Privacy Policy
Canvas N Decor (USA) — canvasndecor.com
Effective Date: 2026-06-26

1. Introduction

This Privacy Policy describes how Canvas N Decor (“Canvas n’ Décor,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with our website at www.canvasndecor.com (the “Site”) and all related products and services.

This Policy is intended to comply with applicable United States federal and state privacy laws, including but not limited to the CAN-SPAM Act, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the New York SHIELD Act, and other applicable state privacy statutes. By accessing or using our Site, you acknowledge that you have read and understood this Privacy Policy.

We may update this Privacy Policy at any time. The “Effective Date” at the top reflects the date of the most recent revision. Material changes will be communicated by a prominent notice on our Site or by email prior to the change taking effect. Your continued use of the Site following any update constitutes your acceptance of the revised Policy.

2. Contact Information and Privacy Requests

For questions about this Privacy Policy, to exercise your privacy rights, or to submit a privacy-related complaint, please contact us using any of the following methods:

Canvas N Decor 101 Lincoln Parkway, Suite A East Rochester, NY 14445 Phone: 585-203-1585 Email: [email protected] Website: www.canvasndecor.com

To submit a verifiable consumer privacy request, we offer two methods: (1) email us at [email protected] with the subject line “Privacy Request,” or (2) call us at 585-203-1585. We will respond within the timeframes required by applicable law.

3. Information We Collect

We collect personal information in the following categories, as defined under applicable US privacy laws including the CCPA/CPRA:

3.1 Identifiers

Information that identifies or can reasonably be linked to you, including:

Full name
Email address
Phone number
Billing and shipping addresses
IP address
Cookie identifiers and device identifiers
Company name, if applicable

3.2 Commercial Information

Records of products or services purchased, obtained, or considered, including:

Order details and purchase history
Payment method type (we do not store full card numbers)
Shipping and delivery records

3.3 Internet or Other Electronic Network Activity

Information about your interaction with our Site, including:

Browser type and version
Device type and operating system
Pages viewed and time spent on our Site
Referring websites and search terms
Clickstream data and interactions with our Site
Ad interactions and conversion activity

3.4 Visual and Artistic Content

Images, photographs, logos, artwork, and other files you upload for printing purposes.

3.5 Communications Data

Information submitted through contact forms, customer service inquiries, survey responses, and other communications you send to us.

3.6 Inferences

Inferences drawn from any of the above to create a profile about you reflecting your preferences, interests, or behavior for the purpose of improving our services or delivering more relevant advertising.

3.7 Information Collected Automatically

When you interact with our Site, we and our third-party service providers automatically collect certain technical and usage data as described above. This may include data collected through cookies, pixels, and similar tracking technologies.

3.8 Uploaded Images and Artwork

When you upload images, photographs, logos, or other artwork, that content is used solely for purposes related to your order and customer service. By uploading content, you represent and warrant that:

You own the content or have obtained all necessary rights and permissions to use it; and
The content does not infringe upon the intellectual property or other rights of any third party.

Uploaded files may be retained for a reasonable period to facilitate order fulfillment, customer support, reorders, backup, and legal recordkeeping, and will be securely deleted when no longer required for those purposes.

4. How We Use Your Information

We use the personal information we collect for the following business and commercial purposes:

Processing and fulfilling orders for custom printed products
Producing, packaging, and arranging delivery of orders
Processing payments securely through third-party payment processors (PayPal and Stripe)
Communicating with you about your order status, shipping, and customer service matters
Responding to inquiries, questions, and support requests
Sending marketing and promotional communications where you have provided consent or we have a legitimate interest under applicable law (see Section 6 — CAN-SPAM)
Improving and personalizing our website and user experience
Measuring and evaluating advertising effectiveness
Running promotions, contests, surveys, or other Site features
Maintaining business and accounting records
Complying with legal and regulatory obligations
Detecting and preventing fraud, security incidents, or unauthorized access
Enforcing our Terms of Use and protecting our rights, property, and customers

We will not use personal information for any materially different purpose without providing notice and, where required, obtaining your consent.

5. Payment Processing

Payments made through our website are securely processed by third-party payment service providers. We do not store complete payment card or bank account information on our servers.

5.1 Stripe

We use Stripe.com to process credit and debit card payments. Payment information is collected, processed, and stored by Stripe in accordance with their privacy and security practices.

Stripe Privacy Policy: https://stripe.com/privacy

5.2 PayPal

We also accept payments through PayPal.com. When you choose to pay via PayPal, you will be directed to the PayPal website, where PayPal’s privacy policy governs the handling of your payment information.

PayPal Privacy Policy: https://www.paypal.com/us/legalhub/privacy-full

6. Email Communications and CAN-SPAM Compliance

We comply with the federal CAN-SPAM Act (15 U.S.C. § 7701 et seq.) for all commercial email communications. In accordance with CAN-SPAM:

All commercial emails will accurately identify Canvas n’ Décor USA as the sender.
Subject lines will not be deceptive or misleading.
Every commercial email will include our physical postal address: 101 Lincoln Parkway, Suite A, East Rochester, NY 14445.
Every commercial email will include a clear and conspicuous unsubscribe mechanism.
Unsubscribe requests will be honored within 10 business days of receipt.
We will not send commercial emails to any person who has previously opted out.

