Privacy policy
Last updated: August 22, 2026
TheeUpCycler ("TheeUpCycler," "we," "us," or "our") respects your privacy and is committed to protecting the personal information entrusted to us.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit or make a purchase from TheeUpCycler, communicate with us, create an account, subscribe to communications, submit a form or artist application, or otherwise interact with our website and services.
TheeUpCycler is based in Alberta, Canada and serves customers in Canada, the United States, Europe, the United Kingdom, and other international destinations.
We do not sell customer personal information for money and we do not operate a business based on selling customer information, customer lists, or customer databases.
Nothing in this Privacy Policy is intended to limit any privacy or data-protection right that cannot lawfully be waived under applicable law.
1. Personal Information We Collect
The personal information we collect depends on how you interact with us.
Contact Information
We may collect your name, email address, telephone number, billing address, shipping address, and other contact information you provide.
Order & Transaction Information
We may collect information relating to products purchased, order history, billing and shipping details, payment confirmation, transaction information, deposits, custom orders, authorized refunds, disputes, and communications relating to your order.
Payment Information
Payments are processed through third-party payment providers. TheeUpCycler does not generally receive or store your complete credit or debit card number.
Payment providers may collect and process payment, billing, fraud-prevention, and transaction information according to their own privacy practices and applicable law.
Account Information
Where customer accounts are available, we may process account information, saved information, preferences, and related account activity.
Communications & Submissions
We may collect information you provide when contacting us by email, through a contact form, customer service request, artist application, project proposal, or other communication.
Marketing Preferences
We may maintain information about whether you have subscribed to, consented to, or unsubscribed from promotional communications.
Website & Device Information
When you use our website, certain technical information may be collected automatically. This may include IP address, browser type, device type, operating system, referring website, pages viewed, interactions with the website, approximate location derived from IP address, and similar technical information.
We seek to collect only personal information reasonably necessary for the purposes described in this Privacy Policy.
2. How We Use Personal Information
We may use personal information to:
- Process and fulfill purchases
- Process payments and authorized refunds
- Arrange shipping, freight, customs clearance, and worldwide delivery
- Communicate regarding orders, purchases, inquiries, commissions, or applications
- Provide customer service
- Maintain customer accounts and order histories
- Administer disputes, damage claims, and customer service matters
- Detect, investigate, and prevent fraud, chargeback abuse, misuse, and security incidents
- Operate, maintain, secure, and improve our website and services
- Understand how visitors use our website
- Comply with accounting, tax, customs, legal, and regulatory requirements
- Establish, exercise, or defend legal claims
- Enforce our Terms of Service, policies, contracts, and agreements
- Protect TheeUpCycler, our customers, and others from fraud or unlawful activity
- Send marketing communications where permitted by law and according to your preferences
We will not use personal information for a materially different purpose without notice or consent where required by applicable law.
3. We Do Not Sell Customer Information
TheeUpCycler does not sell customer names, email addresses, telephone numbers, mailing addresses, order information, or other customer personal information for money.
We do not sell customer lists or customer databases.
Providing information to companies that help us operate our business, process an order, accept payment, prevent fraud, provide website functionality, or deliver a purchase is not the same as selling a customer database.
Some privacy laws define terms such as "sale," "sharing," "cross-context behavioural advertising," or "targeted advertising" more broadly than an ordinary sale for money. If activities or technologies used on our website fall within one of those legal definitions, you may have additional disclosure or opt-out rights under applicable law.
4. Shopify & Our Online Store
Our online store is hosted using Shopify. Shopify provides the ecommerce infrastructure that allows us to operate our online store, shopping cart, checkout, customer accounts, and related ecommerce services.
As a result, Shopify may process personal information relating to customers and website visitors in connection with providing its services to TheeUpCycler.
Shopify and its service providers may process information in countries other than your country of residence. Information processed through Shopify may also be subject to Shopify's applicable privacy practices.
5. Service Providers & Necessary Disclosures
We may disclose or provide personal information to trusted companies and organizations that perform services reasonably necessary to operate TheeUpCycler.
