Privacy Policy

Last Updated: August, 2026

At Artimind (“we,” “us,” or “our”), we respect your privacy and are committed to protecting the personal information of our customers, website visitors, and other individuals who interact with us

This Privacy Policy explains how we collect, use, disclose, retain, protect, and otherwise handle personal information when you visit or use our website at https://shop.artimindedu.com/ (the “Website”), create an account, purchase products, contact us, subscribe to communications, submit a review, or otherwise interact with us.

This Privacy Policy is primarily intended for customers and visitors in Canada. It is designed to address applicable Canadian privacy requirements, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, substantially similar provincial privacy legislation.

If you are located in Quebec, additional requirements may apply under Quebec privacy legislation, including An Act respecting the protection of personal information in the private sector, as amended by Law 25.

If you are located outside Canada, additional privacy laws may apply to your circumstances. Where required by applicable law, we will comply with those requirements.

1. Personal Information We Collect

For purposes of this Privacy Policy, “personal information” generally means information about an identifiable individual, as defined by applicable privacy legislation.

The information we collect depends on how you interact with the Website.

Information You Provide Directly

We may collect information you provide to us when you:

• Create or maintain an account;
• Place an order;
• Purchase or return products;
• Request a refund or exchange;
• Contact customer service;
• Subscribe to newsletters or promotional communications;
• Submit a product review, comment, photograph, or other content;
• Participate in a promotion, contest, survey, or other activity;
• Contact us through email, telephone, contact forms, or other communication channels; or
• Otherwise voluntarily provide information to us.

This information may include:

• Full name;
• Billing address;
• Shipping address;
• Email address;
• Telephone number;
• Account username and password-related information;
• Order and purchase history;
• Products purchased, saved, or viewed;
• Customer service communications;
• Reviews, comments, photographs, and other submissions;
• Marketing and communication preferences;
• Information relating to returns, exchanges, refunds, warranties, or product inquiries; and
• Other information you voluntarily provide to us.

We seek to limit the information we collect to information that is reasonably necessary for the purposes described in this Privacy Policy or otherwise permitted or required by law.

Payment Information

When you purchase products through the Website, payment transactions may be processed by third-party payment processors.

Depending on the payment method, the payment provider may collect and process information such as:

• Payment card information;
• Payment credentials;
• Billing information;
• Transaction information;
• Fraud-prevention information; and
• Other information necessary to authorize and process a payment.

We generally do not store complete payment card numbers or card security codes on our own servers. Payment information may be collected and processed directly by the applicable payment processor in accordance with its privacy and security practices.

Information Collected Automatically

When you access or use the Website, certain information may be collected automatically, including:

• IP address;
• Browser type and version;
• Device type;
• Operating system;
• Language and regional settings;
• Approximate geographic location derived from technical information;
• Pages visited;
• Products viewed;
• Shopping cart activity;
• Referring website or URL;
• Date and time of visits;
• Website interaction and usage information;
• Search and navigation information;
• Error and diagnostic information; and
• Other technical information reasonably necessary to operate, secure, and improve the Website.

This information may be collected through server logs, cookies, pixels, analytics tools, and similar technologies.

2. Accounts and Login Information

If you create an account on the Website, we may collect and use information necessary to create and manage your account.

This may include your name, email address, username, password-related information, order history, account preferences, and other information associated with your account.

Passwords should be kept confidential. You should not share your account password with other individuals.

If you believe your account has been accessed without authorization, please contact us as soon as possible.

3. Comments, Reviews, and User-Submitted Content

If you submit a product review, comment, photograph, or other content that is intended to be publicly visible, that information may be viewed by other Website visitors.

Depending on the functionality used by the Website, we may associate your submission with information such as your name, username, email address, IP address, browser information, or other technical information.

Please do not include personal, confidential, financial, sensitive, or other information that you do not want to make publicly available in a review, comment, photograph, or other public submission.

We may moderate, remove, or refuse to publish user-submitted content where permitted by applicable law and our Website rules.

4. Images and Media

If you upload photographs, artwork, or other images to the Website, please consider whether the images contain embedded metadata, such as EXIF information or GPS location information.

Unless you intentionally wish to disclose such information, we recommend removing location or other sensitive metadata before uploading an image.

If you submit an image for public display, portions of the image and associated information may become publicly accessible depending on the functionality of the Website.

