Last updated: February 2026 Privacy Officer for Québec: Carlos Alarcón — info@codeink.art

At CodeInk, we treat your data with the same precision and respect as we treat our art. We collect only what is necessary to create and deliver your piece, and we are transparent about how we use it.

This Privacy Policy describes how CodeInk ("we", "us", "our") collects, uses, discloses, and protects your personal information when you visit codeink.art, make a purchase, or communicate with us. It applies to all services offered through our website, which is hosted by Squarespace.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this policy carefully. By using our website or placing an order, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

CodeInk is an independent art studio operated as a sole proprietorship, based in Québec City, Québec, Canada.

Contact: info@codeink.art Privacy Officer (Québec — Loi 25): Carlos Alarcón, info@codeink.art

As a business based in Québec, Canada, we are subject to:

• The Loi modernisant des dispositions législatives en matière de protection des renseignements personnels (Law 25, Québec)

• The Loi sur la protection des renseignements personnels et les documents électroniques (LPRPDE, Canada)

• The Charte de la langue française (Québec)

Where we serve customers in the European Union or United Kingdom, we also comply with applicable provisions of the General Data Protection Regulation (GDPR).

2. Personal Information We Collect

When we use the term "personal information", we mean information that identifies or can reasonably be linked to you. We may collect the following categories of personal information depending on how you interact with us:

Contact details — your name, shipping address, billing address, phone number, and email address.

Order & transaction information — items purchased, order history, returns, exchanges, cancellations, and commission details including coordinates, names, dates, or images you provide for personalized orders.

Account information — if you create an account: your username, password, preferences, and settings.

Payment information — payment method type and transaction confirmation. Please note: CodeInk does not store or have access to your full credit card or banking numbers. All payment data is processed directly and securely by our payment processors (Stripe, PayPal, or Square), who maintain their own security certifications. We only receive confirmation of a successful transaction.

Communications — the content of any messages you send us via email, contact forms, or other channels.

Device & usage information — your IP address, browser type, device type, pages visited, time spent on pages, and how you navigate our website. This information is collected automatically through cookies and analytics tools.

Marketing preferences — whether you have opted in or out of marketing communications.

3. How We Collect Your Information

We collect personal information from the following sources:

Directly from you — when you place an order, create an account, submit a commission request, contact us, or sign up for our newsletter.

Automatically — through cookies, pixels, and similar tracking technologies when you visit our website. See Section 7 (Cookies) for full details.

From our service providers — including Squarespace (our hosting platform), payment processors, and shipping carriers, who may share relevant data with us in order to fulfil your order.

From third-party platforms — if you interact with our social media accounts or click on our advertisements on platforms such as Instagram, TikTok, or Pinterest.

4. How We Use Your Personal Information

We use your personal information for the following purposes:

Order fulfilment — to process your payment, produce your artwork, arrange shipping, send tracking information, and manage returns or replacements.

Commission management — to manage the full lifecycle of custom and personalized commissions, including file preparation, digital proof review, approval tracking, and production scheduling.

Customer relationship management — to maintain your order history, respond to your inquiries, and provide customer support.

Marketing and communications — to send you promotional emails, collection announcements, and updates about new designs, if you have opted in. You may unsubscribe at any time via the link in any email we send.

Analytics and improvement — to understand how visitors use our website, identify popular products, and improve the shopping experience.

Security and fraud prevention — to detect and prevent fraudulent transactions and protect the integrity of our services.

Legal compliance — to comply with applicable laws, respond to legal requests, and enforce our Terms of Service.

Financial record-keeping — to maintain transaction records as required by Canadian tax law (generally 7 years).

5. How We Share Your Personal Information

We do not sell your personal information. We may share it with trusted third parties only for the purposes described in this policy and subject to appropriate data protection agreements.

5.1 Service Providers & Technology Partners

The following third parties may receive or process your personal information on our behalf. Each is listed with the purpose for which they receive your data:

Hosting & E-commerce Infrastructure

• Squarespace Inc. (USA) — Website hosting, online store, payment processing infrastructure, and analytics. Privacy Policy

• Amazon Web Services (AWS) (USA) — Cloud infrastructure underlying Squarespace services.

Payment Processing

• Stripe Inc. (USA) — Primary payment processor. Stripe handles and stores all payment card data directly. CodeInk does not access your full card numbers. Privacy Policy

• PayPal Holdings Inc. (USA) — Alternative payment option. Privacy Policy

• Square Inc. (USA) — In-person payment processing at art markets and events. Privacy Policy

Shipping & Fulfillment

• Canada Post — Domestic and international shipping. Your name, address, and order details are shared to generate shipping labels and tracking.

• UPS / FedEx — International shipping where applicable.

Analytics & Website Performance

• Google LLC — Google Analytics 4 (website traffic and behaviour analytics), Google Search Console (SEO performance), Google Ads (remarketing). Data may be transferred to and processed in the USA. Privacy Policy

• Microsoft Corporation — Microsoft Clarity (session recordings and heatmaps to understand user navigation). Privacy Policy

Advertising & Social Media Pixels

The following advertising pixels may be active on our website. These tools allow us to measure the effectiveness of our advertising, build audience segments, and show relevant ads to people who have visited our site:

• Meta Platforms Inc. — Meta Pixel (Facebook & Instagram advertising and remarketing). Privacy Policy

• TikTok Inc. — TikTok Pixel (TikTok advertising and conversion tracking). Privacy Policy

• Pinterest Inc. — Pinterest Tag (Pinterest advertising and audience building). Privacy Policy

You may opt out of interest-based advertising through your browser settings, your device's privacy controls, or by visiting youradchoices.ca.

