Privacy Policy

Last updated September 17, 2026

Have a Tee ([LEGAL BUSINESS NAME — A Print Agency, confirm the registered name]) operates this store and website at haveatee.ca, its school and group stores, the Design Studio and all related information, content, features, tools, products and services (the "Services"). Have a Tee is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase through the Services or otherwise communicate with us. We follow Canada's *Personal Information Protection and Electronic Documents Act* (PIPEDA). If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read it and understand the collection, use and disclosure of your information described here.

Personal information we collect or process
"Personal information" means information that identifies or can reasonably be linked to you or another person. It does not include information collected anonymously or de-identified so that it cannot reasonably be linked to you. Depending on how you interact with the Services, we may collect or process:

- **Contact details** — name, address, billing and shipping address, phone number and email address.
- **Financial information** — payment card details, transaction details, form of payment and payment confirmation. Payments are processed by Shopify Payments; we never see or store your full card number.
- **Account information** — username, password, preferences and settings, and your order history.
- **Transaction information** — items you view, add to your cart, purchase, cancel or ask us to remake, and your past transactions.
- **Design content** — the text, names, numbers, logos and images you upload or type into the Design Studio, the AI-generated artwork you request, and the previews and print files we generate from them. These are stored so we can review, produce, reprint and support your order.
- **School, group and web store information** — the school, team or organizer store an order belongs to, and, for organizers, the store details you set up (store name, logo, pricing, payout email).
- **Communications with us** — the content of emails, WhatsApp messages and support requests you send us, including photos of any issue.
- **Device and usage information** — device, browser, network connection, IP address, other unique identifiers, pages viewed and how and when you interact with the Services.

Where we collect it from
- **Directly from you** — when you create an account, design or order a product, communicate with us or otherwise provide information.
- **Automatically through the Services** — from your device when you use the Services, including through cookies and similar technologies.
- **From our service providers** — when they collect or process personal information on our behalf (for example Shopify, payment and shipping providers).
- **From schools, teams and organizers** — when they set up a store for their members.

How we use your personal information
- **Provide, produce and support your orders** — to perform our contract with you: review your artwork, process your payment, confirm embroidery estimates, produce and package your items, arrange pickup or shipping, send order and status notifications, handle remakes and refunds, and provide customer support.
- **Provide and improve the Services** — to remember your preferences and items you are interested in, maintain your account, enable reviews, and tailor and improve the Services.
- **School, group and web stores** — to attribute orders to the right store and pay the fundraising percentage or organizer margin due; organizers receive sales totals and order counts for their store, not your payment details.
- **Marketing and advertising** — with your consent where required, to send marketing and promotional communications by email or text (you can unsubscribe at any time) and to show you advertisements for our products on the Services or other websites, including based on items you viewed or added to your cart.
- **Security and fraud prevention** — to authenticate your account, provide a secure checkout, and detect, investigate or act on fraudulent, illegal or malicious activity. Keep your account credentials safe and do not share them.
- **Legal reasons** — to comply with applicable law, respond to valid legal process, and enforce or investigate potential violations of our terms or policies.

Your uploaded artwork and designs
Your artwork remains yours. We use it only to produce your order, handle reprints and support, and — unless you ask us not to — to show finished work as an example of what we make. We may retain design files so that you can reorder; email us to have your artwork deleted after your order is complete. Uploaded files and generated previews are stored on Shopify's file hosting.

How we disclose personal information
- **With Shopify, vendors and other third parties who perform services on our behalf** — e.g. payment processing, hosting and cloud storage, email and messaging, analytics, customer support, and shipping carriers.
- **With our garment suppliers** — only where needed to fulfil an order (for example a drop-shipped blank).
- **With schools, teams and organizers** — sales totals and order counts for their store, and, where the store's terms say so, the name and size on each order for distribution; never your payment details.
- **With business and marketing partners** — to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our partners use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements based on your online activity with different merchants and websites.
- **When you direct or consent to it** — for example to ship you products, or through social media widgets or login integrations.
- **With our affiliates** or otherwise within our corporate group.
- **In connection with a business transaction** such as a merger or bankruptcy, to comply with legal obligations (including subpoenas and similar requests), to enforce our terms or policies, and to protect or defend the Services, our rights and the rights of our users or others.

We do not sell personal information.

Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy (https://www.shopify.com/legal/privacy/customers). Depending on where you live, you may exercise certain rights with respect to your personal information at the Shopify Privacy Portal (https://privacy.shopify.com/en).

Third-party websites and links
The Services may link to websites or platforms operated by third parties (for example garment manufacturers' sites). We do not control and are not responsible for the privacy or security practices, or the accuracy of information, on those sites; review their policies before you use them. Information you share on public or semi-public venues, including third-party social platforms, may be viewable by other users. Links do not imply endorsement.

Children's data
The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in their province or territory. Purchases in school stores for students under the age of majority should be made by a parent or guardian. If you are the parent or guardian of a child who has provided us with personal information, contact us using the details below to have it deleted.

Security and retention
No security measure is perfect and we cannot guarantee "perfect security"; information sent to us may not be secure in transit, so please do not send sensitive or confidential information through unsecured channels. We keep order and payment records for as long as required for accounting and tax purposes (generally 7 years), design files for reprints until you ask us to delete them, and other personal information for as long as needed to maintain your account, provide the Services, comply with legal obligations, resolve disputes and enforce our agreements.

Your rights and choices
Under PIPEDA and other applicable laws you may have the right to:
- **Access** the personal information we hold about you and know how it has been used and disclosed.
- **Correct** inaccurate or incomplete personal information.
- **Delete** personal information we hold about you, subject to our legal retention obligations.
- **Withdraw consent** to marketing or to optional uses at any time, subject to legal or contractual restrictions and reasonable notice; unsubscribe links are included in every marketing email. We may still send non-promotional messages about your account or orders.
- **Portability** — receive a copy of your personal information in a usable format where required by law.

You can exercise these rights where indicated on the Services or by contacting us using the details below. We may need to verify your identity, and we may accept requests from an authorized agent who provides proof of your authorization. We respond within 30 days, or sooner where the law requires, and we will not discriminate against you for exercising your rights. Rights related to data processed by Shopify for its own purposes can be exercised at https://privacy.shopify.com/en.

Complaints
If you have a complaint about how we handle your personal information, contact us first using the details below and we will investigate. You may also lodge a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or, depending on where you live, your local data protection authority.

International transfers
We and our service providers, including Shopify, may transfer, store and process your personal information outside the country you live in, including in the United States, where it may be subject to the laws of that country. If we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses or their UK equivalent, unless the destination country has been found to provide an adequate level of protection.

Cookies
We use necessary cookies to run the cart, checkout and account login, and optional analytics and marketing cookies where you allow them. You can control cookies in your browser settings and manage marketing preferences through the unsubscribe links in our emails.

Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal or regulatory reasons. We will post the revised policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact
Questions about our privacy practices, or requests to exercise your rights: email support@haveatee.ca, call or WhatsApp +1 (905) 399-9929, or write to Have a Tee, Oakville, Ontario L6L 2W4, Canada.