5. How We Use Personal Information

We may collect, use, and disclose personal information for purposes that a reasonable person would consider appropriate in the circumstances, including:

Orders and Transactions

• Processing and fulfilling orders;
• Processing payments;
• Confirming transactions;
• Shipping and delivering products;
• Providing order status and shipping updates;
• Processing cancellations, returns, refunds, exchanges, and warranties;
• Maintaining purchase and transaction records; and
• Providing customer service.

Accounts and Customer Support

• Creating and managing customer accounts;
• Authenticating users;
• Responding to questions and inquiries;
• Providing customer support;
• Maintaining records of customer communications; and
• Communicating with customers about products or services they have requested.

Website Operation and Improvement

• Operating and maintaining the Website;
• Providing shopping cart and checkout functionality;
• Remembering preferences;
• Understanding how visitors use the Website;
• Diagnosing technical problems;
• Improving Website functionality and performance;
• Developing and improving products, services, and customer experience; and
• Conducting analytics and reporting.

Security and Fraud Prevention

• Detecting and preventing fraud;
• Detecting unauthorized transactions;
• Protecting customer accounts;
• Preventing abuse, spam, and malicious activity;
• Detecting and responding to cybersecurity threats;
• Protecting our Website, systems, employees, customers, and business; and
• Investigating suspected unlawful or harmful activity.

Marketing and Communications

Where permitted by applicable law and where the required consent has been obtained, we may use personal information to:

• Send newsletters;
• Send promotional communications;
• Provide information about new products;
• Provide special offers and discounts;
• Recommend products;
• Provide educational or creative content; and
• Measure the effectiveness of marketing campaigns.

You may withdraw consent to optional marketing communications at any time, subject to applicable law.

Legal and Business Purposes

We may also use personal information:

• To comply with applicable laws and regulations;
• To comply with court orders, subpoenas, or other lawful requests;
• For accounting, tax, audit, and recordkeeping purposes;
• To establish, exercise, or defend legal claims;
• To enforce our terms, policies, and agreements;
• To protect our rights, property, and interests;
• In connection with a business transaction, reorganization, financing, merger, acquisition, sale, or transfer of assets; and
• For other purposes disclosed at or before the time information is collected or otherwise permitted or required by applicable law.

We will not use personal information for a new purpose that is incompatible with the original purpose of collection without obtaining additional consent where required by applicable law.

6. Consent

Where required by applicable privacy law, we will obtain meaningful consent before collecting, using, or disclosing personal information.

Depending on the circumstances, consent may be express or implied where permitted by law.

For example, when you provide information necessary to complete an order, we may use that information for purposes reasonably expected to fulfill and deliver the order, including payment processing, shipping, customer service, and transaction records.

For optional purposes, such as certain marketing activities, we will provide an appropriate opportunity to provide or decline consent where required.

The form of consent we seek will depend on the nature and sensitivity of the information and the circumstances of the collection, use, or disclosure.

We will generally seek express consent where:

• The information is sensitive;
• The use or disclosure is outside your reasonable expectations; or
• The collection, use, or disclosure creates a meaningful residual risk of significant harm.

You may withdraw consent to certain uses or disclosures at any time, subject to legal, contractual, or other reasonable restrictions.

Withdrawal of consent will not affect the lawfulness of processing that occurred before consent was withdrawn.

Where withdrawal of consent would prevent us from providing a product or service you have requested, we will explain the consequences where appropriate.

7. Marketing Communications

If you subscribe to our promotional communications, we may send you information about:

• New products;
• Art and craft supplies;
• DIY and creative materials;
• Stationery and related products;
• Promotions and special offers;
• Discounts;
• Product recommendations;
• Educational or creative content; and
• Other products and services offered by Artimind.

We will comply with applicable Canadian anti-spam requirements, including Canada’s Anti-Spam Legislation (CASL).

Where CASL applies, commercial electronic messages will be sent only where we have the required form of consent or another lawful basis permitted under CASL.

Commercial electronic messages will include the identification information and unsubscribe mechanism required by applicable law.

You may unsubscribe from promotional email communications at any time by using the unsubscribe mechanism included in the message or by contacting us.

We will process unsubscribe requests within the period required by applicable law and, where CASL applies, no later than 10 business days after receiving the request.

Unsubscribing from marketing communications will not prevent us from sending non-promotional transactional or service-related communications that are necessary to provide services you have requested, such as:

• Order confirmations;
• Payment confirmations;
• Shipping notifications;
• Delivery updates;
• Return or refund communications;
• Account-related notices; and
• Important service or security notices.

