Who we are
The Wizard Workshop is an Ontario-based online store. Questions about this Privacy Policy or requests concerning personal information can be sent to:
merlin@thewizardworkshop.ca
Information we collect
We collect personal information that is reasonably needed to operate the store and serve customers. Depending on how you use the site, this may include:
- Your name, email address, telephone number, billing address, and shipping address.
- Order details, products purchased, prices, shipping choices, transaction status, and customer-service history.
- Information you provide when contacting us or submitting a refund, replacement, privacy, or other support request.
- Technical information such as IP address, browser and device information, timestamps, security logs, and essential cookie or session identifiers.
- Payment-related confirmation supplied by Square, such as transaction status and a transaction reference. The Wizard Workshop does not intend to receive or store full payment-card numbers.
Please do not send sensitive information that we have not requested.
Why we use personal information
We use personal information to:
- Operate the cart, checkout, order, shipping, and customer-service functions.
- Process and fulfil orders, arrange delivery, and provide tracking information.
- Communicate about purchases, cancellations, returns, replacements, refunds, privacy requests, and support issues.
- Confirm transactions and prevent fraud, abuse, security incidents, and technical problems.
- Maintain business, tax, accounting, dispute, and legal records.
- Protect our rights, customers, systems, and services.
- Comply with legal obligations and respond to lawful requests.
If we later wish to use personal information for a materially different purpose, we will provide appropriate notice and obtain consent where required.
Consent and choices
By providing personal information for a purchase or service request, you consent to its collection, use, and disclosure for purposes that are reasonably necessary to complete that transaction or request.
We will seek an appropriate additional choice or consent for nonessential uses. The private store currently has no customer marketing program or nonessential analytics tracking enabled.
You may withdraw consent for optional uses by contacting us. Withdrawal does not affect processing already completed and may not apply where information must be retained or used for legal, security, accounting, transaction, or dispute purposes.
Cookies and local storage
The store uses essential cookies or similar browser storage to support functions such as the shopping cart, checkout, security, session continuity, and saved visitor preferences.
If customer accounts are enabled later, essential account and login cookies may also be used. If nonessential analytics, advertising, or marketing technologies are introduced, this policy and the consent experience must be updated before those technologies are enabled.
Blocking essential cookies may prevent the cart, checkout, or other site features from working correctly.
When we share information
We disclose only the information reasonably needed for the service being provided. Recipients may include:
- Website, hosting, security, email, and WooCommerce service providers that help operate the store.
- Printify, Duplium, or another approved print and fulfilment provider that produces and ships an order.
- Shipping carriers and delivery partners.
- Square, the selected payment provider, which processes payment information under the Square privacy notice for customers.
- Accountants, insurers, legal advisers, and other professional advisers when reasonably necessary.
- Government, regulatory, law-enforcement, court, or other parties when required or permitted by law.
- A successor organization if the business is reorganized, sold, or transferred, subject to appropriate protections.
We do not sell personal information.
Processing outside Canada
Some service providers may process or store personal information outside Ontario or Canada. Information processed in another jurisdiction may be accessible to courts, law-enforcement agencies, or governments under that jurisdiction's laws.
Retention
We retain order and transaction records for six years from the end of the last tax year to which they relate. We retain them longer only when required by law or reasonably needed for an unresolved dispute, investigation, or claim.
Other personal information is retained only as long as reasonably necessary for its identified purpose. When it is no longer required, we securely delete or anonymize it under our retention procedures.
Safeguards
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information. These include limiting access, maintaining supported software, using protected connections where appropriate, and working with service providers that are expected to protect the information they handle.
No system can guarantee absolute security. If a privacy breach creates a real risk of significant harm, we will follow applicable assessment, notification, reporting, and recordkeeping requirements.
Access, correction, deletion, and complaints
You may ask about personal information we hold about you and request access to or correction of that information. You may also request deletion, subject to information we must retain for legal, accounting, security, transaction, or dispute purposes.
Send requests or privacy complaints to merlin@thewizardworkshop.ca. We may need to verify your identity before responding. We will explain any lawful reason that prevents us from fulfilling all or part of a request.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
Children
The store is not directed to children under 13, and we do not knowingly seek personal information from children under 13 without appropriate consent. If you believe a child has provided personal information improperly, contact us so we can investigate and take appropriate action.
Changes to this policy
We may update this Privacy Policy when our services, providers, practices, or legal obligations change. The published policy will show its effective or last-updated date. Material changes will receive additional notice or consent where required.