To unsubscribe from marketing emails at any time, use the unsubscribe link in any email we send or contact us at [email protected]. Note that opting out of marketing emails does not affect transactional communications related to your orders.

7. Cookies and Tracking Technologies

Our Site uses cookies, pixels, web beacons, and similar technologies to maintain website functionality, remember user preferences, measure traffic and performance, and support advertising and analytics.

7.1 Types of Cookies We Use

Essential cookies: Necessary for the Site to function. Cannot be disabled.
Analytics cookies: Help us understand how visitors interact with our Site (e.g., Google Analytics).
Advertising cookies: Used to deliver relevant advertisements and measure campaign performance (e.g., Google Ads, Meta Pixel).
Preference cookies: Remember your settings and preferences across visits.

7.2 Managing Cookies

You may configure your browser to refuse cookies or alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our Site. Most browsers also allow you to delete cookies already stored on your device.

7.3 Do Not Track

Some browsers transmit “Do Not Track” (DNT) signals to websites. Our Site does not currently alter its data collection or use practices in response to DNT signals, as there is no universally accepted standard for how to respond to them. California residents and others may use the opt-out mechanisms described in Sections 8 and 9 to limit certain data uses.

8. Analytics and Advertising Technologies

We use third-party analytics and advertising services that may use cookies, pixels, and similar technologies to collect information about your interactions with our Site and other websites. These services include:

8.1 Google Analytics and Google Ads

Google Analytics collects information such as how often users visit the Site, what pages they visit, and what other sites they used prior to coming to our Site. We use this information to improve our Site. Google Ads tracks conversions and supports targeted advertising.

Google Privacy Policy: https://policies.google.com/privacy

Google Ads Settings (opt-out): https://adssettings.google.com

8.2 Meta (Facebook) Pixel

The Meta Pixel tracks visitor activity on our Site and links it to your Facebook or Instagram profile (if logged in) to help us measure the effectiveness of our advertising and deliver relevant ads.

Meta Privacy Policy: https://www.facebook.com/privacy/policy

Meta Ad Preferences (opt-out): https://www.facebook.com/adpreferences/ad_settings

8.3 Industry Opt-Out Tools

You may also opt out of interest-based advertising from participating companies through:

Digital Advertising Alliance (DAA): https://optout.aboutads.info

Network Advertising Initiative (NAI): https://optout.networkadvertising.org

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act (CPRA). This section describes those rights and how to exercise them.

9.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information (as defined by the CCPA):

Identifiers (name, email, address, IP address, device identifiers)
Commercial information (purchase history, order records)
Internet or other electronic network activity (browsing and interaction data)
Visual content (uploaded artwork and images)
Inferences drawn from the above categories

9.2 Purposes for Collection

We collect these categories for the business and commercial purposes described in Section 4.

9.3 Categories of Third Parties with Whom We Share Personal Information

Payment processors (Stripe, PayPal)
Shipping and delivery providers
Website hosting and cloud service providers (InMotionHosting)
Analytics providers (Google Analytics)
Advertising platforms (Google Ads, Meta)
Technology providers supporting website functionality

9.4 Sale or Sharing of Personal Information

We do not “sell” personal information for monetary compensation. However, our use of advertising technologies such as Google Ads and Meta Pixel may constitute “sharing” of personal information for cross-context behavioral advertising under the CPRA. California residents have the right to opt out of this sharing.

To opt out of the sharing of your personal information for cross-context behavioral advertising, please contact us at [email protected] with the subject line “Do Not Share My Personal Information,” or use the industry opt-out tools listed in Section 8.3.

9.5 Your California Rights

California residents have the right to:

Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes for collection, and the categories of third parties with whom it has been shared.
Delete: Request deletion of personal information we have collected, subject to certain exceptions permitted by law.
Correct: Request correction of inaccurate personal information we maintain about you.
Opt-Out of Sale/Sharing: Direct us not to sell or share your personal information for cross-context behavioral advertising.
Limit Use of Sensitive Personal Information: Request that we limit our use of sensitive personal information to purposes permitted under the CPRA, if applicable.
Data Portability: Receive a copy of your personal information in a portable and, to the extent technically feasible, readily usable format.
Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny goods or services, charge different prices, or provide a different level of service because you exercised a privacy right.

9.6 How to Submit a California Privacy Request

To exercise any of the above rights, submit a verifiable consumer request to us by:

Email: [email protected] (subject line: “California Privacy Request”)
Phone: 585-203-1585

We will respond to verifiable consumer requests within 45 days of receipt. If we require more time, we will notify you of the reason and extension period (up to 90 days total). We may need to verify your identity before processing certain requests.

