Privacy Policy

This Privacy Policy explains how Melanie Cullen, operating as “JFS Customs” (“we,” “our,” or “us”), a sole proprietorship based in Wetaskiwin, Alberta, collects, uses, discloses, and protects your personal information when you visit our website, place an order, or request a custom quote.

We are committed to protecting your privacy and complying with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL).

By using our website or placing an order, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our website.

Contact for privacy matters: JFS Customs — privacy@jfscustoms.ca — Wetaskiwin, AB, Canada.

2.1 Information You Provide

• Order information: your name, shipping and billing address, email address, and phone number when you place an order or pick one up locally.
• Account information: your email address if you choose to create an optional account. We use “magic link” sign-in, so we do not collect or store any password.
• Custom-order details: the description, specifications, and any artwork, images, or files you upload when requesting a custom quote.
• Communications: messages you send us through the website, by email, or otherwise, and our replies.
• Payment information: when you pay by card, your payment details are entered directly with our payment processor, Stripe. We do not receive or store your full card number on our systems.

2.2 Information Collected Automatically

• Usage data: how you interact with the website, such as pages viewed and items added to your cart.
• Device and log data: browser type, operating system, device identifiers, IP address, and access times.
• Cookies and similar technologies: see Section 9 (Cookies and Tracking).

2.3 Information from Service Providers

We receive limited information from the service providers that help us run the store — for example, order and payment confirmation details from Stripe, and delivery or tracking information from shipping carriers.

We use your personal information to:

• Process, fulfill, and ship your orders, and arrange local pickup.
• Prepare quotes for custom orders and produce the items you approve.
• Send you order-related messages, such as order confirmations, shipping notices, and quote replies.
• Respond to your questions and provide customer support.
• Maintain your optional account and order history.
• Send you marketing emails, such as our newsletter, where you have consented (see Section 8).
• Detect, prevent, and address fraud, abuse, or security issues.
• Comply with our legal and tax obligations.

We will not use your information for a new purpose that is incompatible with those above without first obtaining your consent.

When you request a custom order, you may upload artwork, logos, photos, or other files. We use these files only to prepare your quote, produce your order, and keep a record of what was made.

We retain uploaded artwork and the associated order record for 24 months after your order is completed, so we can handle reorders, reprints, and warranty or defect claims. You may ask us to delete your uploaded artwork at any time, subject to the record-keeping needs described in Section 7.

You are responsible for ensuring you have the right to use any artwork you upload. Our Terms of Service describe this responsibility in full.

We do not sell your personal information. We share data only in the limited circumstances below.

5.1 Service Providers

We use trusted service providers to operate the store. They process information only as needed to provide their service to us:

• Stripe — payment processing. Card data is handled directly by Stripe under its own privacy policy and PCI DSS compliance program.
• Amazon Web Services (AWS SES) — sending automated order and notification emails.
• Supabase — secure database and file storage for orders, accounts, and uploaded artwork.
• Vercel — website hosting.
• Google reCAPTCHA — protecting our forms from spam and automated abuse, subject to Google’s privacy policy.
• Shipping carriers — to deliver your order.

Technical service provider: our website, database, and automated email are built and hosted on our behalf by QuantumFlex AI Inc. Your data remains ours (and yours); it is not used for any purpose other than operating the JFS Customs store.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or a lawful request from a government authority, or where we reasonably believe disclosure is necessary to protect rights, property, or safety.

5.3 Business Transfers

If the business is sold or transferred, your information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a materially different privacy policy.

We use commercially reasonable technical and organizational measures to protect your information, including:

• Encryption of data in transit using current TLS standards.
• Encryption of stored data at rest.
• Card payments handled directly by Stripe, so full card numbers never reach our systems.
• Access limited to those who need it to operate the store.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach occurs that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

We keep personal information only as long as necessary for the purposes in this policy:

• Order and customer records: kept for the life of your relationship with us and as needed to handle reorders, returns, and warranty claims.
• Uploaded custom artwork: kept as described in Section 4.
• Account data: kept while your account is active; deleted on request after account closure, subject to legal retention needs.
• Tax and financial records: retained for the period required by the Canada Revenue Agency and applicable tax law (generally six years).
• Marketing data: kept until you unsubscribe or withdraw consent.

We comply with Canada’s Anti-Spam Legislation (CASL). We send two kinds of email:

• Transactional messages — order confirmations, shipping notices, quote replies, and similar messages required to complete your order. These do not require separate consent.
• Marketing messages — our newsletter and promotions, sent only with your express or implied consent under CASL.

Every marketing email includes a working unsubscribe link and our contact information. You may withdraw consent at any time by clicking unsubscribe or by contacting us. Unsubscribing from marketing email does not stop transactional messages about orders you have placed.

We use cookies and similar technologies to operate the website and improve your experience:

• Essential cookies — required for the cart, checkout, sign-in, and security. These cannot be turned off without breaking the site.
• Functional cookies — remember your preferences.
• Analytics cookies — help us understand how the site is used, in aggregated form where possible.

Most browsers let you refuse or delete cookies. Disabling essential cookies may prevent parts of the website from working. We also use Google reCAPTCHA on our forms, which is subject to Google’s privacy policy and terms.

Under PIPEDA, you have the right to:

• Know whether we hold personal information about you and access that information.
• Ask us to correct inaccurate or incomplete information.
• Withdraw consent at any time, subject to legal or contractual limits.
• Ask us to delete your personal information, subject to our legal retention obligations.
• File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) if you believe your privacy rights have been violated.

To exercise any of these rights, contact us at privacy@jfscustoms.ca. We will respond within a reasonable time and may need to verify your identity first.

Our website is intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Our website may link to third-party sites, such as our social media pages. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new “Last updated” date. Material changes may also be communicated by email or a notice on the website. Your continued use of the website after changes take effect constitutes acceptance of the updated policy.

For questions, requests, or complaints about this Privacy Policy or our data practices:

If you are a Canadian resident and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.