← Back to home

Privacy Policy

Last updated: 3 September 2026

Canvas Works Co. respects your privacy. This policy explains what personal information we collect, how we use it, and your rights.

1. Information We Collect

When you contact us or place an order, we collect:

• Your name and email address
• Delivery address (for physical orders only)
• Payment information (processed by Stripe — we do not store card details ourselves)
• Any photos, text, or personalization details you send us for your custom order

2. How We Use It

We use your information solely to:

• Communicate with you about your order
• Create your custom design
• Process payment via Stripe
• Arrange shipping via our print partner (physical orders only)
• Respond to support requests

We do not send marketing emails unless you explicitly opt in.

3. Third Parties We Share Data With

• Stripe: processes your payment. See Stripe's privacy policy.
• Printful (our print partner): receives your delivery address for physical orders. See Printful's privacy policy.
• Cloudflare: hosts our website and email infrastructure. See Cloudflare's privacy policy.

We do not sell or rent your personal information to any third party for any reason.

4. Data Retention

We keep order records for 7 years as required by Australian tax law. Custom design files are kept indefinitely so we can send replacements if needed. You can request deletion of your personal information at any time (see below).

5. Cookies

Our website uses minimal cookies for basic functionality (such as remembering your form input if you navigate away). We do not use tracking cookies or analytics cookies.

6. Your Rights

Under the Australian Privacy Act and relevant international privacy laws (GDPR, CCPA), you have the right to:

• Request a copy of the personal information we hold about you
• Request correction of any inaccurate information
• Request deletion of your personal information
• Withdraw consent for us to process your information

To exercise any of these rights, email [email protected].

7. Data Security

We take reasonable steps to protect your information. Our website uses HTTPS encryption, payment processing is handled by Stripe (PCI DSS certified), and we do not store card details ourselves.

8. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page shows when it was last changed. Continued use of our services after changes means you accept the updated policy.

9. Contact

Questions or requests about your privacy? Email [email protected].