Customer Relationship Management & Business Operations

CodeInk uses the Zoho Corporation suite of business tools to manage customer relationships, commissions, social media, and internal operations. The following Zoho products may process your personal information:

• Zoho CRM — Management of customer accounts, commission pipelines, order follow-ups, and client communication history.

• Zoho Social — Social media scheduling, publishing, and analytics across Instagram, TikTok, Facebook, Pinterest, and other platforms.

• Zoho Campaigns — Email marketing campaigns, newsletter management, and subscriber lists.

• Zoho Desk — Customer support ticket management.

• Zoho Analytics — Business intelligence and reporting, combining data from sales, marketing, and operations.

• Zoho Mail — Business email communications.

• Zoho Books — Accounting, invoicing, and financial record-keeping.

• Zoho Forms — Online forms for commission requests and customer inquiries.

Zoho Corporation is headquartered in India and operates data centres in multiple regions including Canada. CodeInk configures Zoho services to store data in the Canadian region where available. Zoho complies with GDPR and maintains appropriate data processing agreements. Zoho Privacy Policy

Email Marketing

• Mailchimp (Intuit Inc.) (USA) — Email marketing platform, used as an alternative to or in conjunction with Zoho Campaigns. Privacy Policy

6. Legal Bases for Processing (Québec & Canada)

Under Québec's Law 25 and Canada's LPRPDE, we process your personal information on the following bases:

Contractual necessity — processing required to fulfil your order, produce your artwork, and deliver it to you.

Legitimate interest — analytics, fraud prevention, and improving our services, where these interests do not override your privacy rights.

Consent — for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Legal obligation — retention of financial records as required by Canadian and Québec tax law.

7. Cookies & Tracking Technologies

Cookies are small files stored on your device when you visit a website. We use the following categories of cookies:

Category

Essential

Analytics

Marketing/Advertising

Preferences

When you first visit codeink.art, you will be presented with a cookie consent banner. Non-essential cookies (analytics, marketing) will only be activated after you provide your consent. You may change your cookie preferences at any time by clicking the cookie settings link in the footer of our website.

You may also control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website.

When personal information is no longer required for its original purpose and the applicable retention period has expired, it will be securely deleted or anonymized.

9. International Data Transfers

CodeInk is based in Québec, Canada. Some of our service providers are located outside of Canada, including in the United States and other jurisdictions.

For Québec residents: Before transferring your personal information outside of Québec, we conduct a privacy impact assessment (évaluation des facteurs relatifs à la vie privée) as required by Law 25, and ensure that appropriate protections are in place equivalent to those provided under Québec law. Where applicable, we use contractual clauses or rely on the service provider's compliance certifications (such as GDPR compliance) as the basis for transfer.

For EU/UK residents: Where we transfer personal information outside of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms including the European Commission's Standard Contractual Clauses or equivalent instruments.

The primary jurisdictions to which your data may be transferred include the United States (Squarespace, Google, Meta, Stripe, TikTok, Pinterest, Mailchimp) and India/Canada (Zoho Corporation).

10. Children's Privacy

Our services are not directed to individuals under the age of majority in their jurisdiction (18 in Québec). We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us at info@codeink.art and we will promptly delete it.

11. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, or disclosure. These include:

• Secure HTTPS encryption across our entire website

• Payment processing exclusively through PCI-DSS certified processors

• Access to customer data restricted to authorized personnel only

• Regular review of our data practices and third-party service providers

Please note that no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and we encourage you not to share sensitive information through unsecured channels.

12. Your Rights

Depending on where you live, you have the following rights regarding your personal information. We will respond to all requests within 30 days (or sooner, as required by applicable law):

Right to access — You may request a copy of the personal information we hold about you.

Right to correction — You may request that we correct inaccurate or incomplete information.

Right to deletion — You may request that we delete your personal information, subject to our legal retention obligations.

Right to portability — You may request that we provide your data in a structured, commonly used format.

Right to withdraw consent — Where processing is based on consent (e.g. marketing emails, non-essential cookies), you may withdraw it at any time without affecting prior processing.

Right to object — You may object to processing based on legitimate interest where your individual circumstances justify it.

Right to lodge a complaint — If you are a Québec resident and believe we have not complied with Law 25 or your privacy rights, you may file a complaint with the:

Commission d'accès à l'information du Québec (CAI) 575, rue Saint-Amable, bureau 1.10 Québec (Québec) G1R 2G4 Telephone: 1-888-528-7741 Website: cai.gouv.qc.ca

EU/UK residents may also lodge a complaint with their local data protection authority.

To exercise any of the above rights, contact us at info@codeink.art. We may need to verify your identity before processing your request. We will not discriminate against you for exercising your rights.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the "Last updated" date at the top of this page and, where required by law, provide you with additional notice.

We encourage you to review this policy periodically. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

14. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal information:

📧 info@codeink.art

Privacy Officer (Québec — Law 25): Carlos Alarcón 📧 info@codeink.art

We aim to respond to all privacy inquiries within 1–2 business days and to all formal rights requests within 30 days.

CodeInk — Drawn in Québec City, Canada. Every line tells a story. Every imperfection proves it's real.