These may include providers of:
- Ecommerce hosting
- Payment processing
- Shipping and fulfillment
- Freight and logistics
- Website hosting and technology
- Fraud prevention and transaction security
- Analytics
- Email and communications
- Accounting and bookkeeping
- Professional, legal, or technical services
- Other services reasonably required to operate our business
We seek to provide service providers only with personal information reasonably necessary for the services they perform.
We do not authorize service providers to use personal information for unrelated purposes except where separately disclosed, permitted by law, or governed by the provider's direct relationship with you.
6. Orders & Worldwide Shipping
Because TheeUpCycler ships throughout Canada, the United States, and internationally, personal information necessary to complete and deliver an order may need to be provided to organizations involved in transportation, customs clearance, and delivery.
These organizations may include:
- Postal services
- Courier companies
- Freight carriers
- Shipping and logistics providers
- Customs authorities
- Customs brokers
- Government import or border authorities
- Payment processors
- Fraud-prevention providers
For international shipments, information such as your name, address, telephone number, email address, order contents, country of origin, and declared value may be included on shipping, customs, freight, or import documentation where required.
Carriers, customs authorities, brokers, and government authorities in the destination country may collect, use, disclose, or retain this information according to the laws and requirements applicable to them.
7. Marketing Communications
If you choose to subscribe to promotional emails or other marketing communications, we may use your contact information to send information about products, artwork, events, promotions, sales, TheeZoo, Thee WildWoodz, or other TheeUpCycler news.
Where consent is required by applicable law, marketing communications will be sent on an appropriate legal basis.
You may unsubscribe from promotional emails at any time using the unsubscribe link included in the message or by contacting us.
Unsubscribing from marketing does not prevent us from sending transactional or service communications relating to an order, payment, account, application, project, dispute, or other existing relationship with you.
8. Cookies, Consent & Tracking Technologies
Our website and service providers may use cookies, pixels, local storage, and similar technologies to operate the website, maintain shopping carts, process checkout, provide security, remember preferences, understand website usage, improve performance, and measure marketing effectiveness.
Some cookies and similar technologies are strictly necessary for the website to function and may operate without consent where permitted by law.
Where applicable law requires consent for non-essential cookies, analytics technologies, advertising technologies, or similar tracking tools, those technologies will be subject to the privacy or cookie choices made available to you.
Where required by applicable law, non-essential technologies should not be activated until the necessary consent has been provided.
You may be able to change or withdraw your cookie choices through privacy controls provided on our website, where available, or through your browser or device settings.
Blocking certain cookies may affect website functionality.
9. Privacy Preference & Opt-Out Signals
Certain jurisdictions may provide rights to opt out of particular forms of targeted advertising, profiling, sale, or sharing of personal information.
TheeUpCycler does not sell customer personal information for money.
Where applicable law requires us or our ecommerce platform to recognize a legally valid browser-based opt-out preference signal, such requests will be handled as required by applicable law and according to the capabilities of the technologies used on our website.
You may also contact us directly to exercise an applicable privacy right.
10. Canadian & Alberta Privacy Rights
TheeUpCycler is based in Alberta, Canada and handles personal information in accordance with applicable Alberta and Canadian privacy legislation.
Depending on the circumstances and applicable law, you may have the right to request access to personal information held about you, request correction of inaccurate information, and withdraw consent to certain uses or disclosures of personal information, subject to legal and contractual limitations.
We may need to retain certain information despite a deletion or withdrawal request where retention is reasonably necessary or legally required for purposes such as accounting, taxation, customs, transaction records, fraud prevention, chargeback disputes, legal claims, or regulatory compliance.
TheeUpCycler maintains responsibility for personal information under its control and takes reasonable measures to protect that information.
11. European Economic Area & United Kingdom
If you are located in the European Economic Area ("EEA") or United Kingdom, applicable data-protection legislation, including the GDPR or UK GDPR where applicable, may provide additional privacy rights and impose additional obligations regarding the processing of your personal information.
Legal Bases for Processing
Where GDPR, UK GDPR, or similar legislation applies, our legal basis for processing personal information may include:
- Performance of a contract: processing an order, accepting payment, arranging shipping, providing customer service, or fulfilling a requested transaction.
