Easy Canvas Prints® Privacy Statement

Last Revised: 2021-07-28

Easy Canvas Prints® ("ECP") is committed to protecting your privacy while providing quality services that give you an enjoyable and safe online experience. This Privacy Statement (this "Statement") applies to the ECP website at https://www.easycanvasprints.ca and governs the data collection and usage by ECP in connection with this website.

Consent

It is important to us that we collect, use or disclose your personal information where we have your consent to do so. Depending on the sensitivity of the personal information, your consent may be implied, deemed (using an opt-out mechanism) or express. Express consent can be given orally, electronically or in writing. Implied consent is consent that can reasonably be inferred from your action or inaction. For example, when you enter into an agreement with us, we will assume your consent to the collection, use and disclosure of your personal information for purposes related to the performance of that agreement and for any other purposes identified to you at the relevant time.

Typically, we will seek your consent at the time that we collect your personal information. In certain circumstances, your consent may be obtained after collection but prior to our use or disclosure of your personal information. If we plan to use or disclose your personal information for a purpose not previously identified (either in this Privacy Policy or separately), we will endeavor to advise you of that purpose before such use or disclosure.

We may collect, use or disclose your personal information without your knowledge or consent where we are permitted or required to do so by applicable law or regulatory requirements.

You may change or withdraw your consent at any time, subject to legal or contractual obligations and reasonable notice, by contacting our Privacy Officer using the contact information set out below. All communications with respect to such withdrawal or variation of consent should be in writing and addressed to our Privacy Officer.

We assume that, unless you advise us otherwise, that you have consented to the collection, use and disclosure of your personal information as explained in this Privacy Policy.

Collection of Information about You

This policy applies to personal information. For the purposes of this policy, personal information is any information about an identifiable individual, other than the person's business title or business contact information when used or disclosed for the purpose of business communications.

ECP collects personal information, such as your e-mail address, physical address, name, phone number, order history, and credit card and payment information, on its website when you register, save a design, or place an order. This information is collected directly from you when you voluntarily provide it to us, for example, by placing an order or filling out forms on our website. ECP also may collect non-personally identifiable information, such as general geographic information, about you.

ECP may also passively collect information about your computer hardware and software. This information may include: your IP address, browser type, domain names, access times and referring website addresses, ECP templates made, activity on the site, operating system information, and other similar information such as logs of referring websites or browsing activity. This information is used by ECP for the operation of its services, to maintain quality of service, and to provide general statistics regarding use of the ECP website.

ECP encourages you to review the privacy statements of websites you choose to visit from links that may be posted on the ECP website so you can understand how those websites collect, use, and share your information. ECP is not responsible for the privacy statements or other content on websites outside of the ECP website or for the information practices of these third parties.

Use of Information about You

ECP collects and uses information about you, including personal information, and your use of the ECP website to operate the ECP website and affiliated websites and to deliver the services you have requested, such as fulfilling your orders. If you have opted to receive marketing messages, ECP also uses personal information from time to time to inform you of other products or services available from ECP and its affiliates. ECP may also contact you via surveys to conduct research about your opinion of current services or of potential new services. Note that you may opt out of being contacted by ECP for any research or product updates at any time through links at the bottom of every email from ECP.

ECP may, from time to time, contact you on behalf of third-party business partners about a particular offering that may be of interest to you. ECP also uses third-party companies to help serve targeted product recommendations. These companies may use data about you collected from this site in order to provide recommendations for products and services that might be of interest to you.

To learn more about behavioral advertising or to opt out of this type of advertising, you can visit http://networkadvertising.org. You may also opt out by calling us at 1-844-278-8324. In addition, ECP may share data, including personal information, with trusted partners to help us perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. ECP requires these third parties to maintain the confidentiality of your information and to not use your personal information except to provide services to ECP.

ECP keeps track of the websites and pages our customers visit within and from the ECP website in order to determine what ECP services are the most popular. This data is used to deliver customized content and advertising from ECP to customers whose behavior indicates that they are interested in a particular subject area.

ECP does not collect personal information from you to track you over time and across third party websites. As a result, ECP does not specifically respond to web browser Do Not Track signals.

ECP uses Google Analytics to collect and process certain analytics data; Google provides some additional privacy options described at http://www.google.com/policies/privacy/partners/.

Disclosure of your personal information

We may share your personal information with our employees, volunteers, contractors, consultants and other parties who require such information to assist us with managing our relationship with you, including: third parties that provide services to us or on our behalf for email marketing; third parties that assist ECP in the provision of services to you, including customer service support; and third parties whose services we use to conduct our business, including survey tools and internal research for improving our products and services, in particular the following (the below list may be updated by ECP from time to time):

• Salesforce
• FreshDesk
• Active Campaign
• Five9
• HotJar

Any service providers used in the course of fulfilling the above business purposes are contractually obligated to use personal information received from ECP solely for the purpose of providing the service providers’ service to ECP.

