Personal identification information: Name, email address, phone number, mailing address, and billing information collected when you register, place an order, or contact us.

Order and transaction data: Details of purchases, order history, and payment records. Payment processing is handled by Stripe. We do not store full card numbers on our servers.

Account data: Username, password (hashed), and account preferences if you create an account.

Design and artwork files: Files you upload for custom merch orders or web shop setups.

Usage data: Pages visited, time on site, browser type, device information, and referral source collected automatically through cookies and analytics tools.

Communications: Emails, chat messages, or other communications you send to us.

We use the information we collect to:

• Process and fulfil your orders
• Communicate with you about your order status, design approvals, and support
• Manage your account and web shop or kiosk service
• Send transactional emails (order confirmations, shipping updates)
• Send promotional emails if you have opted in (you may opt out anytime)
• Improve our website and services through analytics
• Comply with legal obligations
• Prevent fraud and ensure platform security

We do not sell your personal information. We share your data only with trusted third parties required to deliver our services:

• Stripe for payment processing
• Shipping carriers (Canada Post, UPS, FedEx) for order delivery
• Vercel for website hosting and infrastructure
• Analytics providers for aggregated, anonymized usage data
• Legal and regulatory authorities where required by law

All third-party providers are required to handle your data in accordance with applicable privacy laws.

We use cookies and similar tracking technologies to improve your experience on our website. Cookies may be used to:

• Keep you signed in to your account
• Remember your cart and preferences
• Analyze site traffic and usage patterns

You can control cookies through your browser settings. Disabling cookies may affect certain features of the site.

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Order and transaction records are kept for a minimum of 7 years for accounting and tax purposes. You may request deletion of your account data at any time (subject to legal retention requirements).

As a Canadian resident, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent to the use of your personal information (where applicable)
• Request deletion of your personal data (subject to legal obligations)
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact us at privacy@bossypanda.com.

We implement industry-standard security measures to protect your personal information, including HTTPS encryption, secure password hashing, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "last updated" date. Continued use of our services after changes constitutes your acceptance of the updated policy.