Privacy Policy

Privacy laws that apply

• Atelier LTD is subject to Alberta's Personal Information Protection Act (PIPA) for applicable Alberta activities, and to the federal PIPEDA for interprovincial and international commercial flows of personal information.
• Quebec, British Columbia and Alberta have private-sector privacy laws that may apply to activities in those provinces. We will comply with any applicable mandatory provincial requirements.

What we collect

• Account and contact details: name, email, phone, company.
• Billing, shipping and pickup addresses.
• Order details, product configurations and quote requests.
• Artwork and design files you upload or create.
• Payment status and payment references. We do not store full card numbers; card details are handled by our payment processor.
• Messages with our support, quoting and production teams.
• Device and technical data such as browser type, IP address and basic usage logs.
• Marketing preferences, only if you choose to opt in.

Why we use it

• To prepare quotes and process, proof, produce and deliver your orders.
• To take payment and send order, proof and shipping updates.
• To provide customer support.
• To protect against fraud and keep our systems secure.
• To keep legal, tax and accounting records.
• To improve our website and services.

Who we share it with

• Service providers who help us run the business: account, database and file storage hosting; Stripe for payments; Resend for email; EasyPost and shipping carriers for delivery; and website hosting and analytics when enabled.
• These providers may store or process information outside Canada, where it may be subject to local laws. Details of each provider, its purpose for us, and where it processes information are set out below.
• Accounts, orders and artwork files: our hosting and database provider (Supabase) stores account and authentication information and the order database in the United States (US West – Oregon region). It also stores uploaded artwork files; the storage location for those files has not yet been independently confirmed by Atelier LTD.
• Email delivery: Resend sends our transactional order, payment, proof and shipping messages and maintains delivery logs and status notifications. The customer data it stores and its primary processing are located in the United States.
• Payments: Stripe, LLC in the United States processes card payments and provides fraud, security, identity and payment-method support as applicable. Stripe may transfer data to its affiliates and service providers; its current service-provider list includes processing entities in the United States and, depending on the service used, India, Ireland, Colombia, the United Kingdom, Luxembourg, Germany and Japan. Where those transfers occur is determined by Stripe, and we do not control how card networks, issuing banks or payment networks process information.
• Shipping: EasyPost obtains carrier rates and processes shipping labels, shipments and tracking; its service providers are located in the United States. Shipping carriers receive the delivery address and shipment details necessary to carry out delivery, and may operate in the destination or transit jurisdictions.
• Website analytics (optional): only if you accept analytics in our cookie banner, Google LLC receives Google Analytics 4 usage data about our public pages, quote submissions and completed paid orders, without names, contact details, addresses, artwork or message text. Google may process this data in the United States and other countries. You can withdraw at any time through "Cookie settings" in the website footer; see our Cookie Policy.
• The providers and countries described above may change as those providers update their own arrangements and subprocessor lists. Atelier LTD will review and update this policy as required.
• We remain accountable for personal information transferred to service providers that process it on our behalf, and use contractual and other safeguards where required.
• You can request written information about our policies and practices for service providers outside Canada, or ask about the countries and purposes involved, by contacting our Privacy Officer at info@atelierltd.ca.
• We do not sell your personal information.
• We may disclose information where required or permitted by law.

Consent and your choices

• When you voluntarily provide information for a quote or order, we use it for the purposes you would reasonably expect in fulfilling that request. We obtain express consent where the law requires it.
• Browsing our website or placing an order is not consent to optional marketing or analytics. Uses permitted or required by law without consent remain available.
• You may withdraw consent at any time, subject to legal or contractual limits — for example, we cannot complete an order without a delivery address.
• You may ask in writing to access or correct your personal information by contacting our Privacy Officer at info@atelierltd.ca. We may need to verify your identity in a reasonable and secure way; we will never ask for your password or full card details by ordinary email.
• We respond within the applicable legal deadline — generally 45 days under Alberta's PIPA, unless lawfully extended. If we refuse or limit a request where the law allows, we will explain why and tell you about available review or complaint options.

Information you give us about others

• If your order or artwork includes other people's personal details, please provide them only with the necessary authority. Please do not send sensitive information unrelated to your order.
• Access to artwork is limited to order fulfilment and authorised support. We do not use it publicly, such as in a portfolio, without your separate permission.

Marketing emails

• Order, payment, proof and shipping emails are transactional and are sent as part of your order.
• Promotional emails are sent only with consent where required by law. They identify Atelier LTD and include a working unsubscribe option, and we honour unsubscribe requests without delay and no later than 10 business days.

Retention and safeguards

• Business, transaction, invoice, payment-reference and tax/accounting records may be kept for at least the minimum period required by tax and accounting law — generally six years from the end of the relevant tax year — and longer where legally required, for example for an audit, appeal or litigation.
• Other personal information, including artwork files, support messages and account data, is kept only as long as reasonably necessary for the purpose it was collected for, for contractual and legal obligations, for dispute handling, and for re-order and customer-service needs, and is then securely deleted or anonymized when no longer required.
• Atelier LTD has adopted a documented manual retention schedule. Records are reviewed monthly, and records that are due are deleted or anonymized within a reasonable time after review. Records do not expire instantly or automatically.
• Orders, invoices, payment references and essential approval records: kept for six years after the end of the last tax year they relate to, and longer when legally required.
• Final customer artwork: reviewed for deletion 24 months after the last fulfilled order that used it, unless you have agreed with us that it may be stored longer or a legal or active business need requires it. Please keep your own original files; we do not guarantee indefinite archiving.
• Unused uploads and abandoned quote files: reviewed after 90 days since last activity, and deleted only if no active quote or order requires them.
• Routine support correspondence: reviewed 24 months after the matter is resolved. Evidence needed for a dispute or required transaction records is preserved.
• Inactive accounts: reviewed after 24 months of inactivity. We give 30 days' notice before closing an account and keep legally required transaction records separately.
• Routine technical logs under Atelier LTD's control: target retention of 90 days. Evidence relevant to a security incident may be kept longer when justified.
• Legal, tax, audit, dispute or open-order holds override the routine schedule; we document the reason for a hold and review it.
• Backups expire under the backup lifecycle of our service providers, are restricted to recovery use, and any deletion decisions are reapplied if data is restored from a backup.
• We use reasonable safeguards, including access controls, private file storage and encrypted connections.
• We keep a record of privacy incidents where required. If an incident creates a real risk of significant harm (or a risk of serious injury, where that standard applies), we will notify affected people and regulators as required by law.

Privacy Officer

• Privacy Officer, Atelier LTD — contact: info@atelierltd.ca. For order-related matters you may also write to orders@atelierltd.ca.
• The Privacy Officer is accountable for privacy at Atelier LTD unless this role is delegated.

Complaints

• If you have a privacy concern, please contact our Privacy Officer first so we can try to help.
• You may also complain to the Office of the Information and Privacy Commissioner of Alberta or another applicable regulator at any time; you do not have to contact us first.

Service area

• Online checkout currently supports delivery within Alberta and free local pickup in Calgary only. We do not currently offer online consumer sales targeted to Quebec.

Contact

Atelier LTD, Calgary, Alberta — orders@atelierltd.ca or info@atelierltd.ca.