Privacy Policy of Northline Drawing Atelier

Effective Date: June 19, 2026

1. Introduction and Company Information

This Privacy Policy explains how Northline Drawing Atelier collects, uses, discloses, stores, and protects personal information in the course of operating a drawing-studio business in Canada. It applies to personal information collected through our studio, website, email communications, phone communications, registration forms, booking systems, payment processes, and any other interaction with us.

Northline Drawing Atelier is committed to handling personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial privacy legislation.

Business name: Northline Drawing Atelier
Address: 214 Queen Street West, Toronto, ON M5V 1Z2, Canada
Email: [email protected]
Phone: +1 (416) 782-5943

2. Data Collection and Processing

We may collect the following categories of personal information, depending on your interactions with us:

• Identification and contact information: name, email address, phone number, mailing address, and emergency contact information where relevant.
• Booking and attendance information: class registrations, workshop attendance, appointment details, preferences, and scheduling information.
• Payment information: billing details, transaction records, and limited payment-related information processed through third-party payment providers. We do not intentionally store full payment card numbers unless necessary and permitted by law and our payment processor arrangements.
• Communications: messages, inquiries, feedback, and correspondence with us by email, phone, or other channels.
• Studio and service usage information: information related to participation in classes, workshops, private sessions, and studio services.
• Technical information: IP address, browser type, device identifiers, and website usage data collected through cookies or similar technologies, where applicable.
• Special or sensitive information: only where necessary and with appropriate consent or legal authorization, such as accessibility needs, health-related accommodations, or emergency information relevant to participation in studio activities.

We collect personal information directly from you whenever possible. We may also receive information from authorized third parties, such as payment processors, booking platforms, or service providers acting on our behalf.

3. Purpose of Data Processing

We process personal information for the following purposes:

• to provide drawing-studio services, workshops, classes, and related offerings;
• to manage bookings, registrations, attendance, and customer accounts;
• to process payments, refunds, and billing-related matters;
• to communicate with you about services, scheduling, updates, and customer support;
• to respond to inquiries, feedback, and complaints;
• to maintain studio safety, manage risk, and support emergency response where necessary;
• to personalize and improve our services, programs, and customer experience;
• to operate, secure, and improve our website, systems, and business operations;
• to comply with legal, tax, accounting, insurance, and regulatory obligations;
• to detect, prevent, and investigate fraud, misuse, or security incidents;
• to send marketing communications, where permitted by law and subject to your consent or applicable opt-out rights.

4. Legal Basis for Processing

We process personal information only where permitted under applicable Canadian privacy laws. Depending on the circumstances, our legal basis may include:

• Consent: where you have given express or implied consent for a specific purpose, such as receiving marketing emails or providing optional information.
• Contractual necessity: where processing is necessary to provide requested services, manage bookings, or fulfill our obligations to you.
• Legal obligation: where processing is required to comply with applicable laws, regulations, court orders, tax requirements, or record-keeping obligations.
• Legitimate business purposes: where processing is reasonable for operating and protecting our business, provided such processing is appropriate in the circumstances and does not override your rights and interests.
• Vital interests or emergency situations: where necessary to protect the health, safety, or security of individuals.

Where consent is relied upon, you may withdraw it at any time, subject to legal or contractual restrictions and reasonable notice.

5. Data Sharing and Third Parties

We do not sell personal information. We may disclose personal information to third parties only as necessary for the purposes described in this Policy, including:

• Service providers: booking platforms, payment processors, email service providers, website hosting providers, IT support, analytics providers, and administrative service providers.
• Professional advisors: accountants, auditors, lawyers, insurers, and other advisors bound by confidentiality obligations.
• Government authorities and regulators: where required or permitted by law, subpoena, court order, or lawful request.
• Business transaction parties: in connection with a merger, reorganization, sale, financing, or transfer of all or part of our business, subject to appropriate safeguards.
• Other third parties: with your consent or at your direction.

We require third-party service providers to protect personal information and use it only for authorized purposes. However, their own privacy practices may also apply when they independently collect or process information.

6. Data Transfer to Third Countries

Some of our service providers may store or process personal information outside Canada, including in the United States or other jurisdictions. As a result, your information may be subject to the laws of those countries and may be accessible to courts, law enforcement, or regulatory authorities in those jurisdictions.

When personal information is transferred outside Canada, we take reasonable steps to ensure it is protected by contractual, technical, and organizational safeguards appropriate to the sensitivity of the information.

7. Storage Duration

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to meet legal, accounting, tax, insurance, or reporting requirements, and to resolve disputes or enforce agreements.

Retention periods vary depending on the type of information and the nature of our relationship with you. When personal information is no longer required, we will securely delete, destroy, or anonymize it in accordance with our retention practices and applicable law.

8. User Rights

Subject to applicable legal limitations, you have the following rights regarding your personal information:

• Access: you may request access to the personal information we hold about you and information about how it is used and disclosed.
• Rectification: you may request correction of inaccurate, incomplete, or outdated personal information.
• Erasure: you may request deletion of personal information where permitted by law, recognizing that we may need to retain certain information for legal or legitimate business purposes.
• Restriction: you may request that we limit the processing of your personal information in certain circumstances.
• Data portability: where applicable, you may request a copy of certain personal information in a structured, commonly used format.
• Objection: you may object to certain processing activities, including some forms of direct marketing or processing based on legitimate business purposes, subject to applicable legal exceptions.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding. We will respond within a reasonable time and in accordance with applicable law.

9. Withdrawal of Consent

Where our processing is based on your consent, you may withdraw that consent at any time by contacting us or using any available unsubscribe or opt-out mechanism. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

Please note that if you withdraw consent for certain information, we may no longer be able to provide some services, classes, communications, or accommodations to you.

10. Right to Complain

If you have concerns about how we handle your personal information, we encourage you to contact us first so we can try to resolve the issue promptly.

You also have the right to file a complaint with the appropriate privacy regulator in Canada, including the Office of the Privacy Commissioner of Canada, or with any other applicable provincial privacy authority, depending on the circumstances.

11. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures may include:

• access controls and role-based permissions;
• secure storage and encryption where appropriate;
• staff confidentiality obligations and privacy training;
• regular review of systems and security practices;
• physical safeguards for paper records and studio premises;
• incident response procedures for suspected privacy breaches.

No method of transmission or storage is completely secure. While we strive to protect personal information, we cannot guarantee absolute security.

12. Contact Information

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact:

Northline Drawing Atelier
214 Queen Street West
Toronto, ON M5V 1Z2
Canada
Email: [email protected]
Phone: +1 (416) 782-5943

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will take reasonable steps to notify you, such as posting the updated policy on our website or contacting you directly where appropriate.

The revised Privacy Policy will be effective as of the date indicated at the top of this page unless otherwise stated. We encourage you to review this Policy periodically.