Privacy Policy

1. Information We Collect

When you place an order or interact with our website, we may collect the following personal information:

Contact information: Your name and email address, collected when you complete a purchase or submit a contact form.

Shipping information: Your delivery address (street, city, province/state, postal/ZIP code, country), collected at checkout to fulfil your order.

Payment information: We do not store your credit card details. All payment processing is handled securely by Stripe, Inc. Please refer to Stripe's privacy policy for details on how they handle your payment data.

Usage data: We may collect limited non-personally identifiable usage information about how you interact with our website (such as pages visited, browser type, and device type) to improve the user experience.

2. How We Use Your Information

We use the personal information we collect solely to:

• Process and fulfil your orders, including shipping and delivery
• Send you order confirmation and shipping update emails
• Respond to your customer service enquiries
• Comply with applicable laws and regulations

We only collect the information necessary to operate the store and provide our services.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Service Providers

To operate our store, we share your information with trusted service providers who act on our behalf:

Stripe - payment processing. Your card details are entered directly on Stripe's secure hosted checkout page and never touch our servers.

Resend - transactional email delivery (order confirmations, contact form replies).

Shipping carriers - your name and delivery address are shared with the carrier fulfilling your order.

Some service providers may process data outside your country of residence, including in Canada or the United States.

Each provider is contractually obligated to use your data only for the specific service they provide.

4. Data Retention

Order records (name, email, shipping address, items purchased) are retained for a minimum of seven (7) years to comply with Canadian tax and accounting requirements under the Income Tax Act and applicable provincial legislation.

Contact form submissions are retained for as long as necessary to resolve your enquiry and are then deleted.

You may request deletion of your personal information at any time. If we are unable to delete it because of a legal retention obligation, we will explain why.

5. Your Rights (PIPEDA / Canadian Privacy Law)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Withdraw consent to certain processing (where consent is the legal basis)
• Request deletion of your personal information, subject to legal retention obligations
• File a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca

To exercise any of these rights, please visit our Contact page and submit the form.

6. Cookies & Local Storage

AshkiWorks does not use tracking cookies or advertising cookies. We use browser localStorage solely to remember your shopping cart between sessions. This data stays on your device and is never transmitted to our servers independently of a checkout action.

No third-party marketing or analytics cookies are set by this website.

7. Security

Our website is served over HTTPS (TLS). Payments are processed on Stripe's PCI-DSS compliant infrastructure. We do not store raw payment card data.

While we take reasonable technical and organisational measures to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please visit our Contact page and submit the form.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our website after a change constitutes acceptance of the revised policy.

10. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please visit our Contact page and submit the form.

We will respond to privacy-related requests within 30 days.