Privacy Policy

Effective Date: October 1, 2026

This Privacy Policy describes how Thank You Cards Canada (operating at thankyoucards.ca) collects, uses, protects, and discloses personal information when you visit our website, register for a business account, or order custom-printed stationery and direct-mail fulfillment services.

By accessing our website or placing an order, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect information directly from you when you register an account, customize a product, proceed through checkout, or correspond with our customer support team.

A. Customer Account & Order Information

Contact & Profile Details: Full name, business or brokerage name, email address, phone number, and account password.

Billing Details: Billing street address, postal code, and country. (Note: All payment card transactions are handled externally via our payment gateway; we never capture or store raw credit card credentials on our servers.)

Purchase History: Records of card designs selected, quantities, transaction totals, and dispatch dates.

B. Customization & Direct-Mail Fulfillment Data

Because we personalize and dispatch physical cards directly to your clients or colleagues, we collect the specific details submitted via our customization tools:

Card Messages: Custom typed sentiments or pre-selected preset templates submitted for printing inside the card.

Recipient Delivery Information: Full names, company or suite numbers, street addresses, cities, provinces/states, and postal codes for each designated card recipient.

Branding & Vector Artwork: Business logos, broker seals, and artwork files uploaded to be printed on your cards or saved to your profile for repeat orders.

Target Scheduling Dates: Requested mail-out dates or instructions to dispatch immediately via Canada Post.

C. Technical & Usage Data

When you browse our website, we automatically collect basic connection and device data through server logs and standard cookies:

IP address, browser type, operating system, device characteristics, pages viewed, time spent on pages, and referring website addresses.

2. How We Use Your Information

We process personal and fulfillment data solely for legitimate business purposes:

Production & Physical Fulfillment: Printing personalized interior messages, rendering uploaded logos, formatting envelope addressing, applying postage, and mailing physical cards.

E-Commerce Account Administration: Maintaining your saved profile details, order archives, and stored company logos for convenient repeat ordering.

Order Notifications & Service Messages: Sending automated order confirmations, proof notices, transaction receipts, and fulfillment updates.

Customer Support: Resolving design adjustments, troubleshooting delivery inquiries, and managing account requests.

Platform Security: Preventing fraudulent transactions, combating unauthorized access, and maintaining server integrity.

3. Third-Party Service Providers & Integrations

We do not sell, rent, lease, or trade personal data or recipient lists to marketing brokers or third parties. We share information only with trusted service providers essential to running our e-commerce platform and executing direct-mail services:

A. Payment Processing (Stripe)

Online payment transactions are processed securely through Stripe, Inc.

 When you submit payment at checkout, your card details, billing address, and transaction amount are transmitted directly to Stripe via 256-bit SSL encryption.

Thank You Cards Canada does not store or process card numbers, expiration dates, or CVV security codes on its servers.

Stripe maintains compliance with Payment Card Industry Data Security Standards (PCI-DSS Level 1) and processes data under its own privacy framework. To learn more, review Stripe's Privacy Policy.

B. Direct Mail & Postal Carrier (Canada Post)

Physical cards are delivered via Canada Post.

Recipient names and postal addresses provided during ordering are printed directly onto mailing envelopes and transferred to Canada Post solely for physical transit and delivery.

C. Web Hosting & Infrastructure

Our website, customer database, and uploaded digital assets (such as business logos) are hosted on secure, restricted-access cloud and web hosting environments.

4. Recipient Data Confidentiality

We recognize that corporate clients, real estate professionals, and business advisors entrust us with confidential client contact lists.

Strict Purpose Limitation: Recipient addresses provided during checkout are used exclusively to address envelopes and mail the specific cards ordered.

No Direct Solicitation: We will never contact, solicit, or market to your card recipients under any circumstances.

No Third-Party Access: Recipient addresses are treated as confidential corporate assets and are never shared outside the operational pipeline required for Canada Post dispatch.

5. Cookies & E-Commerce Infrastructure (WooCommerce)

Our store is built on the WooCommerce platform, hosted on our own servers. We use essential, functional cookies to make the checkout process work:

Session & Cart Cookies: WooCommerce uses small cookies (including woocommerce_cart_hash, woocommerce_items_in_cart, and wp_woocommerce_session_) to track the items, custom messages, and recipient lists inside your shopping cart across page loads.

Account Cookies: Used to recognize you when you log in to view past invoices, manage saved logos, and access your profile.

Analytics Cookies: Aggregated, anonymous traffic metrics used to diagnose technical errors and improve page speed.

You can manage or disable cookies through your browser settings; however, disabling essential cookies will prevent the cart and checkout pages from functioning correctly.

6. Data Security & Storage

We employ industry-standard administrative, physical, and technical safeguards to protect your personal and recipient data:

SSL Encryption: All communication across our website is encrypted using 256-bit Secure Socket Layer (SSL) encryption.

Restricted Access: Access to backend order records, custom message logs, and uploaded client artwork is strictly restricted to authorized production staff.

Input Sanitization: Custom product fields are sanitized to defend against unauthorized script injections and database vulnerabilities.

Please note that no digital transmission over the Internet or method of electronic storage can be guaranteed 100% secure.

7. Data Retention & Your Rights (PIPEDA Compliance)

In accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy regulations, you have rights regarding your personal information:

Access & Correction: You can view, modify, or update your contact details, billing addresses, and saved company logos at any time by logging into the My Account section.

Data Deletion: You may contact us at any time to request the deletion of your account, saved logos, or historical recipient entries from our active systems.

Retention Schedule: We retain transaction records and invoices only for the period necessary to fulfill service agreements, provide order accounting, resolve disputes, and comply with Canadian statutory and tax obligations.

8. Changes to This Privacy Policy

We may update this policy periodically to reflect operational, legal, or technical changes. Any revisions will be published immediately on this page with an updated "Last Updated" timestamp at the top of the policy.

9. Contact Us

If you have questions, feedback, or data privacy requests concerning this Privacy Policy, please get in touch with our team:

Website: thankyoucards.ca

Email: info@thankyoucards.ca