- Legitimate interests: operating and securing our business, preventing fraud, maintaining records, improving services, responding to inquiries, and protecting our legal rights where those interests are not overridden by your rights.
- Consent: where consent is required for marketing, non-essential cookies, or another activity.
- Legal obligations: complying with tax, accounting, customs, regulatory, court, and record-keeping requirements.
EEA & UK Privacy Rights
Subject to applicable law, you may have the right to:
- Request access to your personal information
- Request correction of inaccurate personal information
- Request erasure of certain personal information
- Request restriction of certain processing
- Object to certain processing
- Request portability of eligible personal information
- Withdraw consent where processing is based on consent
- Complain to an applicable data-protection authority
These rights are subject to applicable limitations and exceptions. For example, we may need to retain transaction information where required for tax, accounting, customs, fraud-prevention, legal, or contractual purposes.
EU & UK Representatives
TheeUpCycler is established in Canada and does not maintain an office or branch in the European Economic Area or United Kingdom.
Where applicable European or United Kingdom data-protection law requires TheeUpCycler to appoint a local representative, we will comply with that requirement and make the representative's contact information available in this Privacy Policy or otherwise at the point where personal information is collected.
Where an exemption from a representative requirement applies, TheeUpCycler may rely on that exemption as permitted by applicable law.
12. International Transfers of Personal Information
TheeUpCycler is located in Canada. If you live outside Canada, information you provide to us may therefore be transferred to or processed in Canada.
Our ecommerce, technology, payment, shipping, freight, communications, and other service providers may also process personal information in Canada, the United States, or other countries.
Privacy and data-protection laws in those countries may differ from the laws where you live.
Where applicable law requires safeguards for an international transfer, appropriate legally recognized transfer mechanisms may be used by TheeUpCycler and/or the applicable service provider, including adequacy decisions, contractual safeguards, Standard Contractual Clauses, or other recognized mechanisms where applicable.
13. United States Privacy Rights
Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.
Depending on your state, the nature of the information, and whether the applicable law applies to TheeUpCycler, these rights may include access, correction, deletion, portability, and the ability to opt out of certain forms of sale, sharing, targeted advertising, or profiling.
TheeUpCycler does not sell customer personal information for money.
Some U.S. privacy laws use broader definitions of "sale" or "sharing." Where an applicable law provides you with an additional right concerning technologies or processing used on our website, we will honour that right as required by law.
Where applicable law requires recognition of a valid browser-based opt-out preference signal, such as a legally recognized universal opt-out mechanism, we will process that signal as required by applicable law and according to the capabilities of our website and service providers.
We will not unlawfully discriminate against a customer for exercising an applicable privacy right.
14. Your Privacy Rights
Depending on where you live and which privacy laws apply, you may have rights regarding your personal information.
These may include the right to:
- Request access to personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of certain personal information
- Withdraw consent where processing is based on consent
- Object to or restrict certain processing where applicable
- Request portability of eligible information where applicable
- Opt out of certain marketing or advertising activities
- Obtain information about certain uses or disclosures of personal information
- Make a complaint to an applicable privacy or data-protection authority
These rights are subject to applicable law and may have exceptions.
We may need to verify your identity before completing certain privacy requests. Verification information will only be requested where reasonably necessary and permitted by law.
15. How Long We Keep Personal Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate business, contractual, or legal requirements.
Order and transaction records may need to be retained after an order is completed for accounting, taxation, customs, fraud prevention, chargeback management, dispute resolution, warranty issues, legal claims, or other regulatory obligations.
Other personal information may be deleted or anonymized when it is no longer reasonably required.
Retention periods therefore vary depending on the type of information, the reason it was collected, and applicable legal requirements.
16. Security
We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the personal information we handle.
We also rely on established service providers, including Shopify and payment processors, to provide security for information processed through their systems.
However, no website, electronic transmission, payment system, or data-storage system can be guaranteed to be completely secure.
Please do not send payment card numbers, passwords, government identification, or other highly sensitive information through ordinary email unless specifically requested through an appropriate secure process.
