Privacy Policy

Last updated: July 9, 2026

At Hannah Made Co., we value your privacy just as much as we value your memories. This Privacy Policy explains how we collect, use, and protect your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Customer-Uploaded Photos & Personalization

Because our memory magnets and Mini Adventure Society kits are custom-made, you will need to upload personal photographs. We treat these images as sensitive personal data:

• Order Fulfillment Only: We use your uploaded photos strictly to produce and ship your order.
• No Unauthorized Marketing: We will never use your personal photos for our social media, website examples, or marketing materials unless you give us separate, explicit written consent to do so.
• Processing & Storage: Photos are securely processed through our personalization application, NINEMAGS, and our e-commerce platform, Shopify. Uploaded image files are retained only for as long as necessary to fulfill your order and handle any potential remake requests (typically 30 days). After this operational period, production image files are deleted.

2. Information We Collect

To operate our store, we collect the following types of information:

• Identity & Contact Data: Name, shipping/billing address, email address, and phone number.
• Order & Payment Data: Order history and payment confirmation (payments are processed securely; we never see or store your full credit card number).
• Technical Data: IP address, browser type, device information, and essential cookies to ensure the website functions correctly.

3. How We Use Your Information

We use your information strictly for the following identified purposes:

• To process, produce, and deliver your orders.
• To provide customer support and handle any remake requests.
• To prevent fraud and maintain the security of our store.
• To send you marketing communications only if you have explicitly opted in.

4. Marketing & CASL Compliance

In accordance with Canada's Anti-Spam Legislation (CASL), we will only send you commercial electronic messages (such as newsletters or promotional offers) if we have your express opt-in consent. You can withdraw your consent at any time by clicking the "unsubscribe" link at the bottom of any marketing email. Opt-out requests are processed immediately or within a maximum of 10 business days.

5. Sharing with Service Providers

We do not sell or rent your personal information. We share data only with trusted third-party processors needed to operate our business. These include Shopify (our e-commerce and payment platform), NINEMAGS (our photo personalization software), and our shipping carriers (such as UPS or Canada Post). Please note that some of our service providers may store or process data outside of Canada (e.g., in the United States), making it subject to the laws of those jurisdictions.

6. Data Retention

We retain your general order and billing information for as long as required to comply with Canadian tax laws (typically 6 years from the end of the tax year, as mandated by the Canada Revenue Agency). Marketing consent records are retained as required by CASL.

7. Your Privacy Rights

Under PIPEDA, you have the right to request access to, or correction of, the personal information we hold about you. To make a request, please contact us using the details below. If you have concerns about how we handle your data, you also have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).

8. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please reach out to us:
Hannah Made Co.
Email: hello@hannahmadeco.com
Phone: 519.501.1925
Address: 71-635 Saginaw Parkway, Cambridge, ON, N1T 0C1, Canada