Who is responsible
Lily Malek Fine Art, Edmonton, Alberta, Canada. Privacy questions: lilymalekfineart@gmail.com or +1 587-568-8513.
What is collected, and why
- Orders: your name, email, phone (optional), shipping address, the items you buy and your order history — to take payment, ship, provide receipts and support, and keep required business records.
- Shipping quotes: the country and postal code you enter in the cart are sent to the carrier (Canada Post) to calculate shipping costs and delivery dates. They are not stored unless you place an order.
- Requests and messages: what you tell Lily in a commission, class or contact form, including any reference photos — to reply and to prepare a quote.
- Newsletter and offers: your email and a record of your consent — only if you ask to receive them, confirmed by email. You can withdraw consent at any time.
- Cart reminder (optional): if you tick the box at checkout, your email and the pieces in your unfinished checkout — to send you one reminder about 24 hours later. It is not sent if you complete your order, if the pieces are no longer available, or if you unsubscribe.
- Reviews (optional): your rating, your review and the name you choose are published on the piece’s page once Lily has read and approved the review. Your email is never shown: it goes to Lily with your review, marks reviews from buyers of that piece and lets her write to you about it if needed. A review Lily declines is deleted. A published review stays until you or Lily remove it; ask Lily to delete yours at any time.
- Accounts (optional): your email and saved favorites, if you choose to create an account.
- Security: limited technical information (for example a one-way hashed network address) to prevent spam and fraud.
Payment card details are entered on Stripe’s secure checkout and never reach this website.
Your country, language and currency
To show prices in your currency, the site uses your approximate country, which our host (Cloudflare) works out from your internet address. It is kept only in a session cookie named lm_geo (for example “CA-CAD”) that is deleted when you close your browser; Lily Malek Fine Art does not store it. If you choose a currency yourself, that choice is saved on your device until you change it. Your language is part of the page address (for example /fr/ for French and /es/ for Spanish).
Who processes information
Only the service providers needed to run the shop receive the minimum information they need: Stripe (payments), Cloudflare (hosting, database, private file storage, location for the display currency and spam protection), Resend (sending the website’s emails: receipts, order updates, replies and the reminders you ask for; your replies reach Lily’s Gmail), Canada Post or the customs intermediary for your parcel (shipping rates, labels and tracking), and Google (visit statistics with Google Analytics, as described below). These providers may process information outside Canada, including in the United States; it is not promised to stay in Canada.
How long it is kept
- Photos you upload but never send are deleted automatically within about a day.
- Reference photos for a request are kept only as long as needed to support it, then deleted or securely archived by Lily.
- Routine technical logs are kept for about 30 days.
- Order and financial records are kept for the periods required by tax and consumer law.
Your choices and rights
You can ask to see, correct or delete your personal information, withdraw marketing consent at any time (every marketing email has an unsubscribe link, and no login is needed), and ask questions about how your information is handled. Customers in the EU and UK have additional rights under the GDPR, including the right to complain to their local supervisory authority. In Alberta you may contact the Office of the Information and Privacy Commissioner of Alberta.
Visit statistics (Google Analytics)
The site uses Google Analytics to count visits and see which pages people use. It records the pages you view, how you arrived (for example from a search engine or a link), your approximate location (country and city, worked out from your internet address, which Google does not keep) and your type of device and browser. Lily sees only these statistics, never who you are. It is not used for advertising: advertising features, ad personalization and Google signals are turned off. It never runs on the cart, checkout, order, account or review pages, or on pages opened from a link in an email.
- In the European Union, the United Kingdom, Switzerland and Quebec, visits are counted only after you choose Allow.
- Elsewhere, visits are counted unless you turn them off with Privacy choices.
- If your browser sends a Global Privacy Control signal, your visits are not counted unless you choose Allow.
You can change your choice at any time with Privacy choices at the bottom of every page. Google Analytics sets the cookies _ga and _ga_…, which last up to 13 months; turning statistics off deletes them. Google may process this information in the United States.
Cookies and storage on your device
lm_geoandlm_privacy: session cookies for your approximate country and currency, and for which visit-statistics rule applies where you are. They are deleted when you close your browser.- Your browser’s local storage: your cart, your favorites, your currency choice and your visit-statistics choice.
_gaand_ga_…: Google Analytics cookies, only while visit statistics are on (see above).
The site uses no advertising trackers.
Children
The shop is not intended for children. Photos of identifiable children from classes are never published without a parent or guardian’s consent.
Changes
If this policy changes, the updated version will be posted here with a new date.