17. Privacy Breaches
If TheeUpCycler becomes aware of a privacy or security incident involving personal information under our control, we will assess the incident and take reasonable steps to contain, investigate, and address it.
Where applicable law requires notification to affected individuals, a privacy regulator, or another authority, we will provide the required notification in accordance with applicable legal requirements.
18. Fraud Prevention & Payment Disputes
Personal information and transaction information may be used where reasonably necessary to detect, investigate, prevent, or respond to suspected fraud, unauthorized transactions, payment disputes, chargebacks, identity misuse, security incidents, or abuse of our services.
Where a transaction is disputed, relevant information may be provided to Shopify, payment processors, card issuers, financial institutions, fraud-prevention providers, insurers, carriers, legal advisors, or other parties reasonably involved in investigating or resolving the dispute.
This information may include transaction records, invoices, customer communications, design approvals, project records, shipping information, tracking information, photographs, and proof of delivery where relevant.
Information will only be used or disclosed for these purposes where reasonably necessary and permitted by applicable law.
19. Artist Applications, Project Proposals & Other Submissions
If you submit an artist application, Thee WildWoodz proposal, project proposal, contact form, or similar submission, we will use the information provided to review the submission, communicate with you, evaluate the proposed work, and administer the relevant program or opportunity.
Applications may contain information such as your name, contact information, biography, portfolio information, photographs, artwork, social-media or website links, professional information, and details about your proposed project.
Submitting an application does not automatically authorize TheeUpCycler or TheeZoo to publicly publish, reproduce, advertise, or commercially use an applicant's photographs, artwork, likeness, or submitted creative materials beyond what is reasonably necessary to receive, internally review, evaluate, and administer the application.
Any additional permissions relating to photography, video, social media, promotion, publicity, artist recognition, or use of an artist's work may be established separately through an Artist Agreement, release, consent, or other written authorization.
20. Children's Privacy
Our online store and ecommerce services are not directed toward children.
We do not knowingly collect personal information from children in circumstances prohibited by applicable law.
If you believe a child has improperly provided personal information to us, please contact us so we can review the situation and take appropriate action.
21. Third-Party Websites & Services
Our website may contain links to websites, social-media services, payment services, or other platforms operated by third parties.
Once you leave our website or interact directly with a third-party service, that organization's privacy practices may apply.
TheeUpCycler is not responsible for the privacy, security, content, or practices of websites and services we do not control.
22. Disclosure Required by Law
We may disclose personal information where reasonably necessary to comply with applicable law, regulation, court order, subpoena, customs requirement, or lawful request from a government, regulatory, or law-enforcement authority.
We may also disclose information where reasonably necessary and permitted by law to investigate fraud, respond to a payment dispute, enforce our agreements, establish or defend legal claims, protect our legal rights, or protect the rights or safety of another person.
23. Business Transfers
If TheeUpCycler is involved in a merger, acquisition, financing, restructuring, sale of assets, business transfer, or similar transaction, personal information may be transferred as part of that transaction where permitted by applicable law.
Any successor organization receiving personal information would remain subject to applicable privacy and data-protection obligations.
24. Changes to This Privacy Policy
We may update this Privacy Policy when our business practices, technology, service providers, legal obligations, or website features change.
The updated policy will be posted on our website with a revised "Last updated" date.
Where required by applicable law, we will provide additional notice or obtain consent before making a material change affecting how personal information is processed.
25. Privacy Requests & Complaints
If you would like to exercise an applicable privacy right, ask a question about this Privacy Policy, request access to or correction of personal information, or make a complaint about how your personal information has been handled, please contact us using the information below.
We may need to verify your identity before providing access to, correcting, deleting, or otherwise acting on personal information.
We will respond to valid privacy requests within the timeframe required by applicable law.
If we cannot resolve your privacy concern, you may also have the right to contact the privacy or data-protection authority responsible for your jurisdiction.
26. Privacy Contact
TheeUpCycler is responsible for personal information under its control. Privacy questions, requests, and complaints should be directed to the contact information below.
TheeUpCycler
Box 14
Falun, Alberta T0C 1H0
Canada
Email: dave@theeupcycler.com
Phone: 1 (403) 963-2774