Legal

Privacy Policy

Last updated: March 2026

1. About This Policy

Enchanted Designs Ltd. ("we", "us", "our") is committed to protecting your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA). This policy explains what information we collect, how we use it, and your rights regarding it. By using our website or placing an order, you consent to the practices described herein.

2. Information We Collect

We collect information in the following categories:

Account & Order Information

  • Full name, email address, and password (hashed) when you create an account.
  • Shipping address, phone number, and order details when you place an order.
  • Order history, unit numbers purchased, and any communications related to your orders.
  • Custom requests, messages sent through our contact or request forms.

Payment Information

  • Payment transactions are processed through PayPal (PCI-DSS compliant). We do not store, access, or retain your card number, CVV, or full payment credentials.
  • We retain a record of transaction amounts, currency, and payment processor reference IDs for accounting purposes.

Technical & Usage Data

  • IP address, browser type, device type, and operating system.
  • Pages visited, time spent on site, referral URLs, and click data.
  • Session cookies and local storage data for cart and authentication state.

3. How We Use Your Information

  • To process, fulfill, and communicate updates about your orders, including shipping notifications and tracking.
  • To manage your customer account, including order history and saved preferences.
  • To calculate and apply shipping quotes, bundle discounts, affiliate discounts, and coupon codes.
  • To administer the affiliate program, including tracking referral codes and calculating commissions.
  • To send transactional emails (order confirmations, shipping updates, revocation notices).
  • To send promotional emails and live sale announcements, only with your consent. You may unsubscribe at any time.
  • To improve our website, product listings, and customer experience through analytics.
  • To detect and prevent fraud, unauthorized access, or misuse of our platform.
  • To comply with legal and accounting obligations.

4. Affiliate Program Data

If you participate in our affiliate program, we collect your name, contact information, affiliate code, discount percentage, commission rate, and referral activity. This data is used solely to administer the program, calculate commissions, and communicate with you about your affiliate account. Affiliate data is not sold to third parties.

5. Live Sales & TikTok

Our live sales are conducted via TikTok Live. When you participate in a live sale, any information you share publicly in the livestream (such as comments or usernames) is subject to TikTok's own privacy policy. We do not collect TikTok account data directly, but we may record your TikTok username if you claim an item via comment, solely for order fulfillment purposes.

6. Data Sharing & Third Parties

  • We do not sell, rent, or trade your personal information to any third party for marketing purposes.
  • We share your shipping address and order details with shipping carriers (Canada Post, UPS, FedEx, or similar) solely for order fulfillment.
  • Payment data is processed by PayPal; their privacy policy governs that data.
  • Our website infrastructure is hosted on Vercel (US-based). Your data may be stored or processed outside Canada, but we take steps to ensure adequate protection.
  • We may disclose information to law enforcement or regulators if required by law, court order, or to protect our rights and the safety of others.

7. Cookies & Tracking

  • Essential cookies: Required for shopping cart, authentication sessions, and site functionality. Cannot be disabled without breaking core features.
  • Analytics cookies: Used to understand how visitors interact with our site (page views, session duration, referral sources).
  • Preference storage: Local storage is used to remember your cart, selected currency (CAD/USD), and locale settings.
  • You can manage or clear cookies through your browser settings, though this may affect site functionality.

8. Data Retention

  • Order records are retained for a minimum of 7 years to comply with Canadian tax and accounting regulations.
  • Account data is retained for as long as your account is active. You may request deletion at any time (subject to legal retention requirements).
  • Analytics and technical data are retained for up to 24 months.
  • Marketing consent records are retained for the duration of any regulatory requirement.

9. Your Rights (PIPEDA / PIPA)

Under Canadian privacy law, you have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate or incomplete information.
  • Withdraw consent for non-essential uses (e.g., marketing emails) at any time.
  • Request deletion of your account and associated personal data, subject to legal retention requirements.
  • File a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you believe your rights have been violated.

To exercise any of these rights, contact us at the address below.

10. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), HTTP-only session cookies, and parameterized database queries to protect against unauthorized access, disclosure, or misuse of your personal information. While we take every reasonable precaution, no system is completely secure and we cannot guarantee absolute security.

11. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately so we can remove it.

12. Policy Updates

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website after changes are posted constitutes acceptance of the updated policy. For significant changes, we will notify registered account holders by email.

13. Contact & Privacy Officer

For privacy inquiries, access requests, or complaints, contact our Privacy Officer at info@enchanteddesigns.ca.

Enchanted Designs Ltd.
Southern Alberta, Canada
(Near the Lethbridge Ammonite Mining District)