Privacy Policy

1. Overview and Scope

Canvasatoz respects your fundamental right to digital privacy. This comprehensive policy governs all interactions across our website, checkout flows, customer service channels, and transactional notifications. By accessing canvasatoz.com, you consent to the data collection and operational practices described in this document. Please review this alongside our Terms of Service and Cookie Policy.

2. Information We Collect

We collect information necessary to fulfill your orders, process payments, and improve your shopping experience:

• Directly Provided Data: Customer full name, shipping street address, email address, telephone contact number, and order communication records.

• Transactional Details: Purchased dress styles, sizing selections, quantities, order date/time, and transaction ID tokens provided by our payment gateway.

• Automated Technical Data: Device IP address, browser type, operating system, referring URL, time zone, and navigational pathways collected via essential session technologies.

3. Purpose of Data Collection

4. Payment Processing & Financial Data Protection

All commercial transactions on Canvasatoz are processed exclusively through PayPal. When you finalize an order, your financial credentials (such as bank details or credit/debit card numbers) are handled directly by PayPal's encrypted infrastructure. Canvasatoz never collects, accesses, views, or stores your private payment card numbers on our servers. For full payment details, please review our Payment Methods policy.

5. Third-Party Service Providers & Data Sharing

We do not sell, rent, trade, or monetize your personal information to third parties. We share data strictly with trusted operational partners necessary for fulfillment:

• Domestic Couriers: Providing recipient names and delivery addresses to USPS, UPS, and FedEx to deliver your packages as outlined in our Shipping Policy.

• Payment Gateway: Transmitting order amounts and shipping details to PayPal for transaction settlement.

• Hosting Infrastructure: Secure server providers maintaining site stability and database integrity.

6. Data Security and Technical Safeguards

We implement rigorous technical and administrative security measures to protect your personal information against unauthorized access, loss, alteration, or disclosure. All sensitive data transmitted across canvasatoz.com is protected using 256-bit Secure Sockets Layer (SSL) encryption protocols, and our internal production networks are monitored continuously.

7. Cookies, Pixels, and Automated Tracking

We utilize first-party and functional session cookies to remember your shopping cart items, preserve your preferences, and maintain website stability. You can modify your browser settings to reject or delete cookies at any time. For a full breakdown of how tracking files operate, please consult our Cookie Policy.

8. Data Retention Periods

We retain your personal order information only for as long as necessary to fulfill the operational purposes described in this policy, including processing returns, managing warranties, maintaining accurate tax and accounting records, and complying with statutory record-keeping regulations.

9. Customer Privacy Rights (Access, Correction & Deletion)

You have full ownership of your personal data. You are entitled to:

• Request access to a copy of the personal information we hold regarding your account.

• Request corrections or updates to inaccurate or incomplete contact records.

• Request the permanent erasure or deletion of your personal data from our operational databases (subject to mandatory legal or accounting retention obligations).

To exercise any of these rights, email our team at support@canvasatoz.com.

10. California Privacy Rights (CCPA / CPRA Disclosures)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents are entitled to specific disclosures:

• Right to Know & Access: You may request the categories and specific pieces of personal information collected over the preceding 12 months.

• Right to Delete: You have the right to request deletion of personal information collected from you.

• No Sale of Personal Data: Canvasatoz does not sell, trade, or share personal information for cross-context behavioral advertising.

• Non-Discrimination: We will never discriminate against you, alter product pricing, or deny service for exercising your privacy rights.

11. European Union & UK Privacy Rights (GDPR Compliance)

For visitors from the European Economic Area (EEA) and United Kingdom, we process personal information under legal bases recognized by the General Data Protection Regulation (GDPR): (a) performance of a contract when you place an order, (b) legitimate business interests in securing our website, and (c) compliance with statutory legal obligations. You retain rights to data portability, restriction of processing, and the right to lodge a complaint with a supervisory authority.

12. Direct Marketing and Communication Preferences

Canvasatoz sends emails strictly related to order confirmations, shipping updates, and direct customer support replies. We do not engage in unsolicited mass promotional spam. If you subscribe to our newsletter, you may unsubscribe at any time using the opt-out link contained at the footer of each email.

13. Protection of Children’s Privacy

Canvasatoz is intended exclusively for general adult audiences and individuals legally capable of executing commercial purchases. We do not knowingly solicit, collect, or maintain personal information from individuals under the age of 13 (or under 16 where applicable). If we discover that personal data from a child has been submitted inadvertently, we will delete the records immediately.

14. Do Not Track (DNT) & Global Privacy Controls

Our systems honor user privacy preferences submitted through recognized browser-level Global Privacy Control (GPC) signals by restricting non-essential analytics tracking automatically across our storefront.

15. Links to External Websites

Our website contains links directing users to external platforms, such as carrier tracking portals (Order Tracking) and PayPal checkout. Canvasatoz is not responsible for the privacy practices, policies, or content of third-party domains.

16. International Data Transfers

Canvasatoz operates its production and web infrastructure in the United States. If you access our website from abroad, your personal information will be transferred to and processed within the United States in accordance with U.S. data protection standards and this policy.

17. Business Transfers and Mergers

In the event of a future corporate merger, acquisition, restructuring, or asset transition, customer order records may be transferred as an operational business asset, provided the acquiring entity commits to upholding privacy standards equivalent to this Privacy Policy.

18. Legal Disclosures & Law Enforcement

Canvasatoz may disclose personal data if required to do so by applicable law, court order, subpoena, or government inquiry, or where such disclosure is strictly necessary to protect the legal rights, safety, and property of Canvasatoz, our customers, or the public.

19. Policy Amendments and Notification of Changes

We may periodically update this Privacy Policy to reflect operational improvements, changes in technology, or evolving legal requirements. Any modifications will be published directly to this page with an updated effective date. Continued use of our website constitutes acceptance of the revised terms.