Privacy Policy

Who we are

Mavaro operates mavarostudios.com. If you have a question about your information, email info@mavarostudios.com or call (431) 887-7481. We handle privacy requests ourselves; there is no ticket queue to get lost in.

What we collect

When you create an account: your name, email address, and a password. We never store the password itself — only a one-way hash of it, which cannot be reversed back into your password.

When you place an order: your shipping address, phone number, the contents of your order, and any notes you add for the shop. We keep a frozen copy of the artwork exactly as it was when you ordered, so that what we print and what you approved can never drift apart.

When you design something: the images you upload and the layouts you save. These are yours. They are stored on our own equipment, not a public bucket, and can only be read by your signed-in account — or by anyone you deliberately give a share link to.

When you sign in: the time of the attempt, the email address used, and your IP address. This is what stops someone brute-forcing their way into your account, and it is the only thing we use it for.

If you sign in with Google: your name, email address, and Google account identifier — nothing else from your Google account, and we never gain access to anything in it.

What we don't collect

Your card details never reach our servers. Payment information goes directly from your browser to Stripe, our payment processor. We receive only a payment reference, the amount, and whether it succeeded. We could not leak your card number if we tried, because we never have it.

We don't buy personal data from anyone, we don't build advertising profiles, and we don't sell or rent your information. There is no version of our business where that makes sense.

Why we're allowed to have it

We collect what we need to do the thing you asked us to do: take your order, print it, ship it, and be able to talk to you about it afterwards. Sign-in records are kept because we have a legitimate interest in your account not being broken into. Analytics only runs if you agree to it.

Cookies and analytics

Essential cookies. One cookie keeps you signed in. It holds nothing but an opaque session identifier, and the site cannot work without it, so it is always set. A second small cookie remembers your analytics choice so we stop asking.

Analytics. We use Google Analytics to see which pages people find useful. It only loads if you press Accept on the banner — decline and no analytics script is loaded at all, not merely disabled. You can change your mind at any time from the link in the footer.

We don't use advertising or retargeting pixels, and there is no third-party advertising network on this site.

Who else sees your information

We use a small number of services to run the shop. Each sees only what it needs:

• Stripe — payment processing. Sees your payment details and order amount, and is bound by its own privacy terms and by card-network rules.
• Resend — sends your order confirmations, invoices, and password-reset emails. Sees your email address and the contents of those messages.
• Google Analytics — only if you accept analytics cookies.
• Shipping carriers — receive your name and delivery address so they can get the parcel to you.

That is the entire list. We will disclose information to a public authority only where the law actually requires it.

Where it's kept

Your account, orders, and artwork are stored on our own equipment in Canada. Some of the services listed above process data outside Canada, which means that information can be subject to the laws of those countries.

How long we keep it

Order records — what was bought, for how much, and where it went — are kept for seven years, because tax law requires it. Designs and uploaded artwork are kept while your account is open, so you can reorder. Sign-in records are pruned automatically after 30 days. Close your account and everything not legally required to be retained goes with it.

Your rights

You can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that's wrong;
• delete your account and your designs;
• stop emailing you anything that isn't about an order you placed.

Email info@mavarostudios.comand we'll deal with it within 30 days. If you aren't happy with how we've handled a request, you can complain to the Office of the Privacy Commissioner of Canada.

Keeping it safe

The whole site is served over an encrypted connection. Passwords are hashed, never stored. Uploaded artwork is not publicly reachable — every request for it is checked against your session. Changing your password signs out every other session on your account. No system is perfect, but we take this seriously and we'd rather over-build it.

Children

This is a print shop for businesses and events. It isn't aimed at children, and we don't knowingly collect information from anyone under 13. If you believe we have, tell us and we'll delete it.

Changes

If we change this policy we'll update the date at the top, and we'll tell you directly if the change actually affects you. Our Terms of Service cover the rest of the relationship.