Privacy Policy

Last updated: May 15, 2026

D’s Shop is operated by Cressoft Technology Inc. (“we”, “our”, “us”). This policy describes how we collect, use, disclose, and protect personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. Information We Collect

When you visit our site, create an account, or place an order, we may collect:

• Name, email address, phone number
• Shipping and billing addresses
• Order history and product preferences
• Payment details (processed by Shopify Payments; we never see or store full card numbers)
• Device, browser, and IP information for security and analytics

2. How We Use Your Information

• Processing and fulfilling your orders
• Sending order confirmations, shipping updates, and customer service replies
• Responding to support requests
• Improving our site, catalogue, and operations
• Detecting and preventing fraud or abuse
• Complying with our legal obligations

3. Service Providers

We share data only with vetted service providers who help us run D’s Shop:

• Shopify Inc.: storefront and hosted checkout (Canada and global infrastructure)
• Convex, Inc.: account, wishlist, and content data storage
• Printify, Inc. and our Canadian print-on-demand fulfilment partner: order production and fulfilment
• Resend, Inc.: transactional and marketing email delivery
• Canada Post and Purolator: shipping and delivery

We do not sell your personal information. Where data is transferred outside Canada (e.g., to U.S.-based service providers), it remains subject to comparable protections through contractual safeguards.

4. Cookies and Tracking

We use essential cookies to maintain your cart, keep you signed in, and secure checkout. We also use anonymous analytics (Google Analytics, with IP anonymization and Google Consent Mode) to understand how visitors use the site so we can improve it. We do not run advertising trackers and we never sell your data.

For most of Canada, analytics runs on an implied-consent basis as permitted under PIPEDA, and we show a notice on your first visit. In Quebec (Law 25) and the EU/UK, analytics stays off until you give explicit consent. You can change your choice or opt out at any time using the “Cookie preferences” link in the footer, or by disabling cookies in your browser (note some features such as cart, checkout, and sign-in will not work without essential cookies).

5. Data Retention

We retain order records for a minimum of seven years to comply with Canadian tax and consumer protection requirements. Account data is retained while your account is active and for up to two years after closure unless we are required to keep it longer.

6. Children Under 13

D’s Shop is not directed to children under 13. We do not knowingly collect information from children. If you believe a child has provided us information, please contact us so we can delete it.

7. Your Rights

Under PIPEDA you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Withdraw consent for marketing communications at any time
• Request deletion of your account and associated data
• Lodge a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, email privacy@deezshop.ca. We respond to verified requests within 30 days.

8. Breach Notification

If we discover a breach involving real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA. We will also maintain a record of all breaches for at least 24 months.

9. Security

We use industry-standard safeguards including encryption in transit (TLS), encrypted databases, restricted access controls, and audit logs. No system is perfectly secure, but we take reasonable steps to protect your information.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email to active customers and posted here with a revised date.

11. Contact and Privacy Officer