Privacy Policy

Last updated: July 26, 2025

Privacy Policy

At Lunettes Artefact (artefact.store), we are committed to protecting your privacy. This policy explains how we collect, use, store, and share your personal data in accordance with Canada’s PIPEDA and proactively with the EU’s General Data Protection Regulation (GDPR).

1. Data Controller

Lunettes Artefact
Based in Canada
Contact: piprotection@artefact.store

2. Personal Data Collected

  • First and last name
  • Postal address
  • Email address
  • Phone number
  • Payment information (handled via Stripe or PayPal — never directly accessible to us)
  • Browsing data (cookies, Google Analytics)

3. Purposes and Legal Bases (Article 6 GDPR)

PurposeLegal Basis
Order processingPerformance of a contract
Customer communication (email/phone)Legitimate interest / Consent
Secure paymentsPerformance of a contract
Newsletter (if subscribed)Consent
Website analytics (Google Analytics)Consent via cookie banner

4. Data Sharing

We do not sell or rent your personal data. We may share your data with trusted third parties:

  • Stripe and PayPal (payment processing)
  • Google Analytics (site analytics)
  • Shipping and logistics partners

For international transfers (e.g., to the U.S.), we implement appropriate safeguards (e.g., Standard Contractual Clauses under the GDPR).

5. Data Retention

  • During the business relationship
  • Up to 7 years for legal/tax obligations
  • Until a deletion request is made, where legally applicable

6. Your Rights (GDPR & PIPEDA)

  • Access your personal data
  • Correct inaccurate information
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Object to processing (including marketing)
  • Withdraw your consent at any time
  • Receive your data in a portable format

To exercise your rights, contact: piprotection@artefact.store

7. Cookies and Tracking

We use cookies to:

  • Ensure proper functionality of the website
  • Measure site performance and traffic (Google Analytics – with your consent)

You can manage your preferences via the cookie banner shown when you first visit the site.

8. International Transfers

Some of our service providers process data outside of Canada. We ensure that your data is protected in line with PIPEDA and GDPR requirements.

9. Data Security

We implement technical and organizational measures including:

  • SSL encryption (HTTPS)
  • Restricted access to sensitive information
  • Secure hosting via WordPress / WooCommerce

10. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be published on this page with a new effective date.

11. Contact

For any privacy-related inquiries: piprotection@artefact.store