Where applicable, we may maintain records of consent, including the date, method, and scope of consent, for as long as reasonably necessary to demonstrate compliance.

8. Cookies and Similar Technologies

The Website uses cookies and similar technologies to operate, secure, analyze, and improve the Website.

Cookies are small files or pieces of information stored on or accessed from your device.

Depending on how the Website is configured, cookies and similar technologies may be used for:

• Maintaining your shopping cart;
• Keeping you signed in;
• Remembering preferences;
• Processing checkout and orders;
• Supporting Website security;
• Detecting fraud;
• Understanding Website traffic and usage;
• Measuring Website performance;
• Remembering product or browsing preferences;
• Measuring advertising effectiveness; and
• Supporting marketing activities where permitted.

Types of Cookies

Essential Cookies:
Essential cookies are necessary for core Website functions such as shopping cart, checkout, account authentication, security, and other services you have requested.

These cookies may operate without separate consent where permitted by applicable law because they are necessary to provide the requested functionality.

Functional Cookies:
Functional cookies may remember preferences and improve Website functionality.

Analytics Cookies:
Analytics technologies may help us understand how visitors use the Website, such as which pages are visited and how users interact with Website features.

Marketing or Advertising Cookies:
Where used and permitted by applicable law, marketing or advertising technologies may help us measure advertising effectiveness, understand campaign performance, or provide more relevant marketing.

Cookie Choices

Where required by applicable law, we will provide appropriate choices or consent mechanisms for non-essential cookies and similar technologies.

You may also manage cookies through your browser settings or other Website privacy controls.

Disabling certain cookies may affect the operation of the Website, including shopping cart, account, checkout, or other functionality.

9. Third-Party Service Providers

We may use third-party service providers to operate our business and provide services to you.

Depending on the services we use, these providers may include:

Payment Providers

Payment processors may process payment and transaction information necessary to complete purchases, prevent fraud, and provide payment services.

Shipping and Delivery Providers

Shipping carriers and fulfillment providers may receive information such as your name, shipping address, telephone number, email address, order number, and information necessary to deliver your order.

Website and Technology Providers

We may use providers for:

• Website hosting;
• Cloud infrastructure;
• Data storage;
• Website security;
• Content delivery;
• Technical support;
• Website maintenance;
• Backup services; and
• Other technology services.

Analytics Providers

Where applicable, third-party analytics providers may collect technical and usage information to help us understand Website traffic and improve the Website.

Email and Marketing Providers

Where applicable, third-party email or marketing service providers may process contact information and marketing preferences in order to send communications on our behalf.

Professional Providers

We may disclose information to lawyers, accountants, auditors, insurers, consultants, and other professional advisors where reasonably necessary.

Legal, Regulatory, and Security Authorities

We may disclose information where required or permitted by applicable law, including in response to lawful requests, court orders, regulatory requirements, investigations, or where necessary to protect our rights, customers, employees, property, or systems.

Service providers processing personal information on our behalf will be expected to use the information only for authorized purposes and to maintain safeguards appropriate to the sensitivity of the information.

We remain responsible for personal information under our control, including information transferred to service providers for processing, subject to applicable law.

10. Cross-Border Processing and Storage

Some of our service providers, technology providers, payment processors, hosting providers, analytics providers, or other third parties may be located outside Canada.

As a result, personal information may be transferred to, stored in, or processed in Canada or other jurisdictions, including jurisdictions where privacy laws may differ from those in your province or territory.

For example, service providers located in the United States or other countries may process information on our behalf.

When personal information is transferred to a service provider outside Canada, we will take reasonable steps appropriate to the circumstances to ensure that the information receives an appropriate level of protection and is handled only for authorized purposes.

Personal information processed outside Canada may be subject to the laws and lawful access requirements of the jurisdiction in which it is processed.

By using the Website or providing personal information, you acknowledge that information may be processed by service providers outside your province or outside Canada where permitted by applicable law.

Where required by law, including applicable Quebec privacy requirements, we will conduct the necessary assessments before transferring personal information to a jurisdiction outside Quebec or otherwise making such information available outside Quebec.

11. Third-Party Websites and Embedded Content

The Website may contain links to or embedded content from third-party websites, platforms, applications, or services.

Examples may include:

• Payment services;
• Social media services;
• Videos;
• Advertising services;
• Analytics services;
• Product review services; and
• Other third-party functionality.

