At canvasnido, we take the privacy of our visitors and customers seriously. This Privacy Policy outlines how your personal data is collected, used, processed, and stored when you visit or make a purchase from www.canvasnido.com (the “Site”).
This Site serves customers exclusively within the European territory.
1. Data Controller
For the purposes of the General Data Protection Regulation (GDPR) and applicable European data protection legislation, the sole Data Controller of your personal data is:
Brand Name: canvasnido
Official Website: www.canvasnido.com
Primary Contact Email: tissue@canvasnido.com
If you have any questions about this Privacy Policy or our data practices, please contact us at the email address listed above.
2. Personal Data We Collect
When you interact with our Site, we collect certain personal information necessary to fulfil your orders and improve your browsing experience:
Order Information: When you make a purchase, we collect information including your name, billing address, shipping address, email address, and telephone number. This data is processed on the lawful basis of contract performance.
Device Information: When you browse the Site, we automatically collect details about your web browser, IP address, time zone, and cookies installed on your device. This data is processed on the basis of our legitimate business interests to optimise our web experience.
3. Sharing Your Personal Data
We share your personal data with third-party service providers who assist us in operating our business and delivering our products to you:
Payment Processing: All financial transactions on our Site are processed securely through Stripe, our third-party payment processing partner. When you complete a purchase, your payment details (such as credit card numbers) are transmitted directly to Stripe. We do not store or have direct access to your full payment card details. Stripe processes this information in compliance with its own privacy regulations and strict industry data standards.
Logistics & Couriers: Your name, delivery address, and contact details are shared with our regional delivery partners solely to facilitate the delivery of your purchased items.
4. Data Retention Periods
In compliance with European laws, we do not retain your personal data for longer than is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, tax, or regulatory requirements:
Transaction and Order Data: We retain customer transaction records for a standard period of 7 years following the date of purchase, in accordance with EU tax and financial record-keeping laws.
Customer Enquiries: General communications, questions, or correspondence sent to tissue@canvasnido.com are retained for up to 2 years after the resolution of the query to ensure continuity of service.
Analytics and Usage Data: Automatically collected device and visitor information is retained for up to 14 months before being automatically deleted or anonymised.
5. Your Rights Under European Law
Under the GDPR, European residents possess specific rights regarding their personal data:
Right of Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You may request that we correct any inaccurate or incomplete personal information.
Right to Erasure (Right to be Forgotten): You may request that we delete your personal data, subject to certain exceptions where we are legally required to retain it.
Right to Restrict or Object: You may object to or request the restriction of our processing of your personal data under certain circumstances.
To exercise any of these rights, please contact us directly at tissue@canvasnido.com. We will process your request in accordance with our legal obligations under European regulations.
6. Security of Your Information
We employ industry-standard administrative and physical measures appropriate to the nature of the data collected to protect your information against unauthorised access, alteration, disclosure, or destruction. While we take appropriate measures to protect your personal data, no electronic transmission or storage system can be categorized as entirely immune to risk.
7. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our operational practices or for legal and regulatory reasons. The date at the top of this policy will indicate when it was last updated.