9.7 Authorized Agents

A California resident may designate an authorized agent to make a request on their behalf. We may require written proof of the agent’s authorization and may verify the consumer’s identity directly.

10. U.S. State Privacy Rights

Residents of certain U.S. states, including Virginia, Colorado, Connecticut, Texas, Montana, and others that have enacted comprehensive consumer privacy legislation, may have rights similar to those described in Section 9. Depending on your state of residence, you may have the right to:

Access the personal information we hold about you
Correct inaccurate personal information
Request deletion of your personal information
Obtain a portable copy of your personal information
Opt out of the processing of your personal information for targeted advertising
Opt out of the sale of your personal information
Appeal our decision if we decline to act on a privacy request

To exercise any applicable state privacy right, contact us using the information in Section 2. We will respond within the timeframe required by your state’s law. If you are not satisfied with our response, you may appeal by re-contacting us and referencing your original request. You may also have the right to file a complaint with your state’s attorney general or data protection authority.

11. Disclosure of Personal Information

We do not sell, trade, or rent your personal information to third parties for their own marketing purposes. We may disclose personal information in the following circumstances:

11.1 Service Providers

We share personal information with trusted third-party service providers who assist us in operating our business, subject to contractual obligations restricting their use of your information to providing services on our behalf:

Payment processors (Stripe, PayPal)
Shipping carriers and delivery services
Website hosting and cloud service providers (InMotionHosting — www.inmotionhosting.com)
Analytics and advertising platforms (Google, Meta)
Technology providers supporting website functionality and order fulfillment

11.2 Legal Requirements

We may disclose personal information when required by law or when we have a good-faith belief that disclosure is necessary to:

Comply with a legal obligation or valid legal process (e.g., subpoena, court order)
Respond to lawful requests from governmental or law enforcement authorities
Protect and defend our rights, property, or business operations
Prevent or investigate fraud or security incidents
Protect the safety of our customers or the public

11.3 Aggregated Information

We may share aggregated, anonymized information that cannot reasonably be used to identify any individual with business partners, affiliates, and advertisers for purposes described in this Policy.

12. International Visitors

Canvas N Decor is based in the United States. Our Site is hosted and operated in the United States. If you are visiting our Site from outside the United States — including from Canada or other countries — please be aware that your personal information will be transferred to, stored, and processed in the United States.

The data protection and privacy laws of the United States may differ from those of your country. By using our Site and providing personal information to us, you consent to the transfer of your information to the United States and acknowledge that it will be subject to US law.

13. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including:

Fulfillment and support of orders
Business and accounting records
Processing returns, disputes, or chargebacks
Facilitating customer reorders
Meeting legal and regulatory obligations
Enforcing our agreements and protecting our business interests

When personal information is no longer required for these purposes, we will securely destroy, delete, or anonymize it.

14. Security Safeguards

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, modification, or disclosure, consistent with the requirements of the New York SHIELD Act (N.Y. Gen. Bus. Law § 899-bb) and other applicable law. Our safeguards include:

SSL/TLS encryption for data transmitted through our Site
Access controls limiting personal information to authorized personnel who need it to perform their job functions
Secure hosting through InMotionHosting
Secure payment processing through Stripe and PayPal
Periodic review and assessment of our security practices

While we take reasonable precautions, no security system is impenetrable. We cannot guarantee the absolute security of personal information transmitted over the internet.

14.1 Data Breach Notification — New York SHIELD Act

Canvas N Decor is based in New York and complies with the New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act. In the event of a breach of the security of the system that exposes “private information” (as defined under N.Y. Gen. Bus. Law § 899-aa) of New York residents, we will:

Notify affected New York residents in the most expedient time possible and without unreasonable delay;
Notify the New York Attorney General, the Department of State, and the Division of State Police as required by law; and
Provide notice to relevant consumer reporting agencies if more than 5,000 New York residents are affected.

For residents of other states, we will comply with breach notification requirements under applicable state law.

15. Children’s Privacy (COPPA)

Our Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13, consistent with the requirements of the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.

If we become aware that we have inadvertently collected personal information from a child under the age of 13, we will promptly delete that information from our records. If you believe we may have collected information from a child under 13, please contact us at [email protected].

16. Third-Party Websites

Our Site may contain links to third-party websites, including those of our payment processors and advertising partners. This Privacy Policy applies solely to our Site. We are not responsible for the privacy practices or content of any third-party websites, and we encourage you to review their privacy policies before providing personal information.

17. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Any changes will become effective upon posting the revised Policy on this page. The “Effective Date” at the top of this page will indicate when the Policy was last updated.

Where changes are material, we will make reasonable efforts to notify you by posting a prominent notice on our Site or by sending an email to the address associated with your account, prior to the change taking effect.

18. Governing Law

This Privacy Policy and any disputes related to it are governed by the laws of the State of New York, without regard to its conflict of law provisions, and applicable federal law.

19. Contacting Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: