Compl3x · compl3x.ca
Privacy Policy
What personal information we collect, why, who else sees it, and how to get it back or have it deleted.
Last updated 13 September 2026
1. Who is responsible
Compl3x is responsible for the personal information under our control. Questions, requests and complaints go to our privacy contact:
- Privacy Officer
- Compl3x — Privacy
- studiocompl3x@gmail.com (please write “Privacy” in the subject line)
- Location
- Saskatchewan, Canada
This policy follows the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for customers in Quebec, the Act respecting the protection of personal information in the private sector as amended by Law 25. Where provincial privacy legislation in Alberta, British Columbia or Quebec gives you more, you get more.
2. What we collect
| Information | Why we need it |
|---|---|
| Name, shipping and billing address, email, phone (optional) | To make, address, ship and confirm your order |
| Order contents, value and history | To fulfil the order, handle warranty claims and meet tax record-keeping duties |
| Payment confirmation and the last four digits of a card | To match a payment to an order and process refunds. We never receive or store the full card number. |
| Account login details, if you create an account | To let you sign in and see past orders |
| Messages you send us, and photographs sent with a claim | To answer you and to assess warranty and damage claims |
| Marketing preferences | To send only what you asked for, and to stop when you say stop |
| Device and usage data: IP address, browser, pages viewed, referring site | To keep the site secure and working, and to understand which pages are useful |
| Custom project files you send us | To quote and produce the work |
We do not ask for and do not want sensitive information such as health data, government identifiers or financial account numbers. Please do not send them.
We do not knowingly collect information from children under 13. If you believe a child has given us information, tell us and we will delete it.
3. Why we are allowed to hold it
Mostly because you gave it to us to complete a purchase, which is consent for that purpose. Where we rely on something else — keeping records for tax, preventing fraud, or defending a legal claim — we say so. We ask separately and clearly before using your information for marketing, and you can withdraw that at any time without affecting your ability to buy from us.
You can withdraw consent for any optional use by emailing us. Where information is needed to complete something you have asked for, or to meet a legal obligation, we will explain what withdrawal would mean before acting on it.
4. Who else sees it
We share personal information only with providers who need it to run the business, and only for that purpose. They act on our instructions and are not permitted to use your information for their own ends.
| Who | What for | Where data may be held |
|---|---|---|
| Payment processors | Taking payment, refunds, fraud screening | Canada and the United States |
| Shipping carriers and fulfilment tools | Delivering your order and providing tracking | Canada and the United States |
| Web hosting and content delivery | Running and accelerating this website | Canada and the United States |
| Email and messaging providers | Order confirmations and, if you opted in, marketing | Canada and the United States |
| Website analytics and tag management | Understanding site usage, subject to your cookie choices | United States |
| Professional advisers, if genuinely needed | Accounting, legal advice, insurance | Canada |
Data outside Canada. Some of these providers store or process information on servers in the United States or elsewhere. While it is there it is subject to the laws of that country, and courts, law enforcement or regulators there may in some circumstances be able to obtain access. We use providers with appropriate contractual protections, but we would rather tell you this plainly than leave it out.
We may also disclose information where the law requires it, to respond to a valid legal demand, to protect our rights or someone’s safety, or as part of a sale or reorganisation of the business — in which case the protections in this policy carry across.
We do not sell personal information, and we do not rent or trade mailing lists.
5. Cookies and tracking
We use cookies for things the site needs to work — keeping your cart, remembering that you are signed in, security — and, only with your consent, for analytics and marketing measurement. You choose when the banner appears and can change your mind at any time. Full detail, including categories and how long each lasts, is in our Cookie Policy.
6. Automated decisions
We do not make decisions about you by purely automated means. Payment providers run automated fraud screening on transactions; if a payment is declined on that basis you can contact us and a person will look at it. If we ever introduce automated decision-making that affects you, we will tell you at the time and explain how to ask for a human review, as Quebec’s Law 25 requires.
7. How long we keep it
| What | Kept for |
|---|---|
| Order and transaction records | 7 years, to meet Canadian tax and business record requirements |
| Account details | Until you close the account, then deleted within 90 days apart from order records |
| Customer service correspondence | 3 years |
| Marketing consent and unsubscribe records | 3 years after you unsubscribe, as anti-spam law requires us to be able to prove consent |
| Custom project files | 2 years, unless you ask us to delete them sooner |
| Website analytics | Up to 26 months, in aggregate form where possible |
When a retention period ends we delete the information or anonymise it so it can no longer identify you.
8. Keeping it safe
The site runs over encrypted connections. Access to customer data is limited to those who need it, administrative accounts are protected, and our systems are kept up to date. Payment card details are handled by PCI-compliant processors and never touch our servers.
No system is perfect. If a breach occurs that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires, keep a record of it, and tell you what to do about it. Quebec residents will also be notified in line with Law 25.
9. Your rights
You can ask us to:
- Show you what personal information we hold about you and who we have shared it with.
- Correct anything inaccurate or incomplete.
- Delete it, where we are not required to keep it for tax or legal reasons.
- Send it to you in a structured, commonly used electronic format, or pass it to another organisation — the portability right under Quebec’s Law 25.
- Stop marketing, immediately and permanently.
- Withdraw consent for any optional processing.
Email studiocompl3x@gmail.com with “Privacy” in the subject. We reply within 30 days and do not charge for it. We may need to confirm who you are first, so that we are not handing your information to someone else.
10. Complaints
If you are unhappy with how we have handled your information, tell us and we will investigate properly and write back. If you are still not satisfied you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376). Residents of Quebec may complain to the Commission d’accès à l’information, Alberta and British Columbia residents to their provincial Information and Privacy Commissioner.
11. Changes
If we change this policy we will update the date at the top, and for anything material we will say so on this page and, where it affects how we use information you have already given us, tell you directly.
Cette politique est publiée en anglais. Sur demande, nous vous en ferons parvenir une version française.