Third parties may collect information about your use of their services and may use cookies or similar technologies.

Their collection and use of information are governed by their own privacy policies and terms.

We do not control and are not responsible for the privacy practices of third-party websites or services that we do not own or control.

We encourage you to review the privacy policies of third-party services before providing them with personal information.

12. Business Transactions

If Artimind is involved in a merger, acquisition, financing, restructuring, sale of assets, sale of all or part of the business, bankruptcy, insolvency, or another business transaction, personal information may be disclosed or transferred as part of that transaction where permitted by applicable law.

Any such transfer will be subject to applicable confidentiality, contractual, and privacy requirements.

Where required by law, we will provide notice or obtain consent in connection with such a transaction.

13. Retention of Personal Information

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including:

• Completing transactions;
• Providing customer service;
• Managing customer accounts;
• Maintaining business records;
• Meeting accounting and tax requirements;
• Preventing fraud and security incidents;
• Resolving disputes;
• Enforcing agreements;
• Complying with legal and regulatory obligations; and
• Maintaining records necessary to establish, exercise, or defend legal claims.

Different categories of personal information may have different retention periods.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy, or anonymize it, subject to applicable legal, accounting, tax, security, dispute-resolution, and business requirements.

If personal information is subject to an access request, legal hold, investigation, or other applicable requirement, we may retain it for as long as reasonably necessary to satisfy that requirement.

14. Accuracy of Personal Information

We take reasonable steps to keep personal information accurate, complete, and up to date where it is necessary for the purposes for which it is used.

You may request correction of personal information that is inaccurate or incomplete.

Where appropriate and permitted by law, we may communicate corrected information to third parties to whom the original information was disclosed.

15. Protecting Personal Information

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the personal information we hold.

Depending on the circumstances, safeguards may include:

• Access controls;
• Authentication controls;
• Password protection;
• Encryption where appropriate;
• Secure payment processing;
• Network and Website security measures;
• Monitoring and logging;
• Restricted access for employees and contractors;
• Confidentiality obligations;
• Security procedures;
• Secure storage;
• Backup and recovery measures; and
• Secure disposal practices.

Access to personal information is limited to individuals and service providers who require access for authorized business purposes.

However, no method of transmission over the Internet or electronic storage is completely secure.

Accordingly, while we take reasonable steps to protect personal information, we cannot guarantee that information transmitted to or through the Website will always be completely secure.

16. Privacy and Security Incidents

If we experience a privacy or security incident involving personal information, we will assess the incident and take reasonable steps to contain, investigate, and address it.

Where required by applicable law, we will notify affected individuals, regulators, and other organizations.

Under PIPEDA, where a breach of security safeguards creates a real risk of significant harm to an individual, applicable reporting and notification obligations may apply.

We will also maintain records of privacy and security breaches as required by applicable law.

Where PIPEDA applies, records of breaches of security safeguards involving personal information under our control will be maintained for the period required by law, including the applicable minimum two-year record-retention requirement.

Where Quebec privacy legislation applies, we will follow applicable requirements for assessing, documenting, reporting, and notifying individuals and regulators regarding confidentiality incidents that present a risk of serious harm.

17. Your Privacy Rights

Depending on where you live and which privacy laws apply, you may have rights relating to your personal information.

These rights may include the right to:

• Request access to personal information we hold about you;
• Ask about the purposes for which your personal information is being used;
• Ask about disclosures of your personal information;
• Request information about the categories of third parties to whom information has been disclosed;
• Request correction of inaccurate or incomplete information;
• Withdraw consent where applicable;
• Request deletion or destruction of personal information where permitted by law;
• Ask questions about our privacy practices;
• Make a privacy complaint; and
• Exercise other rights available under applicable provincial or federal privacy legislation.

These rights are subject to applicable legal exceptions and limitations.

For example, we may be required or permitted to retain certain information for tax, accounting, legal, fraud-prevention, security, dispute-resolution, or other legitimate purposes.

18. Access and Correction Requests

To request access to or correction of your personal information, please contact our Privacy Officer using the contact information in Section 24 of this Privacy Policy.

To help us locate your information, please provide sufficient information to identify:

• Your name;
• The email address associated with your account, if applicable;
• The nature of your request; and
• The information or records you are requesting, where reasonably possible.

We may need to verify your identity before providing access to personal information or making certain changes.

