WoolyTopic is a one-person studio run by Alynn Forrest in Glencoe, Ontario, Canada. She is the person responsible for the information described here, and the only person at WoolyTopic who sees it.

What is collected

Only what a particular thing needs in order to work.

When you place an order

Your name, email address, shipping address, what you ordered, the amount charged, and a Stripe reference for the payment. This is kept so the order can be made, posted, followed up on, and recorded in the books.

When you use the contact form

Your name, email address, your message, and the order number if you gave one. Kept so Alynn can answer you and find the thread again later.

When you leave a review

Your rating, what you wrote, the name you chose to show, and a photo if you added one. Reviews are invited by email after an order arrives, so the review is linked to that order.

When you sign up for new-piece emails

Your email address, and which page you signed up from. Nothing else.

There is no account to create, no password to store, and no profile built about you across visits.

Cookies and analytics

This site sets no tracking cookies and shows no cookie banner, because there is nothing to consent to. Visitor numbers come from Cloudflare Web Analytics, which counts page views without cookies and without identifying individual people or following them to other sites.

Your basket is held in your own browser's local storage, on your device. It is not a cookie and it is never sent to the server — the shop only learns what is in your basket at the moment you press Checkout.

The contact and review forms use Cloudflare Turnstile to tell a person from a bot. It checks the request, not you, and it is used in place of a CAPTCHA that would hand your behaviour to an advertising company.

Who else touches it

Four services, each doing one job. None of them is paid to profile you, and none of them receives your information for their own marketing.

• Stripe — takes the payment. Your card details go to Stripe and never to WoolyTopic. Stripe passes back your name, email and shipping address so the order can be sent.
• Resend — delivers order confirmations, shipping notices, review invitations and the occasional new-piece email.
• Cloudflare — hosts the site and stores the orders, messages and review photos, and provides the bot check and the analytics described above.
• The post — your address goes on the parcel, which is how parcels work.

Stripe, Resend and Cloudflare are United States companies and store or process data outside Canada, where it may be reachable by the courts and authorities of those countries. Ordering from this site means accepting that, because there is no way to take an online payment or send an email without it.

Nothing is ever sold, rented, or handed to an advertiser. Information is only disclosed beyond the services above if the law actually requires it.

How long it is kept

• Orders — six years, which is how long Canadian tax rules require sales records to be kept.
• Contact messages — until they are plainly of no further use, and cleared out periodically.
• Reviews — for as long as they are published. A review you ask to have taken down is removed.
• New-piece emails — until you unsubscribe, which every one of them offers.
• Review invitation links — expire on their own after four months, used or not.

What you can ask for

Under Canada's Personal Information Protection and Electronic Documents Act you can ask what is held about you, ask for it to be corrected, and ask for it to be deleted. Send that through the contact form and Alynn will do it herself — there is no department to be routed through.

Order records that tax rules require her to keep are the one exception; those stay until the six years are up, and are used for nothing else in the meantime.

If you are ever unhappy with how a request was handled, you can complain to the Office of the Privacy Commissioner of Canada.

Children

This shop sells to adults and is not directed at children. Please don't order, or fill in a form here, if you are under the age of majority where you live.

Changes

If this policy changes, the date at the top changes with it. Anything that materially alters what happens to information already collected will be said plainly rather than slipped into a revision.

Questions about any of this go to the contact form.