Our primary data centers are located in the United States and the European Union. As a result, your personal information may, subject to applicable laws governing the collection, use and disclosure of personal information, be transferred or stored outside of Canada. ECP takes reasonable measures to protect your personal information that is transferred or stored outside of Canada, including but not limited to reasonable contractual measures, encryption, firewalls, physical security measures and regular security reviews. Please note that when your data is transferred or stored outside of Canada, your personal information may potentially be accessible to law enforcement and national security authorities of that outside jurisdiction.

ECP will disclose personal information about you without notice to you only if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the requirements of the law or comply with legal process served on ECP or the site; (b) protect and defend the rights or property of ECP; (c) act under exigent circumstances to protect the personal safety of ECP, ECP users, or the public, or (d) in the course of, or completion of, a change in ownership of or the grant of or the grant of a security interest in all or part of ECP through, for example an asset or share sale, or some other form of business combination, merger or joint venture, provided that such party is bound by appropriate agreements or obligations and required to use and disclose your personal information in a manner consistent with the use an disclosure provisions of this Privacy Policy, unless you consent otherwise.

Retention

ECP will retain your personal information only for so long as it is necessary for the purpose for which the information was collected, as set out below. The below data retention framework is subject to applicable law, and we revise the retention period as is reasonable and appropriate in the circumstances, and as required by law.

ECP takes commercially reasonable efforts to destroy personal information after the applicable retention period in a secure manner that is appropriate to the level of the sensitivity of the information.

Use of Cookies

The ECP website may use "cookies" to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a web server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie to you.

One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the website server that you have returned to a specific page. For example, if you register with the ECP website or services, a cookie helps ECP recall your specific information on subsequent visits. This simplifies the process of recording your personally identifiable information, such as your billing addresses, shipping addresses, and other similar information. When you return to the same ECP website, the information you previously provided can be retrieved, so you can easily use the ECP features that you have customized.

You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the ECP services or websites you visit.

Complaints/Inquiries

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

You may exercise your rights under this Privacy Policy by calling us at 1-844-278-8324 or by email us at privacy@easycanvasprints.ca.

Security

ECP uses physical, technical and organizational safeguards appropriate to the sensitivity of the personal information in question. These safeguards are designed to prevent your personal information from unauthorized access, use or disclosure for the personal information we store. ECP aims to secure the personal information you provide using computer servers in a controlled, secure environment, reasonably protected from unauthorized access, use or disclosure. When certain sensitive personal information (such as a credit card number) is transmitted to other websites, such as payment information in connection with transactions through the ECP website, we use encryption, such as the Secure Socket Layer (SSL) protocol, in an effort to protect that information.

ECP will not record, store, or save your credit card number without providing notice to you and receiving your express consent.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to the ECP website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the ECP website.

Children Under the Age of 14

No one under age 14 may provide any personal information on the ECP website. We do not knowingly collect personal information from children under 14. If you are under 14, do not use or provide any information on this website or on or through any of its features/register on the website, or provide any information about yourself to us, including your name, address, telephone number, or email address you may use. If we learn we have collected or received personal information from a child under 14 without verification of parental consent, we will delete such data.

Requests for Access or Disposal / Complaints

You can ask to see your personal information. If you want to review, verify or correct, or want to have us permanently destroy your personal information that is under our control, please contact our Privacy Officer. Please note that any such communication must be in writing.

When making a request regarding your personal information, please note that we may request specific information from you to enable us to confirm your identity and right to access or request disposal, as well as to search for and provide you with the personal information that we hold about you. If you require assistance in preparing your request, please contact the office of our Privacy Officer. We will respond to your requests within 30 days, unless we are permitted by law to extend that time.

Your right to access or request disposal of the personal information that we hold about you is not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse to provide some or all of the personal information that we hold about you. In addition, the personal information may have been destroyed, erased or made anonymous in accordance with our record retention obligations and practices.

In the event that we cannot provide you with access to or dispose of your personal information, we will endeavor to inform you of the reasons why, subject to any legal or regulatory restrictions.

If you have any complaints regarding ECP's privacy practices (including a refusal to give you access or to grant your request to dispose of your personal information), you may make a written complaint to our Privacy Officer. You may also make a complaint to the Office of the Privacy Commissioner of Canada regarding any outstanding or unresolved complaints through its website found here: https://www.priv.gc.ca/en/report-a-concern/file-a-formal-privacy-complaint/.

Changes to this Statement

ECP may occasionally update this Privacy Statement to reflect changes in our practices or applicable law. ECP encourages you to periodically review this Statement to be informed of how ECP is protecting your information. If ECP modifies this Statement, we will make it available through this website, and indicate the date of the latest revision. In the event that the modifications materially alter your rights or obligations hereunder, ECP will make reasonable efforts to notify you of the change. For example, ECP may send a message to your email address, if we have one on file, or generate a pop-up or similar notification when you access the website for the first time after such material changes are made. Your continued use of the ECP website after the revised Statement has become effective indicates that you have read, understood and agreed to the current version of this Statement.

Contact Information

ECP welcomes your questions and comments regarding this Statement. If you believe that ECP has not adhered to this Statement, please use the inquiry form to contact us.

You may contact us regarding this Privacy Policy at:

• Email address: privacy@easycanvasprints.ca
• Phone number: 1-844-278-8324