Privacy policy
Last updated:
Who is responsible
This website is run by Spiritual Rayat, an online store in Ontario, Canada, that prints custom polyester tapestries.
Person responsible for personal information: The owner of Spiritual Rayat, at the contact email orders@example.com.
What we collect and how
We collect only what is needed to answer your request or fill your order.
- If you ask for a free AI edit: your name, your email address, the image you send, the change you describe, the size you have in mind if you choose one, and the language of the page you used. These are sent through a form hosted by Netlify.
- If you order a tapestry: the image you upload or the catalog design you choose, the size, the orientation, how the image is positioned in the preview, and the quantity. Your name, email address and shipping address are entered on the Stripe payment page and passed to us once you pay.
- Your payment card details go to Stripe only. This site never receives or stores card numbers.
- In your browser: the design you are working on is saved on your own device, in your browser, so that it survives a reload and so that an image you choose on the home page reaches the designer. It is sent to us only when you continue to payment.
- In server logs: our hosting provider, Netlify, records technical data such as your IP address, your browser type and the pages you request, to deliver the site and keep it secure.
Why we use it
We use your information to make the edit you asked for and reply to you, to take payment, print and ship your order, to send you messages about your order, and to keep the records the business needs. We do not sell your information and we do not use it for marketing.
Who else handles it
- Netlify hosts this website and receives the AI-edit form.
- Supabase stores order records and uploaded images in a private database and private file storage.
- Stripe processes payments and sends your receipt. The Stripe payment page is shown in English.
- This site has no analytics, no advertising and no tracking or marketing cookies.
Each of these services has its own privacy policy.
Where it goes
These providers may store or process information outside your province and outside Canada.
How long we keep it
- Uploaded images are deleted 90 days after the order is delivered.
- Images uploaded for an order that is never paid are deleted after 7 days.
- Images we decline after review are deleted when we decline them.
- Order details are kept for 6 years for tax records.
- AI-edit requests are deleted 30 days after we email you the edited image.
Security
Everything you send to this site travels over an encrypted connection (HTTPS). Images uploaded with an order are stored privately. Only the owner can open them, through a link that expires after 10 minutes, and the list of orders is behind a password.
Your rights
Because the business is in Ontario, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) applies. You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to orders@example.com.
If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.
Changes
If we change this policy, we will update the date at the top of this page. See also our terms of sale.