Privacy Policy
Privacy Policy
Last updated: 12 September 2026
Canvas & Quill Ltd (“Canvas & Quill”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you visit canvasquill24.com, purchase our digital products, contact us, subscribe to our marketing communications or otherwise interact with Canvas & Quill.
Canvas & Quill Ltd is based in the United Kingdom and is responsible for the personal information described in this Privacy Policy where we act as the data controller.
1. Information We Collect
Depending on how you interact with us, we may collect:
Contact information, such as your name, email address, telephone number and billing address.
Order and transaction information, including products purchased, order details, payment status and information necessary to process your purchase.
Payment information. Payments are processed through Shopify and/or applicable payment providers. We do not generally receive or store your complete payment-card details.
Account information, where you choose to create or use an account.
Communications, including information you provide when contacting us or requesting customer support.
Marketing information, including your marketing preferences and, where applicable, your interactions with our emails or advertising.
Technical and usage information, such as IP address, browser and device information, cookie identifiers and information about how you interact with our website.
Because Canvas & Quill sells digital products, we generally do not require a shipping address unless it is required by Shopify, a payment provider, tax requirements or another service involved in processing your transaction.
2. How We Use Your Personal Information
We may use personal information to:
- process purchases and provide access to digital products;
- administer orders, payments and customer accounts;
- provide customer service and respond to enquiries;
- operate, maintain, secure and improve our website;
- prevent, detect and investigate fraud, misuse and other unlawful activity;
- maintain business, tax and accounting records;
- send marketing communications where permitted;
- understand the effectiveness of our website, products and marketing;
- personalise aspects of our services and advertising where permitted;
- comply with legal and regulatory obligations; and
- establish, exercise or defend legal claims.
3. Our Lawful Bases for Processing
Under UK data-protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
Contract — where processing is necessary to process your order, provide your digital product or otherwise perform our agreement with you.
Legal obligation — where we need to retain or process information to comply with applicable law, including tax, accounting or regulatory requirements.
Legitimate interests — where necessary for legitimate business purposes, such as operating and improving our business, providing customer service, maintaining the security of our store, preventing fraud and understanding how our services are used, provided those interests are not overridden by your rights and freedoms.
Consent — where you have given us permission for a particular purpose, including where consent is required for certain marketing communications, advertising cookies or similar technologies. You may withdraw your consent at any time where applicable.
4. Shopify and Other Service Providers
Our online store is hosted by Shopify.
Shopify collects and processes personal information in connection with your access to and use of our store in order to provide and improve the ecommerce services used by Canvas & Quill.
We use certain Shopify enhanced services, including services that may use information from your interactions with our store together with information from your interactions with Shopify and other merchants. These services may be used to improve Shopify services and, where permitted, to provide personalisation, measurement and advertising-related features.
In connection with these services, information you provide through our store may be transmitted to Shopify and other service providers and may be processed in countries other than the country in which you live.
Where Shopify processes personal information for its own purposes in connection with these enhanced services, Shopify is responsible for that processing in accordance with its applicable privacy terms.
You can learn more through the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers
You can also use the Shopify Privacy Portal to learn more about, and where applicable exercise rights concerning, Shopify's use of your personal information:
We may also use third-party providers for functions such as:
- payment processing;
- digital product delivery;
- website hosting and ecommerce functionality;
- email and customer communications;
- analytics;
- advertising and marketing;
- fraud prevention and security; and
- professional, accounting or legal services.
We share personal information with service providers only where reasonably necessary for these purposes, where you direct or consent to the sharing, or where required or permitted by law.
5. Cookies, Analytics, Personalisation and Advertising
Our website uses cookies and similar technologies for functions such as operating the store, remembering preferences, understanding website usage, improving services and, where applicable, measuring or personalising advertising.
Some cookies are necessary for the website to function. Other cookies, including certain analytics, personalisation and advertising technologies, may require your consent depending on your location.
