Privacy Policy.

• Ordering. Name, email, shipping address, phone number if you give one, and the contents and history of your order.
• Custom canvas orders. The artwork file you upload, plus the dimensions and options you choose.
• Draw entries. Your email address, or your Instagram handle where you entered through Instagram, and whether you asked to hear from us again.
• Website analytics. Page visits, public article and artwork identifiers, referring websites, campaign labels, and basic browser and device information. We use these statistics to understand which content people visit.
• Email. Your address, the date and wording of your consent, and the date you unsubscribed if you do.

We do not collect card numbers. Stripe does that, and we never see them.

To make and deliver what you ordered, to answer you when you write, to run the monthly draw and contact the winner, to keep the books the Canada Revenue Agency requires, and — only if you asked for it — to send you the monthly artist email.

We do not use your information to build a profile of you, we do not sell or rent it, and we do not share it with anyone except the service providers listed below.

• Stripe — payment processing and card verification. Stripe is the card data handler, not us.
• Resend — sends our email.
• Cloudinary — stores and serves artwork and photography.
• Umami Cloud — processes website traffic statistics without analytics cookies. We do not send form contents, names, email addresses, or private link tokens to Umami.
• Base44 — hosts the application and its database.
• HostPapa — domain and mail infrastructure.
• Shipping carriers — receive your name and address for orders going outside the delivery corridor.

Some of these operate servers outside Canada, which means your information may be stored in or accessed from another country and can be subject to that country's laws.

We only send the monthly email to people who explicitly asked for it. The consent checkbox is never pre-ticked, it is separate from entering the draw, and entering the draw does not sign you up for anything.

The email goes out about once a month: the new featured artist, the new edition, and the new draw. Every one carries a working unsubscribe link that takes one click and no login. You can also just reply and say stop. We keep a record of your address after you unsubscribe for the sole purpose of not emailing you again.

Umami measures visits to our public pages without analytics cookies. We do not enable session recordings or identify visitors using their accounts. Admin pages are excluded. The site stores a small amount of data in your browser to remember your session, your currency, and an in-progress canvas configuration so a refresh does not wipe your work. Clearing your browser storage removes it.

You can exclude this browser from our Umami statistics. This choice is stored in this browser only; repeat it in other browsers or after clearing browser storage.

This browser can be counted in Umami statistics.

• Order, invoice, and payment records: six years, as required for Canadian tax records.
• Uploaded artwork files: kept while an order is live and for a reasonable period afterwards so reprints are possible. Ask and we will delete yours sooner.
• Draw entries: through the draw and its close-out, then retained only as an anonymous count.
• Email consent and unsubscribe records: kept as long as we send email, because CASL requires us to prove consent.

Write to ryan@winprint.co and you can ask what we hold about you, get a copy, have it corrected, have it deleted where we are not required to keep it, or withdraw consent to email at any time. One person reads that inbox and you will get a real answer, normally within 30 days.

If you are not satisfied with how we handled it, you can complain to the Office of the Privacy Commissioner of Canada.

The store and the draw are for adults. We do not knowingly collect information from children. If you believe a child has given us information, tell us and we will delete it.

If this policy changes we will update the effective date at the top. If a change is material and affects email we have consent for, we will say so in the email itself.

See also our Terms of Service.