Privacy Policy
1. Introduction and company information
This Privacy Policy explains how Northlight Atelier collects, uses, discloses, stores, and protects personal information in connection with its art-studio activities, including studio visits, workshop registrations, class bookings, event participation, online inquiries, newsletter subscriptions, and related services.
Northlight Atelier is committed to protecting personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, relevant provincial privacy legislation.
Operator / Data Controller: Northlight Atelier
Address: 214 Queen Street W, Toronto, ON M5V 2A7, Canada
Email: [email protected]
Phone: +1 (416) 782-4958
2. Data collection and processing
Northlight Atelier may collect personal information directly from you, automatically through our website or digital services, and from third parties where permitted by law. The types of personal information we may collect include:
- Contact details such as name, email address, telephone number, mailing address, and preferred language.
- Booking and registration information, including workshop selections, attendance records, and transaction details.
- Payment-related information necessary to process purchases, subject to the practices of our payment processors.
- Communications you send to us, including inquiries, feedback, and customer support requests.
- Account or subscription information, if you create an account or subscribe to updates.
- Technical information such as IP address, browser type, device identifiers, pages visited, and usage data collected through cookies or similar technologies.
- Any other information you voluntarily provide in connection with studio services, events, or artistic collaborations.
We limit collection to information that is reasonably necessary for the purposes identified in this Privacy Policy.
3. Purpose of data processing
Northlight Atelier processes personal information for the following purposes:
- To provide and manage studio services, workshops, classes, events, and related customer support.
- To process bookings, registrations, payments, refunds, and receipts.
- To communicate with you about your inquiries, appointments, purchases, or participation in activities.
- To send administrative notices, service updates, and, where permitted, marketing communications.
- To improve our website, services, offerings, and customer experience.
- To maintain internal records, accounting, and business operations.
- To detect, prevent, and address fraud, misuse, security incidents, or other unlawful activity.
- To comply with legal, regulatory, tax, and contractual obligations.
- To administer contests, promotions, surveys, or special programs, if offered.
4. Legal basis for processing
Under Canadian privacy law, Northlight Atelier generally relies on one or more of the following grounds to collect, use, and disclose personal information:
- Consent: where you have given express or implied consent, including by submitting information to us or subscribing to communications.
- Contractual necessity: where processing is necessary to provide requested services, complete bookings, or fulfill transactions.
- Legitimate business purposes: where processing is reasonably required for business administration, service improvement, security, fraud prevention, or similar purposes, and where such interests are not overridden by your rights and interests.
- Legal obligation: where processing is required to comply with applicable laws, regulations, court orders, or lawful requests from authorities.
Where consent is required, you may withdraw it at any time, subject to legal or contractual restrictions and reasonable notice.
5. Data sharing and third parties
Northlight Atelier does not sell personal information. We may share personal information only as necessary and only with trusted third parties, including:
- Service providers: such as website hosting, email delivery, customer relationship management, analytics, payment processing, booking systems, and IT support providers.
- Professional advisors: such as accountants, auditors, lawyers, and insurers.
- Government authorities or law enforcement: where required or permitted by law.
- Business partners: where needed to deliver joint workshops, collaborative events, or co-hosted programs, with appropriate safeguards.
Third-party service providers are permitted to use personal information only to perform services for Northlight Atelier and are expected to protect it in accordance with applicable legal requirements and contractual obligations.
6. Data transfer to third countries
Some of our service providers may store or process personal information outside Canada, including in the United States or other jurisdictions. As a result, your information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or regulatory authorities in those countries.
Northlight Atelier takes reasonable steps to ensure that any cross-border transfers are protected by appropriate contractual, technical, and organizational safeguards consistent with the sensitivity of the information and applicable law.
7. Storage duration
Northlight Atelier retains personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and accounting obligations, to resolve disputes, and to enforce agreements.
Retention periods vary depending on the type of information and the purpose of processing. For example:
- Booking and transaction records may be retained for the period required by tax and accounting laws.
- Customer service communications may be retained for a reasonable period to manage follow-up and quality assurance.
- Marketing consent records may be retained until you unsubscribe or withdraw consent, plus a short period thereafter to process the request.
When information is no longer required, we will securely delete, anonymize, or otherwise dispose of it in accordance with our retention practices.
8. User rights
Subject to applicable law, you have the following rights regarding your personal information held by Northlight Atelier:
- Access: to request confirmation of whether we hold personal information about you and to obtain a copy of that information.
- Rectification: to request correction of inaccurate, incomplete, or outdated information.
- Erasure: to request deletion of personal information, where permitted by law.
- Restriction: to request that we limit the processing of your personal information in certain circumstances.
- Data portability: to request a copy of certain information in a structured, commonly used format, where applicable.
- Objection: to object to certain processing activities, including some forms of direct marketing.
To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before responding. We will respond within a reasonable time and in accordance with applicable legal requirements.
9. Withdrawal of consent
Where our processing is based on your consent, you may withdraw that consent at any time by contacting Northlight Atelier or by using any unsubscribe mechanism provided in our communications.
Please note that withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. In some cases, if you withdraw consent, we may no longer be able to provide certain services or communications.
10. Right to complain
If you have concerns about how Northlight Atelier handles your personal information, we encourage you to contact us first so that we can attempt to resolve the issue promptly and fairly.
You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or, where applicable, the relevant provincial privacy authority if you believe your privacy rights have been violated.
11. Data security
Northlight Atelier uses reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification.
These measures may include access controls, secure storage, encryption where appropriate, staff confidentiality obligations, and regular review of security practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Contact information
If you have questions, requests, or complaints regarding this Privacy Policy or our handling of personal information, please contact:
Northlight Atelier
214 Queen Street W, Toronto, ON M5V 2A7, Canada
Email: [email protected]
Phone: +1 (416) 782-4958
13. Changes to privacy policy
Northlight Atelier may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any revised version will be posted on our website with an updated effective date, where applicable.
We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted constitutes acceptance of the updated policy, to the extent permitted by law.