Hana Studio (“we”, “us”, “our”) operates hanastudio.caand provides floral products, workshops, and event services in Vancouver, British Columbia. This policy explains what personal information we collect, how we use it, and the choices you have. It is designed to comply with British Columbia’s Personal Information Protection Act (PIPA) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Information we collect
We collect only what we need to fulfil your order, run our business, and improve the site:
- Contact details — name, email, phone number, and delivery address, provided by you when you place an order, book a workshop, or contact us.
- Order information — the items you purchase, card message text, delivery instructions, and order history.
- Payment information — handled entirely by Stripe. We do not see or store your full card number. We receive only a token and the last four digits.
- Technical data — IP address, browser, device type, and basic analytics about how you use the site. Used for security (bot protection via Cloudflare Turnstile) and aggregate usage reporting.
- Marketing preferences — whether you have consented to receive newsletters or promotional emails.
2. How we use your information
- To process and fulfil your orders, including delivery and communication about your order status.
- To provide customer support and respond to inquiries.
- To send order confirmations and (with your consent) marketing emails about new arrivals, workshops, and seasonal offers.
- To protect the site against fraud, abuse, and automated bot traffic.
- To comply with tax, accounting, and other legal obligations in Canada.
3. Who we share it with
We never sell your personal information. We share it only with trusted service providers needed to run the business:
- Stripe — payment processing.
- Vercel — website hosting.
- Supabase — database and order storage.
- Resend — transactional email (order confirmations, contact form).
- Cloudflare — DNS, bot protection (Turnstile), and email routing.
- Delivery partners — couriers receive the recipient’s name, address, and phone number for the sole purpose of delivering your order.
Some of these providers store data outside of Canada (for example in the United States). By using the site, you consent to this cross-border transfer. We require each provider to apply safeguards at least equivalent to Canadian privacy standards.
4. How long we keep it
- Order records: 7 years (Canada Revenue Agency requirement for tax records).
- Contact form submissions: up to 3 years.
- Marketing consent: until you unsubscribe.
- Analytics data: up to 26 months in aggregated form.
5. Your rights
Under BC PIPA and PIPEDA, you have the right to:
- Access the personal information we hold about you.
- Request corrections if something is inaccurate.
- Withdraw consent for marketing emails at any time (use the unsubscribe link or email us).
- Request deletion of your personal information, subject to our legal retention obligations above.
To exercise any of these rights, email hello@hanastudio.ca. We will respond within 30 days.
6. Cookies
The site uses essential cookies (cart session, CSRF protection, Turnstile bot check) that are required for it to function. We do not use third-party advertising cookies or cross-site tracking. Analytics, if enabled, uses privacy-preserving settings and anonymised IP addresses.
7. Children
The site is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.
8. Changes to this policy
We may update this policy from time to time. When we do, we will update the “Last updated” date at the top. Material changes will be communicated through a notice on the site.
9. Contact
Questions about this policy or how we handle your data? Email hello@hanastudio.ca.
If you are not satisfied with our response, you can contact the Office of the Information and Privacy Commissioner for British Columbia at oipc.bc.ca.