PRIVACY POLICY

Last updated: October 4, 2026

Deer Park Woodwork (“Deer Park Woodwork,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information that we collect, use, and disclose in connection with our website, products, services, orders, and customer communications.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, place an order, communicate with us, use our online chat, subscribe to marketing communications, or otherwise interact with Deer Park Woodwork.

Our online store is hosted by Shopify. Shopify provides the ecommerce platform that allows us to sell our products and services to you.

1. Personal Information We Collect

Depending on how you interact with us, we may collect personal information such as:

• Your name
• Billing and shipping address
• Email address
• Telephone number
• Account or login information
• Order history and purchase information
• Product preferences and custom-order details
• Payment and transaction information
• Shipping and delivery information
• Communications you send to us, including emails, contact-form submissions, text messages, and online chat conversations
• Information you provide when requesting engraving, customization, returns, repairs, replacements, or customer support
• Device, browser, IP address, and website-usage information
• Information collected through cookies and similar technologies
• Marketing preferences
• Information associated with your Shopify or Shop account when applicable

Payment information may be collected and processed by Shopify, payment processors, banks, or other payment-service providers. We generally do not directly store complete payment-card information.

2. How We Use Personal Information

We may use personal information to:

• Process, fulfill, and deliver orders
• Process payments and transactions
• Communicate with you regarding an order, shipment, return, repair, replacement, or inquiry
• Provide customer support
• Verify your identity
• Manage customer accounts
• Provide custom or personalized products and services
• Respond to questions and requests
• Prevent, investigate, and protect against fraud, unauthorized transactions, chargebacks, abuse, and other unlawful activity
• Maintain records relating to purchases, shipping, disputes, and customer service
• Improve our products, website, services, and customer experience
• Perform analytics relating to our website and business
• Administer promotions, offers, contests, or special events
• Send marketing communications where permitted by law
• Comply with legal, tax, accounting, customs, regulatory, or law-enforcement requirements
• Establish, exercise, or defend legal claims
• Protect our rights, property, customers, business, and website

We seek to collect and use only the personal information reasonably necessary for the purposes for which it was collected. PIPEDA requires organizations to limit collection to what is needed and to limit use, disclosure, and retention to identified purposes unless another use is authorized by law or consent. Office of the Privacy Commissioner

3. Shopify and Our Online Store

Our website and online store are powered by Shopify.

When you visit our website or make a purchase, Shopify may process personal information on our behalf in order to provide ecommerce, checkout, payment, customer-account, security, analytics, fraud-prevention, and other services.

For certain processing of merchant customer data, Shopify describes the merchant as the data controller and Shopify as the data processor, subject to its applicable terms and Data Processing Addendum. Shopify

Because Shopify operates internationally, information processed through Shopify may be stored or processed in jurisdictions outside your province or country and may therefore be subject to the laws of those jurisdictions.

You can learn more about Shopify's privacy practices through Shopify's privacy documentation.

4. AI-Assisted Customer Support and Shopify Inbox

We may use Shopify Inbox, including Shopify's AI-assisted Inbox agent, to provide customer support through our website.

When you interact with our website chat, information you provide in the conversation may be processed by Shopify in order to generate responses, operate the chat service, provide customer support, and improve Shopify's services.

Shopify's Inbox agent may use information from our:

• Product catalogue
• Store policies
• Knowledge Base information
• Published website pages
• Blog posts
• Product-care guides
• Shipping and return information

to answer customer questions. Shopify also states that the Inbox agent may personalize certain responses or product recommendations using information such as customer preferences, sizes, purchase history, or an active Shop session when such information is available. Shopify Help Center

AI-generated responses may occasionally be inaccurate, incomplete, or out of date. Information provided through our AI-assisted chat should not be interpreted as modifying our published store policies, order terms, return policies, delivery estimates, or other terms of sale.

If there is a discrepancy between an AI-generated response and our published policies or written communication from Deer Park Woodwork, our published policies and direct written communications will govern.

Please avoid submitting sensitive personal information through online chat unless it is necessary for us to assist you.

You may request assistance from a member of our team if you would prefer not to interact with the AI-assisted chat.

5. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local storage, and similar technologies to operate the website and understand how customers use it.

These technologies may be used to:

• Keep the website functioning properly
• Remember preferences
• Maintain shopping carts and checkout sessions
• Recognize returning visitors
• Measure traffic and website performance
• Analyze how customers interact with our website
• Prevent fraud and improve security
• Measure advertising effectiveness
• Provide or personalize advertising where permitted

Some cookies are necessary for our website to function. Others may relate to analytics, advertising, or personalization.

Depending on your browser, device, and location, you may be able to manage cookies through your browser settings or through privacy controls made available on our website.

Disabling certain cookies may affect website functionality.

6. Analytics and Advertising

We may use third-party analytics and advertising services to understand website activity, measure advertising performance, and promote our products.

These services may receive information such as:

• IP address
• Browser and device information
• Pages viewed
• Products viewed
• Purchases or checkout activity
• Advertising interactions
• Cookie or device identifiers

These providers may include services made available through Shopify as well as advertising or analytics platforms that we choose to use.

Where legally required, we will seek consent before using non-essential cookies or technologies.

7. Marketing Communications

If you subscribe to our email or other marketing communications, we may send you information regarding products, sales, promotions, new releases, or other Deer Park Woodwork news.

You may unsubscribe at any time by using the unsubscribe link included in our marketing emails or by contacting us.

Transactional communications relating to an existing order or customer-service matter are not considered marketing communications and may continue even if you unsubscribe from marketing.

8. When We Share Personal Information

We may share personal information with third parties when reasonably necessary to operate our business, fulfill an order, provide services, protect our rights, or comply with the law.

These may include:

• Shopify
• Payment processors
• Banks and financial institutions
• Shipping companies and couriers
• Customs brokers and customs authorities
• Fraud-prevention and security providers
• Website-hosting and technology providers
• Analytics providers
• Advertising platforms
• Email and marketing-service providers
• Customer-support providers
• Professional advisers, including accountants, lawyers, and insurers
• Government, tax, customs, regulatory, or law-enforcement authorities where required
• Other service providers acting on our behalf

We may also disclose information where reasonably necessary to investigate fraud, enforce our policies or agreements, respond to a dispute or chargeback, collect amounts owing, protect our legal rights, or comply with a court order or other legal obligation.

We do not sell customer personal information in the ordinary meaning of selling customer lists for money.

9. Shipping and International Orders

When you place an order, we may provide necessary personal information to shipping carriers, customs brokers, customs authorities, and other logistics providers.

This information may include your:

• Name
• Delivery address
• Telephone number
• Email address
• Order contents
• Product value
• Customs or tariff information

For international shipments, information may be disclosed to governmental or customs authorities in the destination country as required to process and deliver the shipment.

10. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required for legitimate business, accounting, tax, warranty, fraud-prevention, dispute-resolution, or legal purposes.

For example, we may retain information relating to an order after it has been completed in order to maintain tax and accounting records, respond to customer inquiries, establish proof of delivery, administer warranty or repair matters, respond to payment disputes or chargebacks, and comply with legal obligations.

When personal information is no longer reasonably required, we may delete, destroy, or anonymize it, subject to applicable legal requirements.

PIPEDA specifically requires organizations to keep personal information only as long as necessary for identified purposes and to have procedures for retention and destruction. Office of the Privacy Commissioner

11. Security

We take reasonable administrative, technical, and physical steps designed to protect personal information against unauthorized access, loss, theft, disclosure, copying, misuse, or modification.

However, no online system, electronic transmission, or method of storage is completely secure, and we cannot guarantee absolute security.

Canadian privacy guidance requires safeguards to be appropriate to the sensitivity of the personal information involved. Office of the Privacy Commissioner

12. Your Privacy Rights

Depending on applicable law, you may have the right to:

• Ask what personal information we hold about you
• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Withdraw consent to certain uses of your information, subject to legal or contractual restrictions
• Ask questions about how your personal information has been used or disclosed
• Make a privacy complaint

PIPEDA generally provides individuals with the right to know about personal information an organization holds about them and to request access and correction, subject to certain exceptions. Office of the Privacy Commissioner

We may need to verify your identity before responding to a privacy request.

Certain information may need to be retained despite a deletion or withdrawal request where required for legal, tax, accounting, fraud-prevention, contractual, or dispute-resolution purposes.

13. Withdrawal of Consent

Where we rely on your consent, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice.

Withdrawing consent may affect our ability to provide certain products or services. For example, we require certain contact, payment, and delivery information in order to fulfill an order.

14. Children's Privacy

Our website and products are intended for a general audience and are not directed specifically to children.

We do not knowingly collect personal information from children for the purpose of marketing directly to them.

If you believe that a child has provided personal information to us improperly, please contact us.

15. Third-Party Websites

Our website may contain links to websites, applications, social-media services, or services operated by third parties.

We are not responsible for the privacy practices, security, or content of third-party websites. We encourage you to review the privacy policies of those services before providing them with personal information.

16. Cross-Border Processing

Some of our service providers may process or store information outside Ontario or outside Canada.

As a result, personal information may be subject to the laws of the jurisdiction in which it is stored or processed and may be accessible to courts, law-enforcement agencies, or governmental authorities in accordance with those laws.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, services, legal requirements, or business operations.

When we make changes, we will update the “Last updated” date at the top of this policy.

We encourage you to review this Privacy Policy periodically.

18. Contact Us

If you have questions about this Privacy Policy, wish to make a privacy request, or have a concern regarding how your personal information has been handled, please contact:

Deer Park Woodwork
Toronto, Ontario, Canada
Email: deerparkwoodwork@gmail.com

Please include “Privacy Request” in the subject line where applicable.

If you are not satisfied with our response, you may also have the right to contact the Office of the Privacy Commissioner of Canada regarding a privacy concern. Ontario private-sector businesses are generally subject to PIPEDA rather than a separate general Ontario private-sector privacy statute. 

---