Privacy Policy

Who we are

Mavaro operates mavarostudios.com. If you have a question about your information, email info@mavarostudios.com or call (431) 887-7481. We handle privacy requests ourselves; there is no ticket queue to get lost in.

What we collect

When you create an account: your name, email address, and a password. We never store the password itself — only a one-way hash of it, which cannot be reversed back into your password.

When you place an order: your shipping address, phone number, the contents of your order, and any notes you add for the shop. We keep a frozen copy of the artwork exactly as it was when you ordered, so that what we print and what you approved can never drift apart.

When you design something: the images you upload and the layouts you save. These are yours. They are stored on our own equipment, not a public bucket, and can only be read by your signed-in account — or by anyone you deliberately give a share link to.

When you contact us: your name, email address, phone number if you give it, your message, and any file you attach. These are kept so we can answer you and so nothing gets lost if an email goes astray.

When you sign in: the time of the attempt, the email address used, and your IP address. This is what stops someone brute-forcing their way into your account, and it is the only thing we use it for.

If you sign in with Google: your name, email address, and Google account identifier — nothing else from your Google account, and we never gain access to anything in it.

What we don't collect

Your card details never reach our servers. Payment information goes directly from your browser to Stripe, our payment processor. We receive only a payment reference, the amount, and whether it succeeded. We could not leak your card number if we tried, because we never have it.

We don't buy personal data from anyone, and we don't sell or rent your information. There is no version of our business where that makes sense.

Why we're allowed to have it

We collect what we need to do the thing you asked us to do: take your order, print it, ship it, and be able to talk to you about it afterwards. Sign-in records are kept because we have a legitimate interest in your account not being broken into. Analytics only runs if you agree to it.

Cookies and analytics

Essential cookies. One cookie keeps you signed in. It holds nothing but an opaque session identifier, and the site cannot work without it, so it is always set. A second small cookie remembers your analytics choice so we stop asking.

Analytics and ads. We use Google Analytics to see which pages people find useful, and the Meta (Facebook) pixel to see whether our ads lead to orders. Both load only if you press Accept on the banner — decline and neither script is loaded at all, not merely disabled. You can change your mind at any time from the link in the footer.

Who else sees your information

We use a small number of services to run the shop. Each sees only what it needs:

• Stripe — payment processing. Sees your payment details and order amount, and is bound by its own privacy terms and by card-network rules.
• ImprovMX — sends and receives our email: receipts, proofs, password resets and replies to you. Sees your email address and the contents of those messages.
• Google Analytics and Meta — only if you accept the analytics cookies.
• Shipping carriers — receive your name and delivery address so they can get the parcel to you.

That is the entire list. We will disclose information to a public authority only where the law actually requires it.

Where it's kept

Your account, orders, and artwork are stored on our own equipment in Canada. Some of the services listed above process data outside Canada, which means that information can be subject to the laws of those countries.

How long we keep it

Order records — what was bought, for how much, and where it went — are kept for seven years, because tax law requires it. Designs and uploaded artwork are kept while your account is open, so you can reorder. Sign-in records are pruned automatically after 30 days. Close your account and everything not legally required to be retained goes with it.

Your rights

You can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that's wrong;
• delete your account and your designs;
• stop emailing you anything that isn't about an order you placed.

You can do most of this yourself on your Account page — change your details, turn reminder emails off, or delete your account — and every reminder email has a link to stop them.

Email info@mavarostudios.com and we'll deal with it within 30 days. If you aren't happy with how we've handled a request, you can complain to the Office of the Privacy Commissioner of Canada.

Keeping it safe

The whole site is served over an encrypted connection. Passwords are hashed, never stored. Uploaded artwork is not publicly reachable — every request for it is checked against your session. Changing your password signs out every other session on your account. No system is perfect, but we take this seriously and we'd rather over-build it.

Children

This is a print shop for businesses and events. It isn't aimed at children, and we don't knowingly collect information from anyone under 13. If you believe we have, tell us and we'll delete it.

Changes

If we change this policy we'll update the date at the top, and we'll tell you directly if the change actually affects you. Our Terms of Service cover the rest of the relationship.