Privacy Policy

Effective Date: June 29, 2026

1. Introduction and Company Information

This Privacy Policy explains how Northlight Creative Studio collects, uses, discloses, stores, and protects personal information in the course of operating an art-studio business in Canada. It applies to personal information collected through our website, email communications, phone calls, in-person interactions, bookings, consultations, commissions, workshops, events, and any other services or interactions with Northlight Creative Studio.

Northlight Creative Studio is committed to handling personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy laws.

Business Name: Northlight Creative Studio
Address: 214 Queen Street West, Toronto, ON M5V 2A7, Canada
Email: [email protected]
Phone: +1 (416) 782-5943

2. Data Collection and Processing

Northlight Creative Studio may collect and process the following categories of personal information, depending on your interactions with us:

• Identification and contact information: name, email address, phone number, mailing address, and other contact details.
• Service and transaction information: booking details, commission requests, consultation notes, purchase history, payment-related records, invoices, and correspondence.
• Artistic and project information: reference images, creative briefs, preferences, project specifications, and content you provide for commissions, exhibitions, or workshops.
• Website and technical information: IP address, browser type, device information, pages visited, referring URLs, and usage data collected through cookies or similar technologies.
• Communication information: messages sent to us by email, contact forms, social media, or other channels.
• Marketing preferences: subscription status, newsletter preferences, and responses to promotional communications.

We collect personal information directly from you where possible. We may also collect information from third parties where you have authorized such collection, or where permitted by law.

We process personal information by collecting, recording, organizing, storing, using, disclosing, and, where necessary, deleting it in accordance with this Privacy Policy and applicable law.

3. Purpose of Data Processing

Northlight Creative Studio processes personal information for the following purposes:

• to provide art-studio services, including consultations, commissions, workshops, classes, exhibitions, and related creative services;
• to communicate with clients, prospective clients, collaborators, and visitors;
• to prepare quotes, contracts, invoices, and receipts;
• to manage bookings, schedules, and project administration;
• to process payments and maintain accounting and tax records;
• to personalize services and understand client preferences and project requirements;
• to send service-related notices, updates, and administrative communications;
• to send marketing communications where permitted by law and, where required, with consent;
• to operate, maintain, secure, and improve our website, systems, and services;
• to detect, prevent, and investigate fraud, misuse, security incidents, or other unlawful activity;
• to comply with legal, regulatory, tax, and accounting obligations;
• to establish, exercise, or defend legal claims.

4. Legal Basis for Processing

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances and in accordance with applicable Canadian privacy law. Depending on the situation, our processing may be based on one or more of the following grounds:

• Consent: where you have given express or implied consent, including for certain communications, cookies, or marketing activities.
• Contractual necessity: where processing is necessary to enter into, perform, or manage a contract or service arrangement with you.
• Legal obligation: where processing is required to comply with applicable laws, regulations, court orders, or lawful requests.
• Legitimate business purposes: where processing is necessary for reasonable business purposes, such as service delivery, security, fraud prevention, internal administration, and improving our offerings, provided such processing is appropriate and not overridden by your rights and interests.

Where consent is required, you may withdraw it at any time, subject to legal or contractual restrictions and reasonable notice.

5. Data Sharing and Third Parties

Northlight Creative Studio does not sell personal information. We may share personal information only as necessary and only with the following categories of recipients:

• Service providers: website hosting, email delivery, cloud storage, payment processing, accounting, scheduling, customer relationship management, and IT support providers.
• Professional advisors: lawyers, accountants, insurers, and other advisors who require the information to provide services to us.
• Business partners and collaborators: where necessary for joint projects, exhibitions, workshops, or commissioned work, and only as appropriate to the engagement.
• Authorities and regulators: where required by law, subpoena, court order, or other lawful request.
• Successors in interest: in connection with a merger, reorganization, sale, financing, or transfer of all or part of our business, subject to appropriate confidentiality protections.

We require third parties that process personal information on our behalf to protect it and use it only for authorized purposes.

6. Data Transfer to Third Countries

Some of our service providers may store or process personal information outside Canada, including in the United States or other jurisdictions. As a result, personal information may be subject to the laws of those jurisdictions and may be accessible to courts, law enforcement, or regulatory authorities in those countries.

Where personal information is transferred outside Canada, Northlight Creative Studio takes reasonable steps to ensure that appropriate contractual, technical, and organizational safeguards are in place to protect the information in accordance with applicable law.

7. Storage Duration

Northlight Creative Studio retains personal information only as long as necessary to fulfill the purposes for which it was collected, to comply with legal, accounting, or reporting obligations, to resolve disputes, and to enforce agreements.

Retention periods vary depending on the type of information and the purpose for which it was collected. In general:

• client and transaction records are retained for the period required by applicable tax, accounting, and business laws;
• correspondence and project files are retained for as long as needed to manage the relationship and any follow-up matters;
• marketing consent records are retained until you unsubscribe or withdraw consent, and for a reasonable period thereafter to document compliance;
• website analytics and technical logs are retained for a limited period necessary for security, troubleshooting, and performance analysis.

When personal information is no longer required, we will securely delete, destroy, or anonymize it, as appropriate.

8. User Rights

Subject to applicable law, you may have the following rights regarding your personal information held by Northlight Creative Studio:

• Access: to request confirmation of whether we hold personal information about you and to obtain a copy of that information.
• Rectification: to request correction of inaccurate, incomplete, or outdated personal information.
• Erasure: to request deletion of personal information in certain circumstances, subject to legal retention requirements and other lawful exceptions.
• Restriction: to request that we limit the processing of your personal information in certain circumstances.
• Data portability: where applicable, to request a copy of certain personal information in a structured, commonly used, and machine-readable format.
• Objection: to object to certain processing activities, including some forms of direct marketing where applicable.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding. We will respond within a reasonable time and in accordance with applicable legal requirements.

9. Withdrawal of Consent

Where our processing is based on your consent, you may withdraw that consent at any time by contacting Northlight Creative Studio or by using any unsubscribe or preference-management mechanism we provide.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. In some cases, withdrawing consent may limit our ability to provide certain services or communications.

10. Right to Complain

If you have concerns about our privacy practices, we encourage you to contact us first so we can address your concern directly.

You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or, where applicable, a provincial privacy regulator. If you are located in Canada and believe that Northlight Creative Studio has not complied with applicable privacy law, you may contact the relevant privacy authority for guidance on your rights and complaint options.

11. Data Security

Northlight Creative Studio uses reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification.

These measures may include, as appropriate:

• password protection and access controls;
• secure storage and restricted access to records;
• encryption or secure transmission methods where appropriate;
• staff and contractor confidentiality obligations;
• regular review of systems and security practices.

However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, but we take reasonable steps to reduce risk and respond to incidents in accordance with applicable law.

12. Contact Information

If you have questions, requests, or concerns about this Privacy Policy or our handling of personal information, please contact:

Northlight Creative Studio
214 Queen Street West, Toronto, ON M5V 2A7, Canada
Email: [email protected]
Phone: +1 (416) 782-5943

Please include sufficient detail in your request so we can identify you and respond appropriately.

13. Changes to Privacy Policy

Northlight Creative Studio may update this Privacy Policy from time to time to reflect changes in our practices, services, legal obligations, or operational requirements. Any updated version will be posted on our website with a revised effective date.

We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes become effective constitutes your acknowledgment of the updated Privacy Policy, to the extent permitted by law.