Privacy policy

Last updated: October 13, 2025
Who we are: SI Art Avenue, doing business as “Wrapped Canvas” (“we,” “us,” “our”) operates this online store and website (the “Services”). Our Services are powered by Shopify.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit, use, or make a purchase from the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to personal information.

By accessing or using any of the Services, you acknowledge that you have read and understood this Privacy Policy.

1) Personal Information We Collect

“Personal information” means information that identifies or can reasonably be linked to you. It does not include de‑identified or aggregated information.

Depending on your interactions and applicable law, we may collect:

  • Contact details: name, email, phone, billing/shipping address.

  • Account data: username, password, settings, saved addresses, preferences.

  • Orders & transactions: items viewed/added/purchased/returned, order notes, warranty requests, customer service history.

  • Payment details: payment method, transaction confirmations (we do not store full payment card numbers; payments are processed by our payment providers).

  • User Content for custom products: images/artwork/files you upload (e.g., photos for printing), custom text, sizing and framing specifications.

  • Communications: content of your messages (email, contact forms, chat), including photos for quality assessment or damage claims.

  • Device/usage data: IP address, device/browser info, cookie identifiers, approximate location (derived from IP), pages viewed, clicks, referral URLs.

  • Inferences: interests or preferences derived from the above where permitted by law.

We do not intentionally collect sensitive personal information (e.g., government IDs, precise geolocation). Please do not include such information in order notes or uploads.

2) Sources of Personal Information

  • Directly from you (account creation, checkout, uploads, customer support).

  • Automatically via cookies and similar technologies when you browse our site.

  • Service providers & partners (e.g., Shopify, payment processors, analytics, carriers).

  • Social or advertising partners when you consent or as permitted by law.

3) How We Use Personal Information

We use personal information to:

  • Provide and improve the Services: process payments, fulfill and deliver orders, manage returns/exchanges, authenticate users, maintain your account, remember preferences, recommend products, and improve our website.

  • Manufacture custom goods: receive and process your User Content solely to produce your custom canvas, provide support, and maintain quality records. We will not use your uploaded images for marketing without your explicit consent.

  • Customer support & communications: respond to inquiries, send service messages (order/ship/return updates), and manage our relationship with you.

  • Marketing & advertising: send promotional communications (where permitted), and show you ads, including interest‑based advertising where allowed and subject to your choices.

  • Security & fraud prevention: detect and prevent fraud, abuse, or malicious activity; debug and secure our systems.

  • Legal & compliance: comply with law and requests from authorities, defend legal claims, enforce our terms, and keep necessary business records.

4) Cookies, Analytics & Ads

We use cookies and similar technologies to operate the site, measure performance, and (where permitted) personalize content and ads. Through Shopify’s customer privacy settings, we can present a cookie banner in selected regions, and offer a data‑sharing opt‑out page. Your choices may limit analytics or advertising cookies. See the Manage Your Choices section on our site for options. Shopify Help Center+1

Global Privacy Control (GPC). If your browser sends a GPC signal, we treat it as an opt‑out request to the extent required by applicable law for the device/browser you use; where technically feasible, we will associate your preference with your account. Learn more about GPC at the official project and W3C spec. globalprivacycontrol.org+1

“Do Not Track” signals other than GPC are not recognized by many services; we rely on the choices you set through our cookie banner and opt‑out page.

5) Legal Bases (EU/UK only)

Where GDPR/UK GDPR applies, we process personal information under these legal bases: contract (to fulfill your order and provide Services), legitimate interests (e.g., site security, limited direct marketing), consent (where required, e.g., non‑essential cookies or email marketing), and legal obligation (e.g., tax, accounting). Shopify Help Center

6) How We Disclose Personal Information

We may disclose personal information to:

  • Shopify (hosting, checkout, site operations, fraud tools). Shopify may also process personal information as an independent controller for certain enhanced services that leverage data across merchants (see Relationship with Shopify below). Shopify

  • Payment processors (e.g., Shopify Payments, Shop Pay, PayPal) for secure payments; we do not store full card numbers.

  • Operational partners: carriers and logistics (to ship/track orders); if applicable, specialized print/fulfillment partners to manufacture and deliver your products.

  • Service providers: email and customer support tools, analytics, advertising/remarketing partners (subject to your choices).

  • Affiliates and professional advisors.

  • Authorities or third parties for legal reasons (to comply with law, enforce terms, or protect rights/safety).

  • Business transfers (merger, acquisition, reorganization), subject to applicable law and your rights.

  • With your direction or consent.

7) Relationship with Shopify

Our store runs on Shopify. For certain platform features (sometimes called Enhanced Services, such as Shopify Audiences), Shopify may act as a controller/business for some processing and is responsible for handling related privacy rights. For details and to exercise rights with Shopify for those controller uses, see the Shopify Consumer Privacy Policy and Shopify Privacy Portal. Shopify+1

For processing where Shopify acts as our processor/service provider, our relationship is governed by Shopify’s Data Processing Addendum (DPA) (including Appendix E on roles). Shopify+1

8) Your Rights & Choices

Depending on where you live, you may have rights to access/know, delete, correct, port, and/or opt out of certain processing (e.g., targeted advertising or “sale/sharing” of data). You can exercise these rights:

  • Via links on our site (e.g., Your Privacy Choices / Data Sharing Opt‑Out), our cookie banner, or by emailing us (see Contact). Shopify Help Center

  • If you use Global Privacy Control, we treat it as an opt‑out where required. California DOJ

  • EU/UK: you may also object to or restrict certain processing and withdraw consent where we rely on consent.

  • Canada (PIPEDA): you have rights to access and correct your personal information and to make complaints to the Office of the Privacy Commissioner of Canada. Privacy Commissioner Canada+1

We may need to verify your identity. You may use an authorized agent where permitted by law.

9) Marketing Communications (CASL)

We send marketing emails/SMS only with consent or as otherwise permitted by Canada’s Anti‑Spam Legislation (CASL). You can unsubscribe anytime using the link in our messages; service messages (orders, shipping) will still be sent. CRTC+1

10) International Transfers

We may transfer, store, and process personal information outside your country (including Canada and the United States). For EU/UK data, where required, we rely on recognized transfer mechanisms such as the Standard Contractual Clauses (and UK equivalents). Shopify Help Center+1

11) Security

We employ administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is 100% secure; please use caution when transmitting information online.

12) Retention

We retain personal information only as long as necessary for the purposes above or as required by law.

  • Order/financial records: retained at least for the period required by tax and accounting laws (e.g., generally 6 years from the end of the relevant tax year in Canada). Canada.ca

  • User Content (uploaded images/artwork): retained only for production, reprints/replacements, and support — typically up to 180 days after order completion, unless you request earlier deletion or we must keep it longer to comply with law or resolve disputes.

  • Accounts: retained while your account is active and for a reasonable period afterward for record‑keeping and legal compliance.

13) Children’s Data

Our Services are not intended for use by children under the age of majority in your jurisdiction. We do not knowingly collect, “sell,” or “share” personal information of individuals under 16. If you believe a child provided personal information, please contact us to delete it.

14) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised version with an updated “Last updated” date and provide additional notice where required by law.

15) Contact

Email: info@siartavenue.com
Address: 11 Checker Court, Vaughan, ON, L4J 5X4, Canada

For purposes of applicable data protection laws, SI Art Avenue is the data controller of your personal information for the store’s operations described here.