Privacy Policy

Art Source Home ("we," "our," or "us") is committed to protecting the personal information of our customers and Website visitors. This Privacy Policy explains how we collect, use, disclose, safeguard, and retain personal information in connection with our Website and e-commerce operations, in accordance with applicable privacy laws in Canada and the United States, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable U.S. state privacy laws.

Please read this Privacy Policy carefully. By accessing or using this Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use this Website.

1 Privacy Officer

Art Source Home has designated a Privacy Officer who is accountable for our compliance with this Privacy Policy and applicable privacy legislation. To contact our Privacy Officer, please email customerservice@artsourcehome.ca with the subject line "Privacy Request."

2 Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through this Website, including through forms, inquiries, account registration, purchases, email communications, and other electronic interactions with our services.

This Privacy Policy does not apply to information collected offline or by third parties operating websites or services that may be linked from our website.

3 Information We Collect

We collect the following categories of personal information:

3.1 Information You Provide Directly

• Identifiers: Name, email address, phone number, billing address, and shipping address, collected when you make a purchase, create an account, sign up for our newsletter, submit a contact form, or otherwise interact with us.
• Account Information: Username, password (stored in encrypted form), and account preferences, if you create a customer account.
• Order and Transaction Information: Products purchased, order history, payment method type (we do not store full payment card numbers), and purchase amounts.
• Communications: Messages, inquiries, and feedback submitted through contact forms, email, or other communications.
• Reviews and User-Generated Content: Product reviews, ratings, photographs, and testimonials submitted through the Website or through Judge.me.

3.2 Information Collected Automatically

• Device and Technical Data: IP address, browser type and version, operating system, device type, and device identifiers.
• Usage Data: Pages visited, time spent on pages, referring URLs, links clicked, and browsing and interaction data.
• Cookie and Tracking Data: Information collected through cookies, pixels, and similar tracking technologies, as described in Section 6.

3.3 Information Collected Through Third-Party Tools

We use third-party service providers to help operate our business and Website, including Shopify, Shopify Payments, Shop Pay, PayPal, Google Analytics, Google Ads, Meta Pixel, Hotjar, Judge.me, and Shopify Email. These service providers may collect, process, or store personal information on our behalf in accordance with their own privacy practices and contractual obligations.

3.4 Sensitive Personal Information

We do not intentionally collect sensitive personal information (such as health data, financial account credentials, or government identification numbers) beyond what is strictly necessary to process transactions. Payment information is processed by our payment processors and is not stored by us.

4 How We Use Personal Information

We collect and use personal information for the following purposes:

• To process and fulfil orders, including payment processing, shipping, and delivery;
• To create and manage customer accounts;
• To communicate with you regarding your orders, inquiries, and customer service requests;
• To send marketing communications, including newsletters, promotional offers, and product updates, where you have provided consent or where permitted by applicable law;
• To send transactional communications, including order confirmations, shipping notifications, and return updates;
• To send abandoned cart reminders where you have initiated a purchase and provided an email address;
• To operate, improve, and personalize our website and shopping experience;
• To analyze Website traffic and user behaviour through analytics tools;
• To deliver targeted advertising on third-party platforms, including Meta (Facebook/Instagram) and Google, based on your interactions with our website;
• To manage and display product reviews and user-generated content;
• To detect and prevent fraud, unauthorized activity, and security incidents;
• To comply with legal obligations, resolve disputes, and enforce our agreements; and
• For other purposes with your consent or as permitted by applicable law.

5 Legal Bases for Processing

We collect, use, and disclose personal information with your consent or as otherwise permitted or required by applicable law, including where necessary to provide products and services, process transactions, communicate with customers, prevent fraud, or comply with legal obligations.

6 Cookies and Tracking Technologies

We use cookies, pixels, analytics tools, and similar technologies to operate the Website, understand how visitors use our website, improve user experience, and support marketing and advertising activities. Most web browsers allow you to manage or disable cookies through your browser settings; however, doing so may affect certain Website functionality.

7 Targeted Advertising

We may use advertising and analytics partners, including Google and Meta, to help us measure advertising performance and display advertisements that may be relevant to your interests. These partners may use cookies, pixels, and similar technologies to collect information about your interactions with our website and advertisements. You may be able to manage advertising preferences through your browser settings or the applicable platform privacy controls.

