Last updated: 7 October 2026. This policy is for Crombie Creative, an online shop that sells custom greeting cards and ships them. It is a practical template, not legal advice. Have a lawyer review it for your province, and replace every item in square brackets, before you publish it.
1. Who we are
Crombie Creative (“we”, “us”, “our”) operates https://thecrombiecreative.ca. We sell custom greeting cards and ship them to customers.
- Business name: Crombie Creative
We are responsible for personal information in our custody or control. This policy explains what we collect, why we collect it, who we share it with, and the choices you have.
2. The law that applies
We handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, substantially similar provincial privacy laws, including the laws of Alberta, British Columbia, and Quebec. If you live in a province with its own private-sector privacy law, that law may also apply to you.
We collect, use, and disclose personal information with your knowledge and consent, except where the law allows or requires us to do so without consent.
3. What we collect
We collect only what we need to sell, make, and ship custom cards, and to run the site.
Information you give us
- Name, email address, phone number, and billing and shipping addresses.
- Order details, including card wording, names, dates, photos, or other content you ask us to print. That content can include personal information about you and about other people, such as the recipient.
- Account login details, if you create an account.
- Messages you send us, including proof approvals, corrections, and support emails.
- Records of your consent, such as accepting these terms or opting in to email.
Payment information
Card payments are taken by Stripe or PayPal. We do not store your full card number on our servers. We receive a payment confirmation, the amount, and a partial card or account reference so we can match the payment to your order and handle refunds.
Information collected automatically
- Device and browser type, IP address, general location derived from IP, pages viewed, and referring site.
- Cookie and similar identifiers used to keep the cart working, remember preferences, measure traffic, and, if we use them, show relevant ads. See section 8.
We do not seek sensitive information such as health, religion, or government identifiers. Do not put that kind of information in card wording unless you intend for it to be printed.
4. Why we use it
We use personal information to:
- Take, produce, proof, pack, and ship your order, and send order and delivery messages.
- Take payment, issue refunds, and keep tax and accounting records.
- Answer questions and handle complaints, reprints, and lost-parcel claims.
- Prevent fraud and keep the site secure.
- Improve the site and understand which products are used, using aggregated or limited analytics where we can.
- Send marketing email only if you opt in, or where Canadian anti-spam law otherwise allows it. You can unsubscribe in every marketing email.
- Meet legal duties, such as tax record-keeping.
If you give us personal information about someone else, including a name or photo to print on a card, you confirm you have a lawful reason to give it to us and, where needed, their consent.
5. Who we share it with
We do not sell personal information. We share it only as needed to run the shop:
- Payment processor: [PAYMENT PROVIDER], to take payment and process refunds.
- Shipping carriers: [CARRIERS, for example Canada Post], so they can deliver the parcel. They receive the recipient name, address, and, if needed, a phone number or email for delivery notices.
- Production help: [PRINT PARTNER, or “none — we print in house”]. A printer receives the artwork and order details needed to make the card. They do not receive your payment card details.
- Site and email tools: our host, store platform, and email provider ([NAME THEM, for example WordPress, WooCommerce, and your email host]), who process data on our instructions to run the site and send messages.
- Professional advisers: accountants or lawyers, where needed and under a duty of confidence.
- Authorities: if the law requires it, or to protect our rights, customers, or the site from fraud or harm.
If we sell the business, customer records needed to continue orders may transfer to the buyer, who will be bound by this policy or will tell you about a new one.
6. Where information is stored
We are in Canada. Some providers we use may store or access information in Canada, the United States, or another country. Those countries may not offer the same privacy protections as Canada. Where a provider is outside Canada, we use a contract that requires them to protect the information and use it only for the service they provide to us.
By ordering from us, you understand that your information may be processed outside your province, including outside Canada, for payment, hosting, email, or shipping.
7. How long we keep it
We keep personal information only as long as we need it for the purpose it was collected, and then for any longer period the law requires.
- Order, invoice, and tax records: at least [6] years after the order, to meet Canadian tax record rules.
- Artwork and proofs: for the production record and any reprint window, then deleted or archived with access limited, unless you ask us to keep a design for a reorder.
- Support emails: for as long as needed to resolve the issue and for a reasonable period after, in case the same issue returns.
- Marketing contacts: until you unsubscribe or we stop using that list.
When we no longer need information, we delete it, anonymise it, or securely destroy it.
8. Cookies
Cookies are small text files stored on your device. We use:
- Essential cookies so the cart, checkout, and login work. The site does not work properly without these.
- Analytics cookies, if enabled, to see how the site is used. We use [ANALYTICS TOOL, or “none”].
- Marketing cookies, only if we run ads. We use [AD TOOL, or “none”].
You can block or delete cookies in your browser. Blocking essential cookies may stop checkout from working. If we add a cookie banner, your choices there control non-essential cookies.
9. Your choices and rights
Subject to limited exceptions in privacy law, you can ask us to:
- Confirm whether we hold personal information about you, and give you access to it.
- Correct information that is inaccurate or incomplete.
- Withdraw consent to optional uses, such as marketing. Withdrawal does not undo processing that already happened, and we may still need order information to finish or record a purchase.
- Delete information we no longer need, where the law allows it.
Email [EMAIL] with your request and enough detail for us to find the order. We may need to confirm it is you before we release information. We aim to reply within 30 days.
You may also complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or to your provincial privacy commissioner if one has authority over the matter.
10. Children
The site is for adults placing orders. We do not knowingly collect account or payment information from anyone under the age of majority. Card wording may name a child, for example on a birthday card. That information is used only to produce the card.
11. Security
We use reasonable administrative, technical, and physical safeguards, including HTTPS on the site, limited access to order files, and a payment processor that handles card data. No method of storage or transmission is completely secure. Please use a strong, unique password if you create an account.
12. Links
The site may link to carriers, payment pages, or social networks. Their privacy practices are their own. Read their policies before you give them information.
13. Changes
We may update this policy. The “last updated” date will change, and the new version will be posted at https://thecrombiecreative.ca/privacy-policy. If a change is material, we will also give a notice on the site or by email where that is reasonable.
14. Contact
Questions or requests about your personal information: Crombie Creative, [ADDRESS], [EMAIL]. Website: https://thecrombiecreative.ca.
