Privacy Policy

Last Updated: October 3, 2026

Giggles & Clay ("we", "us", or "our") operates www.gigglesandclay.com (the "Site"). We are fully committed to protecting the privacy of our customers and users. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information in compliance with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Law 25 (Act to modernize legislative provisions as regards the protection of personal information), and other provincial private-sector privacy laws.

1. ACCOUNTABILITY & PRIVACY OFFICER

Under Canadian law, even as a single-operator business, we are responsible for the personal information under our control. The business owner serves as our designated Privacy Officer to oversee compliance with this policy. If you have questions, complaints, or wish to exercise your rights regarding your personal data, you can reach out directly via our Contact Us page.

2. PERSONAL INFORMATION WE COLLECT

We only collect the minimum amount of data required to handle your requests and process your orders. Order Information (Provided by You): To fulfill orders, we collect your name, billing address, shipping address, payment details (processed securely via Shopify's encrypted system), email address, and phone number .Device Information (Automatically Logged): When you access our store, the Shopify platform automatically logs basic technical infrastructure data (like your IP address and web browser version) purely to ensure our storefront loads securely and works properly on your device.

3. HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information strictly to conduct our business and fulfill our commercial obligations to you, including to: Fulfill, process, and ship orders placed through the Site. Communicate with you regarding order tracking, shipping updates, or customer service requests. Screen orders for potential risk or fraud. Provide you with marketing updates or promotional offers only if you have given us your explicit consent to do so, in strict compliance with the Canadian Anti-Spam Legislation (CASL).

4. SHARING AND CROSS-BORDER TRANSFERS

We do not sell, rent, or trade your personal information. We share your data only with trusted core service providers necessary to run our platform and deliver your orders: Shopify: We use Shopify to power our online store. You can read more about how Shopify handles your data in the Shopify Privacy Policy. Fulfillment & Payments: We share necessary details with payment gateways (e.g., Shopify Payments, PayPal) and shipping carriers (e.g., Canada Post) to process payments and ship your physical items.

Cross-Border Transfer Notice: As Shopify utilizes secure global servers, your personal data may be transferred, stored, or processed outside of Canada (such as in the United States or Europe). While outside of Canada, your data is subject to the laws of those jurisdictions.

5. COOKIES AND TRACKING TECHNOLOGIES

We do not use marketing pixels (like the Meta Pixel), behavioral advertising trackers, or third-party analytics cookies (like Google Analytics) to profile or follow your behavior across the internet,

Our website only uses strictly necessary, functional cookies provided natively by Shopify. These are technical files required entirely to run core storefront features, such as maintaining items in your shopping cart while you browse, protecting checkout security, and remembering your region preferences. Because these cookies do not track or profile you, they do not require an active opt-out under Canadian privacy frameworks.

6. RETENTION AND SECURITY

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy or to satisfy legal, accounting, or tax reporting requirements. Your data is protected using Shopify's native, industry-standard security safeguards, including SSL encryption, to protect against unauthorized access, loss, or alteration.

7. YOUR RIGHTS (ACCESS, CORRECTION, AND DELETION)

You have the right to request access to the personal information we hold about you, to request that it be corrected if it is inaccurate, or to request its complete deletion from our systems. To exercise any of these rights, please contact us via our Contact Us page. We will respond to your request within 30 days as required by law.