Privacy Policy

This Privacy Policy explains how we collect, use, and protect your personal information when you use our website, applications, or services. We are committed to protecting your privacy and handling your information in compliance with applicable laws in Canada (including the Personal Information Protection and Electronic Documents Act (PIPEDA), provincial laws, and proposed Consumer Privacy Protection Act (CPPA)) and the United States (including the Children’s Online Privacy Protection Act (COPPA), CAN-SPAM Act, and applicable state privacy laws such as the California Consumer Privacy Act (CCPA), where applicable).

By accessing or using our website, you consent to the practices described in this Privacy Policy.

Information We Collect

When you interact with our site (e.g., registering, making a purchase, subscribing, or contacting us), we may collect:

Personal Identifiers: name, email address, phone number, mailing address.
Payment Information: credit card or billing details (processed securely by third-party providers; we do not store this information).
Account Information: username, login credentials (stored securely).
Usage Information: browsing activity, device details, IP address, cookies, and analytics data.
Communications: customer service inquiries, survey responses, reviews, or correspondence.

How We Use Your Information

We use your information to:

Provide, personalize, and improve our products, services, and website experience.
Process transactions securely and deliver purchased products/services.
Respond to customer service inquiries.
Administer promotions, surveys, or contests.
Send newsletters, updates, and marketing communications (with your consent, where required by law).
Maintain security, detect fraud, and comply with legal obligations.

How We Protect Your Information

We implement technical, organizational, and physical safeguards to protect your information, including:

Encrypted transmission of sensitive data (HTTPS/TLS).
Encryption of stored data (AES-256).
Access controls and authentication requirements.
Continuous monitoring, malware scanning, and intrusion prevention.
Compliance with recognized security standards (e.g., PCI DSS, ISO 27001).

All transactions are processed through a secure third-party payment gateway.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

Remember items in your shopping cart.
Store your preferences for future visits.
Measure site traffic and performance.
Deliver relevant advertisements (including Google Ads/Analytics).

You can manage or disable cookies through your browser settings. Please note that some site features may not function properly if cookies are disabled.

Third-Party Disclosure

We do not sell or rent your Personally Identifiable Information. We may share information with:

Service Providers who assist us in operating our website and delivering services (under strict confidentiality obligations).
Legal Authorities when required to comply with law, enforce policies, or protect safety.
Advertising/Analytics Providers (in aggregate or anonymized form).

Linked third-party websites or services have independent privacy practices. We encourage you to review their policies.

Advertising and Analytics (Google and Others)

We may use:

Google AdSense & Remarketing.
Google Analytics Demographics and Interests reporting.
Other third-party identifiers and tracking tools.

You can manage Google ad preferences at Google Ad Settings or opt out via the Network Advertising Initiative.

Your Privacy Rights

Depending on where you live, you may have specific privacy rights:

Canada (PIPEDA/Provincial Laws): You have the right to access, correct, and withdraw consent for the use of your personal information.
California (CCPA/CPRA): California residents may request disclosure of collected personal data, request deletion, and opt out of the “sale” or “sharing” of personal information.
Other U.S. States: Similar rights may apply under state privacy laws.
Children (COPPA / Canadian law): We do not knowingly collect or market to children under 13. If we become aware of such collection, we will delete the information.

You may exercise these rights by contacting us (see “Contacting Us” below).

Data Breach Response

If a data breach occurs:

We will notify affected individuals by email within 7 business days (or as required by law).
We will notify regulators when required under applicable Canadian or U.S. privacy laws.

Email Communications (CAN-SPAM Compliance)

We collect your email address to:

Send order confirmations and updates.
Respond to inquiries and support requests.
Provide newsletters, promotions, and service updates.

To comply with CAN-SPAM, we:

Do not use false or misleading email headers or subject lines.
Clearly identify promotional messages.
Provide our business mailing address.
Allow you to unsubscribe easily (link in every marketing email).
Honor opt-out requests promptly.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised effective date.

Contacting Us

If you have any questions or requests regarding this Privacy Policy or your personal information, you may contact us at:

[Your Business Name]
[Your Business Address]
[Your Business Email Address]
[Your Business Phone Number]

👉 Would you like me to also add a short “Summary for Quick Reading” section at the top (like many North American companies do) so users see the key points at a glance before the legal detail?

You said:

more detail

ChatGPT said:

Perfect — if you’d like a version that’s more detailed, legally aware, and comprehensive (like what large North American companies publish), I can expand each section and weave in more explicit references to Canadian (PIPEDA, CPPA, provincial laws) and U.S. (CCPA/CPRA, COPPA, CAN-SPAM, state privacy laws) frameworks.

Here’s a fully detailed revision:

Privacy Policy

Effective Date: [Insert Date]

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information about you when you use our website, applications, and services (collectively, the “Services”).

This policy has been drafted to meet requirements under:

Canadian law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), provincial private-sector laws (e.g., Alberta PIPA, British Columbia PIPA, Quebec Law 25), and upcoming legislation such as the Consumer Privacy Protection Act (CPPA).
United States law, including the California Consumer Privacy Act (CCPA/CPRA), Children’s Online Privacy Protection Act (COPPA), CAN-SPAM Act, and other state-level privacy frameworks.

