Privacy policy
Last updated: Oct 17th, 2026
1. About this policy
CYMSTAR Designs, based in Ontario, Canada, respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit cymstardesigns.com, place an order, contact us, or otherwise interact with our business.
“Personal information” means information about an identifiable individual, as defined by applicable privacy law.
Throughout this policy, “CYMSTAR,” “CYMSTAR Designs,” “we,” “us,” and “our” refer to the business operating this store.
For privacy questions, requests, or complaints, contact the person responsible for privacy at contact@cymstardesigns.com, using the subject line Privacy Request.
2. Information you provide
Depending on how you interact with us, we collect information such as your name, email address, telephone number, billing and delivery addresses, order details, and communications with our customer service team.
If you create a customer account, we also process the account information needed to provide that service.
If you contact us about a defective product, we may collect photographs, a description of the issue, and information needed to identify your purchase and resolve your concern.
Please provide only information relevant to your request. You do not need to send photographs showing your face or other identifying details unless reasonably necessary to explain the issue.
3. Payment information
Our payment providers process the payment information needed to complete your purchase.
Depending on the payment method, we receive transaction details such as payment status, transaction identifiers, and limited payment method information. The information available to us depends on the payment service used.
Please do not send complete payment card numbers, security codes, passwords, or banking credentials by email or through customer support messages.
4. Information collected automatically
When you visit our website, Shopify and other enabled services may collect technical and usage information, including your IP address, browser and device details, approximate location inferred from your IP address, referring pages, pages or products viewed, and interactions with the store.
Cookies, pixels, log files, and similar technologies may be used to collect this information.
The information collected depends on the features and integrations enabled, your browser settings, your privacy choices, and applicable law.
5. How we use personal information
We use personal information for purposes such as processing payments, producing and fulfilling orders, arranging delivery, providing order updates, administering customer accounts, and responding to questions.
We also use relevant information to investigate product concerns, process refunds, prevent fraud, maintain security, troubleshoot problems, improve the store, and meet legal, accounting, and recordkeeping obligations.
Where permitted and consistent with your choices, we use information for newsletters, promotions, analytics, and advertising.
We limit collection to information reasonably needed for the purposes identified. Where a new purpose requires additional notice or consent, we will provide that notice or obtain consent before proceeding.
6. Consent and your choices
We obtain consent where required by applicable law. The appropriate form of consent depends on the information involved, its sensitivity, the purpose, and the circumstances.
Providing information needed to fulfil an order allows us to use it for that purpose, subject to applicable law. It does not automatically authorize every unrelated marketing or advertising use.
You may withdraw consent for optional activities by using available controls or contacting us. Withdrawal does not affect processing already lawfully carried out.
If you decline or withdraw consent for information essential to a service, we may be unable to provide that service. We will explain the relevant consequences.
7. Shopify and other service providers
Our online store is hosted by Shopify. Shopify processes personal information to help operate the storefront and provide services such as checkout, payment-related functions, security, analytics, and order administration.
Depending on the service, Shopify may process information on our behalf or for its own purposes as described in its privacy policies.
You can learn more at https://www.shopify.com/legal/privacy and access Shopify’s privacy tools at https://privacy.shopify.com/.
We also disclose relevant information to providers involved in manufacturing, printing, fulfilment, delivery, customer support, business administration, and any enabled marketing or analytics services.
For example, a production or fulfilment partner may receive your name, delivery address, and order details to prepare and ship your purchase.
We remain responsible for personal information under our control and take reasonable steps to require appropriate protection when providers process it on our behalf.
8. Analytics, advertising, and cookies
Cookies are small files stored on your device. Similar technologies can also record interactions with our website, messages, or advertisements.
Essential technologies support functions such as shopping carts, checkout, security, and remembering privacy choices. Other technologies may support preferences, analytics, advertising, or embedded content.
Where analytics or advertising integrations are enabled, their providers may receive identifiers, browsing activity, purchase events, and related technical information. This can help measure website performance, evaluate campaigns, or personalize advertising.
Where required, optional tracking will depend on your consent. Available cookie or privacy controls allow you to manage relevant choices.
Browser settings can also block or delete cookies, although doing so may affect store functionality. Deleting cookies may reset previously saved choices.
Following our social media pages, or unfollowing them, is not the same as opting out of advertising tracking.
9. Marketing communications
Where permitted by law and consistent with your consent or another applicable permission, we may send newsletters, promotions, or product announcements.
