Privacy policy
Last updated: August 18, 2026
illuscyn is a small independent shop run by one person in Ontario, Canada. This policy explains what personal information the shop collects, why, who it is shared with, and what you can ask for. It follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
What is collected
When you place an order, the following is collected so the order can be taken and shipped:
- Your name
- Your email address
- Your phone number
- Your shipping address, and billing address if it differs
- A list of the items you ordered, and the amount paid
Payment card details are never seen or stored by illuscyn. Card information is entered on a payment page hosted by Stripe and handled entirely by Stripe. The shop only receives confirmation that a payment succeeded.
When you browse, your own browser stores two things on your device:
- the contents of your shopping cart, so it survives a page refresh;
- whether you selected Canada or the United States for shipping.
Both stay on your device, are never transmitted to illuscyn, and you can clear them at any time through your browser settings. They are needed for the cart to work — they are not used to track you.
What is not collected
This site runs no analytics, no advertising pixels, and no third-party tracking of any kind. There are no Google Analytics, Meta/Facebook, or similar scripts. No profile of your browsing is built, and nothing is sold or rented to anyone, ever.
There is currently no mailing list. You will not receive marketing email as a result of ordering — only messages about your actual order.
Why it is collected
- To process your payment and fulfil your order
- To send you an order confirmation and receipt
- To contact you if there is a problem with your order
- To meet tax and business record-keeping obligations
Your information is not used for anything else without asking you first.
Who it is shared with
Stripe — payment processing. Stripe receives your name, email, phone, address and payment details in order to take the payment and guard against fraud. Stripe is based in the United States, so this information is stored and processed outside Canada and may be accessible to US authorities under US law. Stripe's own privacy policy is at stripe.com/privacy.
Shipping carriers — your name and address are given to the postal carrier so your parcel can be delivered.
Nothing is shared with anyone else, except where the law requires it.
How long it is kept
Order records are retained for seven years, which is the period Canadian tax rules expect business records to be kept. Order data held by Stripe is retained under Stripe's own schedule. Anything not needed for a legal or tax obligation is deleted once your order is complete.
Your rights
You can ask, at any time, to:
- see what personal information is held about you;
- have anything inaccurate corrected;
- have your information deleted, where no legal obligation requires keeping it;
- withdraw consent for any use that is not required to complete your order.
Email hello@illuscyn.ca and it will be answered within 30 days, as PIPEDA requires. If you are not satisfied with the response, you can complain to the Office of the Privacy Commissioner of Canada.
Security
The site is served entirely over HTTPS. Payment card data never touches this site — it goes directly to Stripe, which is PCI-DSS Level 1 certified. Order information is held in Stripe's dashboard behind an account protected by two-factor authentication.
Children
This shop is not directed at children under 13, and personal information is not knowingly collected from them. If you believe a child has provided information, email hello@illuscyn.ca and it will be deleted.
Changes to this policy
If this policy changes, the updated version will be posted here with a new date at the top. Material changes affecting how your information is used will be noted clearly.
Contact
Questions about privacy, or about this policy, go to hello@illuscyn.ca.
This policy describes how the shop actually operates today. It is not legal advice.