Privacy Policy

This Privacy Policy describes how Raesirvasbua collects, uses, and stores personal information submitted through the website. It applies to all visitors and buyers. The policy was last updated on October 14, 2026.

Who is responsible for personal data

The operator of this website is Margaret Elaine Thorn, a sole proprietor offering macrame cord and craft supplies. The operator is the data controller for all personal information collected through the website. Questions about data handling may be directed to the operator through the contact form. The operator does not appoint a separate data protection officer as the scale of data processing does not require one under applicable law.

What personal data is collected

The website collects personal data only when a visitor actively submits it. The contact form collects a name, an email address, and the message content. A phone number may be submitted voluntarily if a call-back is requested. Order processing may require a delivery address and payment details, which are handled through a third-party payment processor. No payment card data is stored by the operator. The website also collects technical data through cookies as described in the Cookie Policy.

How personal data is used

Personal data submitted through the contact form is used solely to respond to the enquiry or complaint. Delivery addresses are used to fulfill and dispatch orders. Email addresses are not added to any mailing list without explicit consent. No personal data is used for automated decision-making or profiling. The operator does not sell, rent, or share personal data with third parties for marketing purposes. Data shared with courier services is limited to what is necessary to complete delivery.

Legal basis for processing

Personal data is processed on the basis of the legitimate interest of fulfilling an order or responding to an enquiry submitted by the user. Where consent is required — for example, for optional cookies — it is collected separately and may be withdrawn at any time through the cookie settings panel on the site. The operator complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada.

How long data is retained

Contact form messages and associated personal data are retained for a period of twelve months after the last contact, then deleted unless retention is required to resolve an ongoing dispute or to comply with a legal obligation. Order records, including delivery addresses, are retained for the period required by Canadian tax and commercial law, which is generally seven years. After the retention period expires, data is deleted securely.

Third parties who receive personal data

Personal data is shared with third parties only where necessary to fulfill the service. Courier services receive the delivery name and address to complete dispatch. Payment processors receive billing details to process transactions — these processors operate under their own privacy policies and security standards. The website may use a third-party email service to handle contact form submissions. No personal data is transferred outside Canada without appropriate safeguards in place.

User rights under Canadian privacy law

Under PIPEDA and applicable provincial legislation, users have the right to request access to personal data held about them, to request correction of inaccurate data, and to request deletion of data where no legal retention obligation applies. Requests should be submitted in writing through the contact form. The operator will respond within 30 days. Where a request cannot be fulfilled, the reason will be provided in writing. Users also have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

Cookies and tracking

The website uses cookies to store the visitor's cookie preference and to support basic technical functions. No advertising or tracking cookies are placed without explicit consent. Full details of the cookies used and how to manage them are set out in the Cookie Policy, accessible from the footer of every page. Consent for non-essential cookies may be withdrawn at any time by revisiting the cookie settings panel.

Changes to this policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or in the way personal data is processed. The date at the top of this page shows when the policy was last revised. Continued use of the website after a policy update constitutes acceptance of the revised terms. Users who do not accept a revised policy should stop using the website and may request deletion of their data by contacting the operator through the contact form.