You can unsubscribe from marketing emails using the link provided in those messages or by contacting contact@cymstardesigns.com.
Unsubscribing from marketing does not prevent necessary communications about an order, payment, delivery, refund, security matter, or privacy request.
10. Other disclosures
We may disclose personal information where authorized or required by law, including to respond to a valid legal demand, investigate suspected fraud, protect individuals, or establish, exercise, or defend legal rights.
If our business undergoes a proposed or completed sale, merger, or restructuring, relevant information may be disclosed or transferred subject to applicable legal requirements and safeguards.
We do not treat private customer service messages or defect photographs as permission to use them in advertising.
11. International processing
Our service providers and production partners may operate outside Ontario or Canada, including in the United States and other countries where services or fulfilment take place.
Your personal information may therefore be processed or stored in another jurisdiction and may be accessible to courts, law enforcement, or other authorities under that jurisdiction’s laws.
Where applicable law requires safeguards for international transfers, we will use an appropriate lawful transfer mechanism. Contact us for information about relevant providers and safeguards.
12. Retention
We retain personal information only as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing support, meeting legal and tax obligations, preventing fraud, and resolving disputes.
Retention periods depend on the type of information, the service involved, and applicable requirements.
A deletion request may not allow us to erase information we must legally retain. Where an exception applies, we will explain it as required by law.
Information no longer needed will be securely deleted, destroyed, or anonymized, as appropriate.
13. Security
We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of personal information.
Access is limited to people and providers who need it for authorized purposes.
No website, storage system, or transmission method is completely secure. If a privacy breach occurs, we will assess it and take notification, reporting, recordkeeping, and remedial steps required by applicable law.
14. Your privacy rights
Depending on applicable law and the circumstances, you may request access to your personal information, correction of inaccurate information, information about its use and disclosure, or withdrawal of consent.
Additional rights may include deletion, portability, restriction of processing, objection to certain uses, or an appeal of a decision concerning a privacy request.
Contact contact@cymstardesigns.com to make a request. We may take reasonable steps to verify your identity or an authorized representative’s authority before releasing or changing information.
We will respond within applicable legal time limits. If we cannot fulfil a request in whole or in part, we will explain the reason and available complaint or review options as required.
We will not unlawfully discriminate against you for exercising your privacy rights.
15. Additional regional rights
Where European Economic Area or United Kingdom data protection law applies, processing may rely on performance of a contract, compliance with legal obligations, legitimate interests subject to the required balancing of rights, or consent.
You may have rights to access, correction, deletion, portability, restriction, objection, and withdrawal of consent, as well as the right to complain to the relevant supervisory authority.
Where applicable United States state privacy laws apply to our business and your information, additional rights may include opting out of certain targeted advertising, sale or sharing of personal information, or specified profiling.
Some advertising disclosures can fall within legal definitions of sale or sharing even without a monetary payment. Applicable notices and opt-out controls must reflect the services actually enabled.
16. Fraud prevention and automated tools
Shopify, payment providers, and other security services may use automated tools to assess transactions, identify suspicious activity, or protect the store.
If a transaction is declined or flagged, contact us so we can investigate the concern with the relevant provider where appropriate.
Where applicable law provides rights concerning decisions based solely on automated processing that have legal or similarly significant effects, you may contact us to exercise those rights.
17. Children’s privacy
Our store is not directed to children under 16, and we do not knowingly collect their personal information without legally required authorization.
If you believe a child has provided personal information inappropriately, contact us. We will investigate and take appropriate action, including deletion where required.
18. Browser privacy signals
Browser privacy signals differ in their function and legal treatment.
Where applicable law requires us to recognize a valid opt-out preference signal, such as Global Privacy Control, we will honour that signal for the processing covered by the requirement.
A browser’s legacy “Do Not Track” setting is different from Global Privacy Control and may not operate as an opt-out mechanism.
19. External websites
Our website may link to social media platforms and other independent websites. Their privacy policies govern their own collection and use of information.
Please review those policies before providing information through those services.
20. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices, services, or legal obligations. The date above identifies the latest revision.
Where a change requires additional notice or consent, we will provide that notice or obtain consent as required. Publishing an update does not, by itself, authorize a new use that requires your consent.
21. Questions and complaints
For questions, privacy requests, or complaints, email contact@cymstardesigns.com, using the subject line Privacy Request.
We will review your concern and explain our response. You may also contact the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca/ or another privacy regulator with jurisdiction over your concern.
