Privacy Policy

Effective Date: October 1, 2025
Last Updated: October 1, 2025

1. Who We Are

Colour Centre ("we," "us," or "our") is a paint retailer operating in the Greater Toronto Area, specializing in Dunn Edwards paint products and professional painting supplies. We are committed to maintaining the accuracy, confidentiality, and security of your personal information.

2. What Personal Information We Collect

We collect personal information that you voluntarily provide to us, including:

Account Information

• Name, email address, and phone number
• Billing and shipping addresses
• Professional credentials (for contractor accounts)
• Company information (for business accounts)

Transaction Information

• Purchase history and order details
• Payment information (processed securely through Stripe)
• Delivery preferences and special instructions

Communication Information

• Contact form submissions and support inquiries
• Email communications and preferences
• Chat logs with our AI assistants

Technical Information

• IP address and browser information
• Website usage data and analytics
• Cookies and similar tracking technologies
• Location data (when you use our store locator)

3. How We Use Your Personal Information

We use your personal information for the following purposes:

Service Delivery

• Processing and fulfilling your orders
• Providing customer support and technical assistance
• Managing your account and preferences
• Facilitating delivery and pickup services

Business Operations

• Maintaining accurate records and inventory
• Processing payments and managing billing
• Preventing fraud and ensuring security
• Complying with legal and regulatory requirements

Communication and Marketing

• Sending order confirmations and updates
• Providing product recommendations and promotions (with consent)
• Conducting customer satisfaction surveys
• Informing you about new products and services

4. When We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in these limited circumstances:

Service Providers

• Payment Processing: Stripe Inc. (for secure payment processing)
• Email Services: SendGrid (for transactional emails)
• Analytics: Vercel Analytics (for website performance)
• Shipping: Authorized delivery partners

Legal Requirements

• When required by law or legal process
• To protect our rights, property, or safety
• To prevent fraud or illegal activities

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. Your Rights and Choices

Under PIPEDA and applicable privacy laws, you have the following rights:

Access and Correction

• Request access to your personal information
• Correct inaccurate or incomplete information
• Update your account preferences at any time

Consent Management

• Withdraw consent for marketing communications
• Opt out of non-essential cookies
• Request deletion of your account (subject to legal requirements)

Data Portability

• Request a copy of your personal information in a structured format
• Transfer your information to another service provider

6. How We Protect Your Information

We implement comprehensive security measures to protect your personal information:

Technical Safeguards

• SSL/TLS encryption for all data transmission
• Secure cloud infrastructure with Supabase and Vercel
• Regular security audits and vulnerability assessments
• Multi-factor authentication for administrative access

Organizational Safeguards

• Employee training on privacy and security practices
• Access controls and need-to-know principles
• Regular review and update of security policies
• Incident response and breach notification procedures

7. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Account Information: Until account deletion or 7 years after last activity
• Transaction Records: 7 years for tax and legal compliance
• Marketing Communications: Until you unsubscribe
• Technical Data: 2 years for analytics and security purposes

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Essential Cookies

• Authentication and session management
• Shopping cart functionality
• Security and fraud prevention

Analytics Cookies

• Website performance and usage analytics
• Error tracking and debugging
• User experience optimization

You can manage cookie preferences through your browser settings or our cookie consent banner.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.

11. International Data Transfers

Your personal information may be processed and stored outside of Canada by our service providers. We ensure that appropriate safeguards are in place to protect your information in accordance with Canadian privacy laws.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by email or through a prominent notice on our website. Your continued use of our services after such changes constitutes acceptance of the updated policy.

13. Contact Information

If you have questions, concerns, or requests regarding this privacy policy or our privacy practices, please contact our Privacy Officer:

14. Complaint Process

If you believe we have not complied with this privacy policy or applicable privacy laws, you may file a complaint with:

• Our Privacy Officer (contact information above)
• The Office of the Privacy Commissioner of Canada: www.priv.gc.ca
• Your provincial privacy commissioner (if applicable)