Last updated: April 7, 2026
GRAPHIC T-SHIRTS (“we,” “us,” or “our”) operates graphictshirts.shop. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, make a purchase, or interact with us.
We comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia\’s Personal Information Protection Act (PIPA), and the European Union’s General Data Protection Regulation (GDPR) as applicable to our international customers.
1. Who We Are
GRAPHIC T-SHIRTS is a premium clothing brand offering luxury streetwear and graphic apparel, incorporated and operated in British Columbia, Canada.
Data Controller: GRAPHIC T-SHIRTS
Website: graphictshirts.shop
Contact: [email protected]
Address: Vancouver, British Columbia, Canada
2. Information We Collect
2.1 Information You Provide Directly
- Account information: Name, email address, and hashed password when you create an account
- Order information: Name, billing address, shipping address, email address, and phone number when you place an order
- Payment information: We do not store your payment card details. Payment is processed securely by Stripe and PayPal. We retain only the last four digits of your card and transaction reference numbers
- Communications: Messages, inquiries, or feedback you send us via email or contact forms
- Marketing preferences: Whether you have opted in to receive promotional emails
2.2 Information Collected Automatically
- Log data: IP address, browser type, operating system, referring URLs, pages visited, time and date of visit
- Device information: Device type, screen resolution, language settings
- Cookies: See Section 7 for full details
- Location data: General geographic location derived from IP address (country and city level only)
2.3 Information From Third Parties
- Payment processors: Transaction confirmation and fraud prevention signals from Stripe and PayPal
- Shipping carriers: Delivery status updates from our shipping partners
- Social media platforms: Basic profile information if you use social login, as permitted by your privacy settings
3. How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Process and fulfill orders | Name, address, email, payment reference | Contract performance |
| Order confirmations and shipping updates | Email, name, order details | Contract performance |
| Returns, refunds, and customer service | Name, email, order details | Contract performance |
| Fraud prevention and security | IP address, payment signals, order patterns | Legitimate interest |
| Tax and accounting compliance | Name, address, order amounts | Legal obligation |
| Marketing emails (with consent) | Email, name, purchase history | Consent (CASL/GDPR) |
| Website improvement | Aggregated browsing analytics | Legitimate interest |
| Responding to inquiries | Name, email, message content | Legitimate interest |
4. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only as follows:
- Payment processors: Stripe and PayPal process payment transactions under their own privacy policies
- Shipping carriers: Canada Post, UPS, DHL, USPS — receive your name and shipping address to deliver your order
- Email service provider: Receives your name and email address to send transactional and marketing emails
- Analytics: Anonymized or aggregated browsing data only
- Legal requirements: Where required by law, court order, or government authority
- Business transfers: In the event of a merger or acquisition, you will be notified before your data is transferred
5. Data Retention
- Order and transaction records: 7 years (Canadian tax and accounting law)
- Customer account information: Duration of account plus 2 years after closure
- Marketing consent records: Until consent is withdrawn, plus 3 years for CASL compliance documentation
- Customer service correspondence: 3 years from last contact
- Website logs and analytics: 13 months on a rolling basis
- Security and fraud prevention data: 90 days for rate limiting; up to 2 years for confirmed fraud records
6. International Data Transfers
GRAPHIC T-SHIRTS is based in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. Some service providers (payment processors, email platforms) may process data in the United States. Where this occurs, we ensure appropriate safeguards including Standard Contractual Clauses where applicable.
7. Cookies
7.1 Essential Cookies (always active)
Session cookies, cart cookies, security (CSRF) cookies, and cookie consent preference cookies. These cannot be disabled as the website requires them to function.
7.2 Analytics Cookies (require consent)
Help us understand how visitors use our website. We obtain your consent before placing these cookies if you are in the EU, UK, or another jurisdiction requiring prior consent.
7.3 Marketing Cookies (require consent)
We do not currently use third-party advertising cookies. If we introduce them in the future, we will update this policy and obtain consent where required.
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.
8. Your Privacy Rights
8.1 All Customers (Canada — PIPEDA/PIPA)
- Right of access: Request a copy of the personal information we hold about you
- Right to correction: Request correction of inaccurate or incomplete information
- Right to withdraw consent: Withdraw consent for discretionary processing (such as marketing) at any time
- Right to complain: File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca
8.2 EU/EEA Customers (GDPR)
- Right to erasure: Request deletion of your personal data (subject to legal retention obligations)
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to restriction: Request limits on how we use your data
- Right to object: Object to processing based on legitimate interests or for direct marketing
- Right to lodge a complaint: Contact your local EU supervisory authority at edpb.europa.eu
8.3 How to Exercise Your Rights
Email [email protected] with the subject line “Privacy Request.” We will respond within 30 days. Identity verification may be required.
9. Marketing Communications
We send marketing emails only with your consent, in compliance with Canada’s Anti-Spam Legislation (CASL). Every marketing email includes an unsubscribe link. Unsubscribe requests are honoured within 10 business days.
To unsubscribe: click “Unsubscribe” in any marketing email, email [email protected] with the subject “Unsubscribe,” or update your preferences in your account. Unsubscribing does not affect transactional order emails.
10. Security
We use SSL/TLS encryption, hashed password storage, strict access controls, and PCI-DSS compliant payment processing. We never handle raw card data. In the event of a breach posing significant harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by PIPEDA. EU customers will be notified within 72 hours per GDPR requirements.
11. Children’s Privacy
Our website is not directed at children under 16. We do not knowingly collect personal information from children under 16. Contact [email protected] immediately if you believe a child’s data has been collected.
12. Third-Party Links
Our website may link to third-party websites. We are not responsible for their privacy practices. This policy applies solely to graphictshirts.shop.
13. Changes to This Policy
When we make material changes, we will update the “Last updated” date and notify registered customers by email at least 14 days in advance. Continued use of our website after the effective date constitutes acceptance.
14. Contact Us
GRAPHIC T-SHIRTS — Privacy Officer
[email protected]
Vancouver, British Columbia, Canada
If you are not satisfied with our response, you may escalate to:
- Canada: Office of the Privacy Commissioner — priv.gc.ca
- British Columbia: Office of the Information and Privacy Commissioner — oipc.bc.ca
- European Union: Your local supervisory authority — edpb.europa.eu
- United Kingdom: Information Commissioner\’s Office — ico.org.uk
