Privacy policy for pottery supply customers

This policy describes how Kyodeiriabeiri collects, uses, stores, and protects personal information provided by visitors and customers. It applies to all interactions with kyodeiriabeiri.sbs and was last updated on September 27, 2026.

Who is responsible for your personal data

The data controller for all personal information collected through kyodeiriabeiri.sbs is Margaret Holloway, the sole operator of the Kyodeiriabeiri pottery supply service, operating in Canada. The operator determines the purposes for which personal data is collected and the means by which it is processed. All data handling practices described in this policy reflect the operator's obligations under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Questions about data practices can be directed to the operator through the contact details listed on the contact page of this site.

What personal information is collected

The personal information collected through this site is limited to what is necessary to process orders and respond to customer enquiries. This includes the customer's full name, email address, delivery address, and order details submitted at checkout. When a visitor uses the contact form, the name, email address, and message content provided are collected. An optional telephone number may be provided if the visitor requests a call back. No payment card information is collected or stored by this site — payment processing is handled entirely by the third-party payment provider at checkout, which operates under its own privacy policy.

How personal information is used

Personal information collected through orders is used to process the order, arrange delivery, issue an order confirmation, and respond to any follow-up enquiries about that order. Contact form submissions are used only to respond to the message sent. Personal information is not used for automated marketing, sold to third parties, shared with advertising networks, or used to build profiles for purposes beyond the immediate transaction or enquiry. Email addresses are not added to any mailing list without explicit opt-in consent given separately from the order or contact process.

Legal basis for processing personal data

Under PIPEDA and applicable provincial legislation, personal data is processed on the basis of the individual's consent, which is given when an order is placed or a contact form is submitted. For order fulfilment, processing is also necessary to perform the contract between the operator and the customer. Where the operator has a legal obligation — for example, to retain financial records for tax purposes — that obligation provides the legal basis for retaining the relevant data beyond the immediate transaction period. No personal data is processed on the basis of the operator's legitimate interests without a clear justification that does not override the individual's privacy rights.

How long personal information is retained

Order records, including name, delivery address, and order details, are retained for seven years to comply with Canadian tax and accounting obligations. Contact form messages and related correspondence are retained for two years after the last communication, in case the matter is revisited or escalated. After the applicable retention period, personal data is deleted securely or anonymised so that it can no longer be attributed to an identifiable individual. Customers may request earlier deletion of their data where no legal retention obligation applies, by contacting the operator in writing through the contact page.

Sharing personal information with third parties

Personal information is shared with third parties only where necessary to fulfil an order or operate the site. This includes the postal or courier service used to deliver orders, which receives the delivery name and address, and the payment processor used at checkout, which handles payment details under its own privacy policy. No personal information is shared with advertisers, data brokers, or analytics platforms. If a third-party service provider is engaged in the future that would involve sharing personal data, this policy will be updated and customers will be notified before their data is shared with the new party.

Your rights regarding your personal information

Individuals whose personal data is held by Kyodeiriabeiri have the right to request access to their data, to request correction of inaccurate data, to withdraw consent for processing where consent is the legal basis, and to request deletion of their data where no legal retention obligation applies. To exercise any of these rights, submit a written request through the contact page. Requests will be acknowledged within five business days and responded to fully within thirty calendar days. Where a request cannot be fulfilled — for example, where a legal retention obligation prevents deletion — the operator will explain the reason in writing.

Security measures for personal information

The operator takes reasonable technical and organisational steps to protect personal information against unauthorised access, loss, or disclosure. The site is served over an encrypted HTTPS connection. Access to customer order data is restricted to the operator. Contact form submissions are transmitted directly to the operator's email via an encrypted connection. No personal data is stored in publicly accessible locations. Despite these measures, no method of transmission over the internet is entirely without risk. Customers are encouraged to use secure email practices and to contact the operator immediately if they suspect their personal information has been compromised.

Changes to this privacy policy

This privacy policy may be revised to reflect changes in data practices, applicable law, or the services offered on the site. The date shown at the top of this page indicates when the policy was last updated. Where a material change is made — for example, a new category of data is collected or a new third party receives personal data — customers will be notified by email where a contact address is held, and the updated policy will be posted on this page before the change takes effect. Continued use of the site after a policy update constitutes acceptance of the revised terms.

Privacy policy for Kyodeiriabeiri customers