Where required, you can manage your choices through the cookie and privacy controls provided on our website and withdraw consent where applicable.
You may also be able to control cookies through your browser settings. Disabling certain cookies may affect some website functionality.
Depending on where you live, you may have the right to opt out of certain uses or disclosures of personal information for targeted advertising or activities defined as the “sale” or “sharing” of personal information under applicable privacy laws.
Where applicable, you can exercise these choices through our Data Sharing Opt-Out page:
https://canvasquill24.com/pages/data-sharing-opt-out
Where required by applicable law, recognised opt-out preference signals, such as Global Privacy Control, may also be processed by our ecommerce platform.
6. Marketing Communications
Where permitted by law, we may send you information about Canvas & Quill products, learning systems, offers or other relevant updates.
Where consent is required, we will obtain it before sending such communications.
You can unsubscribe from marketing emails at any time by using the unsubscribe link contained in the email or by contacting us at hello@canvasquill24.com.
Unsubscribing from marketing does not prevent us from sending necessary transactional or service communications relating to an order or enquiry.
7. International Customers and International Data Transfers
Canvas & Quill is based in the United Kingdom, but our website may be accessed and our digital products may be purchased by customers in other countries.
Your personal information may therefore be transferred, stored or processed outside your country of residence, including through Shopify and other service providers.
Where we transfer personal information outside the United Kingdom and UK data-protection rules on international transfers apply, we take steps to ensure that the transfer complies with applicable data-protection law.
Where required, recognised transfer mechanisms may include UK adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission's Standard Contractual Clauses, as applicable.
Where European Economic Area data-protection law applies, relevant transfer mechanisms may include European Commission adequacy decisions or Standard Contractual Clauses, as appropriate.
Where privacy laws in another jurisdiction apply to our activities, we will respect the rights and obligations applicable to that processing.
8. How Long We Keep Personal Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing our services, maintaining appropriate business and transaction records, complying with legal, accounting and tax obligations, resolving disputes and enforcing agreements.
Different categories of information may therefore be retained for different periods.
When information is no longer required, we will delete, anonymise or otherwise dispose of it as appropriate, subject to applicable legal requirements.
9. Your Privacy Rights
Depending on where you live and the laws applicable to the processing of your information, you may have rights concerning your personal information.
Under UK data-protection law, these may include the right to:
- request access to personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request deletion of personal information in certain circumstances;
- request restriction of processing in certain circumstances;
- object to certain processing, including direct marketing;
- request transfer of certain information in a portable format;
- withdraw consent where processing is based on consent; and
- raise a complaint about how your personal information is handled.
These rights are not absolute and may depend upon the circumstances and our lawful basis for processing.
To exercise your rights, contact hello@canvasquill24.com. We may need to verify your identity before responding to a request.
If you are in the UK, you also have the right to complain to the Information Commissioner's Office (ICO) if you have concerns about how your personal information has been handled.
Customers in other jurisdictions may also have the right to contact their local data-protection or privacy authority where applicable.
10. Children's Privacy
Canvas & Quill creates learning materials for children, but our website and ecommerce services are intended for adults purchasing or accessing products for children.
We do not intend to collect personal information directly from children through our online store.
If you believe a child has provided personal information to us without appropriate authorisation, please contact hello@canvasquill24.com so that we can review the situation and take appropriate action.
11. Security
We take reasonable organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of transmitting or storing information electronically can guarantee complete security.
12. Third-Party Links
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices of third-party websites, and we encourage you to review their privacy information before providing personal information to them.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, services, technology, service providers or applicable legal requirements.
When we make changes, we will update the “Last updated” date at the top of this policy and provide any additional notice required by applicable law.
14. Contact Us
For questions about this Privacy Policy, our use of personal information or to exercise a privacy right, contact:
Canvas & Quill Ltd
Email: hello@canvasquill24.com
Website: canvasquill24.com
United Kingdom