8 Disclosure of Personal Information

We do not sell personal information. We may disclose personal information to the following categories of third parties for the purposes described in this Privacy Policy:

• E-Commerce Platform: Shopify (including Shopify Payments and Shop Pay), to operate our online store, process payments, and manage orders.
• Payment Processors: Shopify Payments, Shop Pay, PayPal, and other payment processors, to facilitate secure payment transactions.
• Shipping and Logistics Providers: Carriers and fulfilment partners, to ship and deliver your orders.
• Analytics Providers: Google Analytics and Hotjar, to analyze Website usage and performance.
• Advertising Platforms: Meta (Facebook/Instagram) and Google Ads, to deliver and measure targeted advertising campaigns.
• Email Marketing: Shopify Email, to send transactional and marketing communications.
• Reviews Platform: Judge.me, to collect and display product reviews and user-generated content.
• Legal and Regulatory Authorities: Where required or permitted by applicable law, including in response to lawful requests, court orders, or to protect our rights.

All third-party service providers with whom we share personal information are required to protect that information in accordance with applicable privacy laws and our contractual requirements. We take reasonable steps to ensure that service providers use personal information only for the purposes for which it was shared. We may engage additional service providers from time to time to support our operations, including logistics, customer communications, technology infrastructure, fraud prevention, customer support, analytics, and marketing. We will update this Privacy Policy to reflect the engagement of new service providers where doing so is required by applicable law.

9 Cross-Border Data Transfers

Art Source Home is based in Ontario, Canada. Personal information collected through this Website may be transferred to, processed, and stored in countries other than Canada, including the United States, where our third-party service providers (including Shopify, Google, Meta, PayPal, Hotjar, and Judge.me) operate their systems and infrastructure.

These jurisdictions may have privacy laws that differ from those applicable in Canada or your province of residence. Under Quebec Law 25, before disclosing personal information outside Quebec, we are required to conduct a privacy impact assessment to ensure that the information will receive protection equivalent to that required under Quebec law. We take reasonable contractual and organizational steps to ensure that personal information transferred to third-party service providers in other jurisdictions is protected to a standard consistent with the principles of this Privacy Policy and applicable Canadian privacy law. Where we rely on standard contractual or data processing agreements with our service providers, we take steps to confirm that those providers have implemented appropriate safeguards. A list of the countries to which we transfer personal information, and a summary of the protections in place, is available upon request from our Privacy Officer. Personal information processed outside Quebec or Canada may be subject to the laws of the jurisdiction in which it is processed or stored and may be accessible to courts, law enforcement agencies, regulatory authorities, or other governmental bodies in those jurisdictions.

10 Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce our agreements, and maintain appropriate business records. When personal information is no longer required, we take reasonable steps to securely delete, destroy, or anonymize it.

11 Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures include encrypted data transmission (SSL/TLS), secure access controls, and use of PCI-DSS compliant payment processors.

No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

12 Your Privacy Rights

Depending on your jurisdiction of residence and applicable law, you may have the right to:

• Access personal information we hold about you;
• Request correction of inaccurate personal information;
• Request deletion of personal information, subject to legal exceptions;
• Withdraw consent where processing is based on consent;
• Opt out of marketing communications;
• Request information regarding certain advertising-related disclosures; and
• Exercise any additional privacy rights available under applicable law.

To exercise your privacy rights, please contact us at customerservice@artsourcehome.ca with the subject line "Privacy Request." We may request information necessary to verify your identity before processing a request.

12.1 Additional Rights for California Residents (CCPA/CPRA)

California residents may have additional rights under California privacy laws, including rights relating to access, correction, deletion, and opting out of certain uses of personal information. California residents may contact us using the information provided below to submit privacy-related requests.

12.2 Additional Rights for Canadian Residents (PIPEDA)

Canadian residents have rights under PIPEDA, including the right to access personal information held about them, to challenge its accuracy, and to withdraw consent. Quebec residents have additional rights under Law 25 (Act respecting the protection of personal information in the private sector), as described below.

12.3 Additional Rights for Quebec Residents (Law 25)

Quebec residents may have additional rights under applicable Quebec privacy legislation, including rights relating to access, correction, withdrawal of consent, and data portability. Requests may be submitted to our Privacy Officer using the contact information below.

13 Email Marketing and Communications

Where you have provided consent or where otherwise permitted by applicable law, we may send you newsletters, promotional offers, and marketing communications. You may unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails or by contacting us at customerservice@artsourcehome.ca.

Please note that even if you opt out of marketing communications, you may continue to receive transactional emails relating to your orders, account activity, returns, or other service-related communications.

14 Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

15 Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.

16 Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with a revised effective date. By continuing to access or use our website after changes become effective, you agree to the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

17 Contact Information

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint about our privacy practices, please contact our Privacy Officer.