Privacy Policy

1. Introduction

Custom Laser Works ("we", "us", or "our") is a Calgary, Alberta business. We are committed to protecting your personal information and handling it in accordance with Canadian privacy law — the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA). This policy explains what we collect, why, how we protect it, how long we keep it, and your rights.

2. Information We Collect

Information you provide

• Contact details: name, email address, phone number, and mailing/shipping address.
• Order details: the products you order and any customization notes.
• Team roster information (for personalized team products): player names, jersey numbers, and sizes.
• Files you upload: logos, artwork, and design files.

We collect only what we need to prepare and fulfill your order or respond to your inquiry (data minimization). We do notcollect or store your payment card details — payments are handled directly by our payment processor (see Section 4).

Information collected automatically

• Browser and device type, general location (country/city), pages visited, and referring website.

Website analytics run only with your consent via the cookie notice. See our Cookie Policy.

3. How We Use Your Information

• Prepare, produce, and ship your order.
• Send design proofs and order confirmations, and respond to your questions.
• Provide customer support and process reorders or issues.
• Meet legal, tax, and accounting obligations.
• With your consent, understand and improve how the website performs.

4. Service Providers We Share With

We do not sell, trade, or rent your personal information. We share it only with service providers who help us operate, and only as needed:

• Square — payment processing and invoicing.
• Resend — sending transactional email (proofs, confirmations, replies).
• Freightcom — calculating shipping rates.
• Vercel — website hosting and (consent-based) analytics.
• Railway — hosting our order-management application and database.
• Encrypted cloud storage for the design files you upload.

We may also disclose information where required by law or in response to a valid legal request.

5. Storage Outside Canada

Some of the service providers above (including our payment, email, hosting, and storage providers) operate in the United States. As a result, your personal information may be stored or processed in the U.S. and may be accessible to U.S. authorities under U.S. law. We use providers that offer appropriate contractual and technical safeguards, and we encrypt uploaded files. By using our services you consent to this transfer. If you have questions about how your information is handled outside Canada, contact us (Section 9).

6. How We Protect Your Information

• Encrypted transmission (HTTPS/TLS) across the entire site.
• Uploaded design files are encrypted at rest (AES-256).
• Access to personal information is limited to those who need it to do their work.
• Security headers, automated abuse/scanner blocking, and ongoing monitoring.

No method of transmission or storage is completely secure, but we take reasonable steps to protect your information and to notify you and the relevant authorities of a breach where required by law.

7. How Long We Keep It (Retention)

We keep personal information only as long as needed for the purpose it was collected:

• Uploaded design files are automatically deleted about 30 days after upload.
• Team rosters and production files are removed shortly after an order is completed — they are no longer needed once your product is made.
• Order contact details are anonymized after they are no longer needed for support or reorders (roughly six months), leaving only a non-identifying order record.
• Payment and tax records are retained by our payment processor (Square) for the period required by law.

8. Your Rights & Consent

Under PIPEDA and Alberta PIPA you have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Request deletion of your personal information, subject to our legal obligations.
• Withdraw consent at any time (including for analytics or marketing messages).
• Complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.

To exercise any of these, contact us using the details below. We will respond within the timeframes required by law.

9. Children’s Information

Some team products include roster information for youth sports, which may relate to minors. We collect only what is needed to produce the order, use it only for that purpose, and delete it shortly after the order is completed. Roster information should be provided by a parent, guardian, or team organizer.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be posted here with an updated date.

11. Contact Us

For any privacy question or to exercise your rights, contact us: