This Privacy Policy describes how Raesirvasbua collects, uses, and stores personal information
submitted through the website. It applies to all visitors and buyers. The policy was
last updated on October 14, 2026.
1
Who is responsible for personal data
The operator of this website is Margaret Elaine Thorn, a sole proprietor offering
macrame cord and craft supplies. The operator is the data controller for all
personal information collected through the website. Questions about data handling
may be directed to the operator through the contact form. The operator does not
appoint a separate data protection officer as the scale of data processing does not
require one under applicable law.
2
What personal data is collected
The website collects personal data only when a visitor actively submits it. The
contact form collects a name, an email address, and the message content. A phone
number may be submitted voluntarily if a call-back is requested. Order processing
may require a delivery address and payment details, which are handled through a
third-party payment processor. No payment card data is stored by the operator. The
website also collects technical data through cookies as described in the Cookie
Policy.
3
How personal data is used
Personal data submitted through the contact form is used solely to respond to the
enquiry or complaint. Delivery addresses are used to fulfill and dispatch orders.
Email addresses are not added to any mailing list without explicit consent. No
personal data is used for automated decision-making or profiling. The operator does
not sell, rent, or share personal data with third parties for marketing purposes.
Data shared with courier services is limited to what is necessary to complete
delivery.
4
Legal basis for processing
Personal data is processed on the basis of the legitimate interest of fulfilling an
order or responding to an enquiry submitted by the user. Where consent is required —
for example, for optional cookies — it is collected separately and may be withdrawn
at any time through the cookie settings panel on the site. The operator complies
with the Personal Information Protection and Electronic Documents Act (PIPEDA) and
applicable provincial privacy legislation in Canada.
5
How long data is retained
Contact form messages and associated personal data are retained for a period of
twelve months after the last contact, then deleted unless retention is required to
resolve an ongoing dispute or to comply with a legal obligation. Order records,
including delivery addresses, are retained for the period required by Canadian tax
and commercial law, which is generally seven years. After the retention period
expires, data is deleted securely.
6
Third parties who receive personal data
Personal data is shared with third parties only where necessary to fulfill the
service. Courier services receive the delivery name and address to complete
dispatch. Payment processors receive billing details to process transactions — these
processors operate under their own privacy policies and security standards. The
website may use a third-party email service to handle contact form submissions. No
personal data is transferred outside Canada without appropriate safeguards in place.
7
User rights under Canadian privacy law
Under PIPEDA and applicable provincial legislation, users have the right to request
access to personal data held about them, to request correction of inaccurate data,
and to request deletion of data where no legal retention obligation applies.
Requests should be submitted in writing through the contact form. The operator will
respond within 30 days. Where a request cannot be fulfilled, the reason will be
provided in writing. Users also have the right to file a complaint with the Office
of the Privacy Commissioner of Canada.
8
Cookies and tracking
The website uses cookies to store the visitor's cookie preference and to support
basic technical functions. No advertising or tracking cookies are placed without
explicit consent. Full details of the cookies used and how to manage them are set
out in the Cookie Policy, accessible from the footer of every page. Consent for
non-essential cookies may be withdrawn at any time by revisiting the cookie settings
panel.
9
Changes to this policy
This Privacy Policy may be updated from time to time to reflect changes in legal
requirements or in the way personal data is processed. The date at the top of this
page shows when the policy was last revised. Continued use of the website after a
policy update constitutes acceptance of the revised terms. Users who do not accept a
revised policy should stop using the website and may request deletion of their data
by contacting the operator through the contact form.