Privacy Policy

Last Updated: November 5, 2025

Introduction

BlankCanvas.com is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your data when you visit our website, purchase our products, or interact with our services.

Information We Collect

We collect various types of information to provide and improve our services:

Information You Provide

  • Personal identification: name, email address, phone number
  • Shipping and billing addresses
  • Payment information processed through secure payment processors
  • Order details including product selections, sizes, colors, and customization preferences
  • Design specifications and customization notes
  • Communications with our customer service team
  • Account information if you create an account
  • Survey responses and feedback

Automatically Collected Information

  • Device information: IP address, browser type, operating system
  • Usage data: pages visited, time spent, click patterns
  • Cookies and similar tracking technologies
  • Referral sources and search terms

How We Use Your Information

We use the collected information for the following purposes:

  • Processing and fulfilling your orders
  • Communicating about your orders, shipping, and delivery
  • Processing payments securely
  • Providing customer support and responding to inquiries
  • Understanding your customization needs and preferences
  • Improving our products, services, and website functionality
  • Sending marketing communications with your consent
  • Analyzing website usage and customer behavior
  • Preventing fraud and ensuring security
  • Complying with legal obligations

Legal Basis for Processing

We process your personal data based on:

  • Contract performance: to fulfill orders and provide services
  • Consent: for marketing communications and optional features
  • Legitimate interests: for business operations and service improvement
  • Legal compliance: to meet regulatory requirements

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

  • Essential cookies: necessary for website functionality
  • Performance cookies: help us understand how you use our site
  • Functionality cookies: remember your preferences
  • Marketing cookies: deliver relevant advertisements

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit website functionality.

Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

  • Service providers: shipping companies, payment processors, email service providers, web hosting
  • Customization partners: if you request professional printing or embroidery services
  • Legal authorities: when required by law or to protect our rights
  • Business transfers: in case of merger, acquisition, or asset sale

All third parties are required to maintain confidentiality and use data only for specified purposes.

Data Security

We implement comprehensive security measures:

  • SSL/TLS encryption for data transmission
  • Secure payment processing through PCI-DSS compliant providers
  • Regular security audits and vulnerability assessments
  • Access controls and authentication requirements
  • Employee training on data protection
  • Secure data storage and backup systems

While we strive to protect your information, no system is completely secure. We will notify you of any significant data breach as required by law.

Data Retention

We retain your personal information for:

  • Transaction records: 7 years for accounting and tax purposes
  • Marketing data: until you opt out or we deem it no longer useful
  • Account information: duration of account activity plus legal retention periods
  • Customer support records: reasonable period for quality and training purposes

Your Privacy Rights

Depending on your location, you have the following rights:

  • Access: request copies of your personal data
  • Correction: update inaccurate or incomplete information
  • Deletion: request removal of your personal data
  • Restriction: limit how we process your data
  • Objection: object to certain processing activities
  • Data portability: receive your data in a portable format
  • Withdraw consent: revoke consent for optional processing
  • Complaint: file a complaint with your data protection authority

To exercise these rights, contact us at create@blankcanvas.com. We will respond within 30 days.

Marketing Communications

With your consent, we may send promotional emails about:

  • New blank hoodie styles and colors
  • Patch collection updates
  • Customization tips and inspiration
  • Special offers and discounts
  • Design contests and community features

You can unsubscribe anytime by:

  • Clicking unsubscribe links in emails
  • Updating preferences in your account
  • Contacting customer support

International Data Transfers

Your information may be transferred to countries outside the European Economic Area. We ensure adequate protection through:

  • Standard contractual clauses
  • Adequacy decisions
  • Other approved transfer mechanisms

Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will delete it promptly. Parents who believe we may have information about their child should contact us immediately.

Third-Party Links

Our website may contain links to external sites not operated by BlankCanvas.com. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be communicated through:

  • Prominent notice on our website
  • Email notification to registered users
  • Updated effective date

We encourage regular review of this policy.

GDPR Compliance

For users in the European Union, we comply with the General Data Protection Regulation. Our data protection practices ensure:

  • Lawful, fair, and transparent processing
  • Purpose limitation and data minimization
  • Accuracy and storage limitation
  • Integrity and confidentiality
  • Accountability and documentation

California Privacy Rights

California residents have additional rights under CCPA:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt out of the sale of personal information
  • Right to deletion of personal information
  • Right to non-discrimination for exercising privacy rights

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

BlankCanvas.com
Via della Scrofa 32
00186 Rome, Italy
Email: create@blankcanvas.com
Phone: +39 06 6829 4158
Business Hours: Monday-Friday 9:30 AM - 7:00 PM

Data Protection Officer

For specific data protection inquiries, contact our Data Protection Officer at privacy@blankcanvas.com.