Where PIPEDA applies, we will generally respond to a complete access request within 30 calendar days, subject to applicable exceptions and permitted extensions.

Where an extension is legally permitted and necessary, we will provide notice in accordance with applicable law.

Access to personal information will generally be provided at minimal or no cost, subject to applicable law.

If we deny access or correction, where required we will explain the reason for the decision and identify any applicable recourse.

19. Quebec Residents and Law 25

If you are located in Quebec, additional privacy rights and obligations may apply under Quebec privacy legislation, including Law 25.

Artimind will comply with applicable Quebec requirements concerning, among other things:

• Transparency regarding the collection and use of personal information;
• Privacy governance;
• Designation of a person responsible for the protection of personal information;
• Access and correction requests;
• Privacy complaints;
• Privacy and confidentiality incidents;
• Privacy impact assessments where required;
• Transfers or disclosures outside Quebec where required;
• Retention and destruction of personal information; and
• Other applicable requirements under Quebec privacy legislation.

Where required, our privacy practices and notices will be provided in clear and simple language.

The person responsible for the protection of personal information is identified in Section 24 of this Privacy Policy.

20. Children’s Privacy

The Website is intended for a general audience and is not specifically directed toward children.

We do not knowingly collect personal information from children where doing so would require parental or guardian consent under applicable law.

If you believe that a child has provided personal information to us in circumstances where collection was not appropriate, please contact us.

Where required, we will take reasonable steps to investigate and delete or otherwise address the information.

21. Fraud Prevention and Security

We may collect and use technical, account, and transaction information for security and fraud-prevention purposes.

This may include:

• IP addresses;
• Device information;
• Browser information;
• Login activity;
• Transaction information;
• Order information;
• Payment-related information received from payment providers;
• Account activity; and
• Other information reasonably necessary to detect and prevent fraud, unauthorized access, abuse, or security incidents.

This processing may be necessary to protect our customers, payment systems, Website, business, and other individuals and to comply with applicable law.

22. Automated Technologies and Analytics

We may use automated technologies, analytics tools, security systems, and similar technologies to operate and improve the Website.

These technologies may help us:

• Understand Website usage;
• Identify technical problems;
• Detect fraud and security threats;
• Measure marketing performance;
• Improve product recommendations;
• Personalize Website experiences; and
• Improve our services.

We will not use automated processing to make decisions about you that produce legal or similarly significant effects unless permitted by applicable law and, where required, after providing appropriate notice and obtaining required consent.

23. Privacy Complaints

If you have a question, concern, or complaint regarding how we handle your personal information, please contact us first so that we have an opportunity to address your concern.

We will review privacy complaints and respond within a reasonable period, taking into account the nature and complexity of the request.

If you are not satisfied with our response, you may have the right to contact the privacy regulator applicable to your province or territory.

For matters falling under federal privacy jurisdiction, you may contact the Office of the Privacy Commissioner of Canada.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• Our business practices;
• Our Website;
• Products and services;
• Third-party service providers;
• Cookies and technologies;
• Privacy and security practices;
• Applicable laws and regulations; or
• Other relevant circumstances.

When we update this Privacy Policy, we will post the revised version on the Website and update the “Last Updated” date.

Where required by applicable law, we will provide additional notice or obtain additional consent before implementing a material change to the purposes for which personal information is collected, used, or disclosed.

25. Governing Privacy Requirements

This Privacy Policy is intended to describe Artimind’s privacy practices for customers and visitors in Canada and other jurisdictions where the Website is available.

The privacy laws that apply to you may depend on:

• Where you live;
• Where our business operates;
• The nature of our activities;
• The type of personal information involved; and
• Whether federal or provincial privacy legislation applies.

Depending on the circumstances, applicable laws may include PIPEDA, substantially similar provincial private-sector privacy legislation, Quebec privacy legislation including Law 25, CASL for commercial electronic messages, and other applicable laws.

Nothing in this Privacy Policy is intended to limit or remove any rights or protections that cannot lawfully be limited or removed under applicable legislation.

Where applicable law provides greater privacy protection than this Privacy Policy, the applicable law will prevail.

26. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact:

Artimind
Privacy Officer / Person Responsible for Privacy
Email: [email protected]
Website: https://shop.artimindedu.com/
Mailing Address: 2 Simcoe St S, Suite 300, Oshawa, Ontario, L1H 8C1, Canada

We welcome questions, access requests, correction requests, consent withdrawal requests, and privacy complaints.