Fast Express Shipping On All Orders

Shop by Category

GDPR Policy

We respect your privacy and are committed to protecting your personal data. This GDPR Policy explains how we collect, use, and safeguard information in line with the General Data Protection Regulation (GDPR).

1. Data We Collect

We may collect the following types of personal data when you use our website or services:

  • Name, billing details, and delivery information.

  • Contact details such as email address.

  • Order history and payment information (processed securely through third-party providers).

  • Technical data such as IP address, browser type, and device information.

2. How We Use Your Data

We process personal data for the following purposes:

  • To fulfill and deliver your orders.

  • To process secure payments.

  • To provide customer support and respond to inquiries.

  • To send updates, offers, or service notifications (where consent has been given).

  • To improve website functionality, security, and customer experience.

3. Lawful Basis for Processing

We only process your personal data where there is a lawful basis to do so, including:

  • Contractual necessity (to fulfill your order).

  • Legal obligations (such as tax compliance).

  • Legitimate interests (improving our services).

  • Consent (when you subscribe to marketing communications).

4. Data Sharing

We do not sell or rent your personal data. Information may only be shared with trusted third-party providers (such as payment processors, shipping carriers, and IT service providers) to complete your order and improve services.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

6. Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you.

  • Request correction or updates to your information.

  • Request deletion of your data where legally applicable.

  • Restrict or object to the processing of your data.

  • Request data portability to another service provider.

  • Withdraw consent at any time (for marketing communications).

7. Data Security

We use appropriate technical and organizational measures to safeguard your personal data against unauthorized access, disclosure, alteration, or destruction.

8. International Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place to protect your information.

9. Policy Updates

We may update this GDPR Policy from time to time. Any changes will be posted on this page with the updated effective date.

Autopaintcanadas © 2025. All Rights Reserved.
american expressdiners clubdiscovermaestromasterpaypalvisa