have an unresolved concern you may contact the Office of the Privacy Commissioner of Canada, or, if you live in Quebec, the Commission d’accès à l’information du Québec.

Security and breaches

Passwords are hashed with bcrypt, sessions use signed HTTP-only cookies, traffic is served over HTTPS, and access to production data is limited to staff who need it. No method of transmission or storage is perfectly secure. If a breach creates a real risk of significant harm to you, we will tell you and the Privacy Commissioner of Canada as the law requires.

Contact

Privacy questions or requests: [PRIVACY EMAIL], or use the contact form.

Last updated: 2026-10-12.