By using our Services, you consent to the practices outlined in this Privacy Policy.

1. Information We Collect

We may collect the following categories of information:

a) Identifiers

Name, mailing address, phone number, email address, account username.

b) Payment & Transaction Information

Billing address, payment details (credit/debit card information).
Note: Payment details are processed by trusted third-party providers. We do not store complete credit card numbers on our servers.

c) Technical & Usage Information

Device information, IP address, browser type, operating system.
Site usage data (pages visited, clicks, time spent).
Cookies, pixels, and other tracking technologies.

d) Communications & Preferences

Customer service interactions (emails, chats, calls).
Survey responses, product reviews, marketing preferences.

e) Sensitive or Special Information

We do not intentionally collect “sensitive” personal information (e.g., health data, race/ethnicity) unless explicitly provided by you and required for a specific service.

2. How We Use Your Information

We use your information to:

Deliver Services: process transactions, fulfill orders, manage accounts.
Improve User Experience: personalize content, optimize website functionality.
Customer Support: respond to inquiries, handle returns, resolve disputes.
Marketing & Communications: send newsletters, promotions, and updates (with your consent where required).
Analytics & Research: measure site traffic, identify trends, enhance security.
Legal & Compliance: meet regulatory requirements, detect fraud, enforce policies.

We will not use your personal information for purposes beyond those described here without your consent.

3. Legal Bases for Processing (Canada & U.S.)

Canada (PIPEDA/CPPA/Provincial laws): We collect, use, and disclose personal information with your knowledge and consent, except where otherwise permitted or required by law.
United States: Depending on state laws (e.g., CCPA in California), you may have additional rights, including opt-outs from “selling” or “sharing” personal information.

4. How We Protect Your Information

We use administrative, technical, and physical safeguards to protect your personal information:

Encrypted transmission (HTTPS/TLS).
Encryption at rest (AES-256).
Strong authentication and role-based access controls.
Firewalls, intrusion detection, and malware scanning.
Ongoing monitoring, penetration testing, and audits (e.g., PCI DSS, ISO 27001).

While no system is 100% secure, we continuously update our security practices to protect your information.

5. Cookies and Tracking

We use cookies and similar technologies to:

Remember shopping cart contents.
Store user preferences.
Provide personalized advertising (including Google Ads/Analytics).
Collect aggregate data for site analytics.

Your Choices:

You can set your browser to block or alert you about cookies.
You can opt out of Google Analytics by using the Google Analytics Opt-Out Add-on.

6. Disclosure of Information

We do not sell or rent your personal information. We may disclose information in the following circumstances:

Service Providers: Hosting, payment processing, analytics, customer support.
Business Transfers: In case of a merger, acquisition, or sale of assets.
Legal Compliance: When required to comply with laws, regulations, or court orders.
Protection of Rights: To enforce agreements, protect safety, and prevent fraud.

Non-identifiable data (aggregated or anonymized) may be shared for business or research purposes.

7. Advertising and Analytics

We may partner with Google, Meta, and other third-party ad networks. These partners use cookies and identifiers to deliver targeted ads based on your browsing history.

You may opt out of interest-based advertising by visiting:

Google Ad Settings
Digital Advertising Alliance (DAA) Opt-Out Tool

8. Your Privacy Rights

Canadian Residents

Under PIPEDA and provincial privacy laws, you have the right to:

Access and correct your personal information.
Withdraw consent at any time (subject to legal/contractual restrictions).
File a complaint with the Office of the Privacy Commissioner of Canada (OPC).

U.S. Residents

Your rights depend on your state of residence. For example, under the CCPA/CPRA (California):

Right to Know: What categories of personal data we collect, use, and disclose.
Right to Delete: Request deletion of your personal data (subject to exceptions).
Right to Opt-Out: Prevent the “sale” or “sharing” of personal data.
Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

To exercise your rights, contact us (see Section 12 below).

9. Children’s Privacy

Canada: Children’s information is treated as sensitive; stronger consent requirements apply.
U.S. (COPPA): We do not knowingly collect information from children under 13. If we become aware of such collection, we will delete it promptly.

10. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

11. Data Breach Notification

In the event of a data breach:

We will notify affected individuals within 7 business days (or sooner if required by law).
We will notify Canadian and/or U.S. regulatory authorities as required.

12. Email Communications (CAN-SPAM Compliance)

We may use your email to:

Send order updates and confirmations.
Respond to support requests.
Provide newsletters and promotions.

To comply with CAN-SPAM:

Emails will not use false or misleading headers.
Emails will clearly identify the sender and purpose.
Our business mailing address will be included.
You can unsubscribe at any time via a link in each email or by contacting us directly.

13. International Users

Our Services are primarily intended for Canadian and U.S. audiences. If you are accessing our Services from outside these regions, your information may be transferred and processed in Canada, the United States, or other jurisdictions where our service providers are located.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the updated effective date.

15. Contacting Us

If you have questions, requests, or complaints regarding this Privacy Policy, please contact us at:

The Art of Rhi

theartofrhi@gmail.com

You also have the right to file a complaint with:

Office of the Privacy Commissioner of Canada (OPC): https://www.priv.gc.ca/
U.S. Federal Trade Commission (FTC): https://www.ftc.gov/

State Privacy Regulators (if applicable).