Privacy Policy
Effective Date: March 3, 2026
Compliance Lettering Canada is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the Canadian Anti-Spam Legislation (CASL).
1. Information We Collect
1.1 Personal Information You Provide
When you place an order or contact us, we collect:
- Contact details: Name, email address, phone number, shipping address, billing address
- Order information: Product specifications, customisation details (e.g., CVOR numbers, USDOT numbers, boat registration text), shipping preferences
- Payment information: Processed securely through Shopify Payments (we do not store credit card details on our servers)
- Communication records: Correspondence via email, phone, or live chat regarding orders, support, or inquiries
1.2 Newsletter and Email Marketing
If you opt in to our email newsletter, we collect your email address and consent record. All marketing emails comply with CASL (Canada's Anti-Spam Legislation) and include a clear unsubscribe mechanism.
1.3 Automatically Collected Information
When you visit our website, we automatically collect:
- Device and browser data: IP address, browser type, operating system, device identifiers
- Usage data: Pages viewed, time spent on pages, referral sources, navigation patterns
- Cookies and tracking technologies: See Section 3 below
2. How We Use Your Information
We use your personal information to:
- Process and fulfil orders: Manufacture custom vinyl decals to your specifications, arrange shipping, and provide tracking information
- Provide customer support: Respond to inquiries, resolve issues, and assist with product selection and compliance questions
- Send transactional emails: Order confirmations, shipping notifications, and delivery updates
- Send marketing communications: If you've opted in, we'll send newsletters, product updates, and promotional offers (you may unsubscribe at any time)
- Improve our services: Analyse website usage to enhance user experience, optimise product offerings, and improve site performance
- Ensure security and prevent fraud: Detect and prevent fraudulent transactions, abuse, and security threats
- Comply with legal obligations: Maintain records as required by tax laws, consumer protection regulations, and other applicable statutes
3. Cookies and Tracking Technologies
3.1 Google Analytics
We use Google Analytics (Property ID: G-EC7F8FY6Z0) to analyse website traffic and user behaviour. Google Analytics uses cookies to collect anonymous information such as the number of visitors, popular pages, and traffic sources.
You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
3.2 Essential Cookies
We use essential cookies to enable basic site functionality, including shopping cart persistence, session management, and security features. These cookies are necessary for the website to function properly and cannot be disabled.
3.3 Shopify Checkout Cookies
Payment processing is handled by Shopify. Shopify sets cookies during checkout to ensure secure transactions and prevent fraud. Shopify's privacy policy governs checkout data: shopify.com/legal/privacy.
4. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your information with:
- Service providers: Shopify (e-commerce and payment processing), Canada Post and courier services (shipping), email marketing platforms (for newsletters, if you've opted in)
- Legal requirements: Government authorities, law enforcement, or courts when required by law or to protect our rights, safety, or property
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred (you will be notified of any such change)
5. Data Retention
We retain your personal information for as long as necessary to:
- Fulfil orders and provide customer support
- Honour our 5+ year product guarantee
- Comply with tax and accounting requirements (typically 5+ years)
- Resolve disputes and enforce agreements
When personal information is no longer needed, we securely delete or anonymise it.
6. Data Security
We implement industry-standard security measures to protect your personal information:
- Encryption: All payment transactions are encrypted using SSL/TLS protocols
- PCI DSS compliance: Shopify is PCI DSS Level 1 certified, the highest security standard for payment processors
- Access controls: Personal information is accessible only to authorised personnel on a need-to-know basis
- Regular audits: We periodically review security practices and update protocols as needed
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Your Rights Under PIPEDA
Under Canada's PIPEDA, you have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate or incomplete information
- Withdrawal of consent: Withdraw consent for marketing emails at any time (transactional emails related to orders will continue)
- Data portability: Request your data in a structured, machine-readable format
- Deletion: Request deletion of your personal information, subject to legal retention requirements
To exercise any of these rights, contact us at info@compliancelettering.ca or call (289) 228-7021.
8. Email Marketing and CASL Compliance
Our email marketing practices comply with Canada's Anti-Spam Legislation (CASL):
- We only send marketing emails to individuals who have expressly consented
- Every marketing email includes a clear unsubscribe link
- We honour unsubscribe requests within 10 business days
- Our emails clearly identify Compliance Lettering as the sender
- We maintain consent records as required by CASL
To unsubscribe from marketing emails, click the "Unsubscribe" link in any email or contact us at info@compliancelettering.ca.
9. Third-Party Links
Our website may contain links to third-party websites (e.g., government regulation sources, Transport Canada, MTO resources). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing personal information.
10. Children's Privacy
Our services are intended for businesses and individuals aged 18 and older. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a child, please contact us immediately.
11. International Data Transfers
Compliance Lettering is a Canadian business serving primarily Canadian customers. Some service providers (e.g., Shopify) may store data on servers located outside Canada, including the United States. By using our services, you consent to the transfer of your information to jurisdictions that may have different data protection laws than Canada.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. The "Effective Date" at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. Continued use of our services after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Compliance Lettering Canada
Attn: Privacy Officer — TJ Jeffrey
248 Port Colborne Drive, Port Colborne, ON L3K 2M5
Phone: (289) 228-7021
Email: info@compliancelettering.ca
If you are not satisfied with our response to a privacy concern, you may file a complaint with the Office of the Privacy Commissioner of Canada: priv.gc.ca.