Privacy Policy

1. What we collect

We collect only what we need to design, print, ship, and support your order:

• Account — email address (for passwordless login-link sign-in and order receipts) and the timestamps of your sessions.
• Design data — the drawer dimensions, compartments, tools, colours, and any notes you enter in the editor. We snapshot this on the cart to freeze pricing and again on the order to prove what we agreed to print.
• Order + shipping — your name, shipping address, phone number (optional, used by the carrier), order items, prices, and Canada Post tracking numbers.
• Fit-consent record — when you place an order you confirm the drawer measurements. We record that confirmation with a timestamp and your IP address so we can honour the reprint policy (see Terms) and defend chargebacks fairly.
• Technical logs — request logs, IP address, browser user-agent, and any client-side errors captured from your session. Retention is bounded (see §6).

We do not collect your payment card number, expiry, or CVV. Card details are entered directly into a Stripe-hosted checkout page and never touch our servers. Our integration is at the SAQ-A level of PCI-DSS scope — the lowest available — because we don't receive or store card data at any point.

2. Why we collect it

• Contract performance — the design, order, and shipping data are directly necessary to print and deliver what you ordered.
• Communication — email is used to send you login-link sign-in codes, order confirmations, shipping notifications, and refund receipts. You cannot opt out of these transactional emails while you have an active order.
• Fraud + dispute protection — the fit-consent record and order timeline let us respond to chargebacks with real evidence, which protects the business from fraudulent claims and keeps prices lower for everyone else.
• Service quality — technical logs and client-side errors help us find and fix bugs before more people hit them.

We do not use your information for advertising, do not build profiles beyond what a normal order history requires, and do not sell or rent any of it to third parties.

3. Who we share it with

We share the minimum necessary data with the following third-party service providers, each bound by their own privacy commitments:

• Stripe, Inc. — payment processing. Receives your card details, name, email, and order total. See stripe.com/privacy.
• Canada Post — carrier. Receives your name, shipping address, and phone number so they can deliver the parcel and, if needed, contact you about a delivery attempt.
• Microsoft (Microsoft 365) — transactional email delivery for login-link codes, order confirmations, shipping notifications, and refund receipts. Emails are sent from [email protected] via Microsoft's Graph API.
• Cloudflare — bot / abuse protection on sign-in and checkout via Cloudflare Turnstile. Turnstile operates without traditional CAPTCHA and receives only the minimum signal needed to score the request.

We do not share your data with any other third party except (a) when we're legally required to (court order, valid subpoena, tax authority request), or (b) when we're defending our legal rights in a dispute you initiated.

4. Cookies + local storage

We use one first-party cookie — customorg_session — to keep you signed in after you click a login link. It expires 30 days after the last sign-in. We do not use analytics cookies, advertising cookies, or any third-party tracker that follows you across the web.

The editor stores your in-progress design in your browser's localStorage so you don't lose it on refresh. This never leaves your device unless you explicitly add it to your cart or share it via a public link.

5. Where your data lives

Order records and design snapshots are stored on a server located in Canada, operated by The Nimbus Corporation. Backups are kept encrypted at rest. Payment records reside with Stripe (Canada, United States, and other regions depending on Stripe's routing). Email records reside with Microsoft 365 (Canada region). Shipping records reside with Canada Post.

6. How long we keep it

• Order records — 7 years, to satisfy Canadian sales-tax record-keeping obligations.
• Design snapshots — 7 years, kept with the order they belong to so we can reprint a defective piece years later if you ask.
• Login-link tokens — 15 minutes, then discarded whether used or not.
• Session cookies — 30 days after last sign-in.
• Server request logs — 30 days.
• Client-side error reports — 90 days.

7. Your rights

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy law you can:

• Ask what we have — email [email protected] from the address on your account. We'll send you a copy of every field we hold, in a portable format, within 30 days.
• Ask us to correct it — same email. Reply with the field and the correction and we'll update it (subject to reasonable proof that the change is legitimate).
• Ask us to delete it — same email. We will delete your account, associated designs, and personal fields on any order older than the 7-year statutory retention window. Orders within that window are anonymized (name and shipping address replaced with a redaction marker) but the transaction record itself is retained until the window closes.
• Withdraw consent — you can stop using the service any time. Data that isn't under active contract (finished orders past the window, unused accounts) is deleted; anything still active is deleted when the contract ends.

We aim to respond within 30 days. If we can't, we'll tell you why and give an updated timeline. If you're unsatisfied with our response you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

8. Children

Custom Organizers is not intended for use by anyone under 16. We don't knowingly collect information from anyone under 16. If you believe we have, email [email protected] and we will delete it promptly.

9. Security

We follow reasonable industry practice: TLS everywhere, login-link sign-in (no reusable passwords for you to lose), least-privilege server access, secrets in an isolated secrets store, and audit logs on every admin action. No system is invulnerable; if a breach ever affects your data we will notify you within 72 hours of discovering it.

10. Changes to this policy

We'll update this page as the service evolves. Material changes — anything that expands what we collect, who we share it with, or how long we keep it — will be announced by email to every account holder at least 14 days before they take effect. Non-material changes (clarifications, typo fixes) are posted here without notice.

11. Contact

Privacy questions, access / correction / deletion requests, and complaints:

The Nimbus Corporation
{{BUSINESS_ADDRESS}}
{{BUSINESS_ADDRESS_CITY_PROVINCE_POSTAL}}
Email: [email protected]