How Printdeck collects, uses, and protects your personal information, in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
This policy applies to printdeck.ca and the services offered on it. “Personal information” means information about an identifiable individual.
What we collect
- Account details — name, email address, phone number, and a securely hashed password.
- Order details — the items and options you configure, your fulfilment choice, billing/shipping address, any purchase-order or project notes, and order history.
- Artwork files you upload for printing.
- Payment information — card payments are processed by Stripe. We never see or store your full card number; we retain only the transaction result and a Stripe reference.
- Marketing — your email address if you subscribe to our newsletter.
- Technical data — server logs (IP address, timestamps, request paths) kept for security, fraud prevention, and debugging.
How we use it
- To price, produce, and deliver your orders.
- To send transactional email — order confirmations, proofs, and shipping updates — via our email provider, Resend.
- To create and secure your account, including rate limiting and abuse detection.
- To provide customer support and handle returns or reprints.
- To send marketing email only where you have opted in; you can unsubscribe at any time.
- To meet tax, accounting, and other legal obligations.
Service providers
We share the minimum personal information needed with providers who act on our instructions:
- Stripe — payment processing.
- UniUni — shipping label creation and parcel tracking (recipient name, address, and phone).
- Resend — delivery of transactional and marketing email.
- Our hosting and database providers, who store data on our behalf.
Some providers may process or store data outside Canada (for example, in the United States), where it may be subject to the laws of that jurisdiction.
Retention
- Uploaded artwork is treated as temporary and is automatically deleted about 30 days after upload. Keep your own copy.
- Order and account records are kept while your account is active and afterwards for as long as needed for warranty, tax, and legal purposes (generally up to seven years for financial records).
- Server logs are rotated on a rolling basis.
Cookies
We use a single essential cookie to keep you signed in. We do not load third-party advertising or analytics trackers. Stripe and Cloudflare Turnstile may set their own cookies when you reach the payment or anti-bot steps.
Your rights
You may ask us to access, correct, or delete your personal information, or to withdraw consent for marketing. Update your profile from your account, or contact us using the details below. We will respond within a reasonable time. You may also contact the Office of the Privacy Commissioner of Canada if you have an unresolved concern.
Security
Passwords are hashed with bcrypt, sessions use signed HTTP-only cookies, traffic is served over HTTPS, and access to production data is limited to staff who need it. No method of transmission or storage is perfectly secure, but we work to protect your information.
Contact
Privacy questions: hello@printdeck.ca, or use the contact form.
Last updated: 2026-09-08.