Privacy Policy

Last updated: 2026 – 06 – 13

1. Introduction

This Privacy Policy explains how CriLab.Design (“we”, “us”, or “our”) collects, uses, stores, and protects personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws.

By using this website, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

Data Controller: Cristiana Chiossi, 141 East Ave N, L8L 5H8 Hamilton, Ontario, Canada. Email: hello@crilab.design

3. Personal Information We Collect

We may collect the following personal information:

  • First Name Last Name
  • Email address
  • Company name (if provided)
  • Billing information (when making a purchase)
  • Any information voluntarily submitted through contact forms
  • Information provided when subscribing to our newsletter
  • Order history and transaction details

We do not collect or store full payment card details. Card payments are processed securely by our payment provider (Stripe).

We do not collect sensitive personal data.

4. How We Collect Personal Data

Personal information is collected when you:

  • Fill out a contact form on the website
  • Subscribe to the newsletter
  • Make a purchase through our online store
  • Communicate with us via email

5. Purpose of Data Collection

We collect personal information for the following purposes:

  • Responding to inquiries and contact requests
  • Managing client communications
  • Sending newsletters and marketing communications (with consent)
  • Processing orders and delivering purchased digital products
  • Managing payments, invoices, and refunds
  • Improving our services and website experience

6. Consent

By submitting your personal information through this website, you consent to its collection and use for the purposes outlined above.

You may withdraw your consent at any time by contacting us at hello@crilab.design or by using the unsubscribe link included in our newsletters.

7. Third-Party Services

We use the following third-party services:

  • SiteGround – website hosting
  • Brevo – email marketing and newsletter management
  • Stripe – secure payment processing
  • WooCommerce – online store and order management

These service providers may process personal data on servers located outside of Canada, including in the United States or the European Union. Appropriate safeguards are in place in accordance with applicable data protection laws.

7.1 Users in the European Union (GDPR)

For users located in the European Union, we also comply with the General Data Protection Regulation (GDPR). In addition to the rights listed in Section 10, EU users have the right to:

  • Data portability — receive your personal data in a structured, commonly used format
  • Restrict or object to the processing of your personal data
  • Lodge a complaint with your local data protection authority

The legal bases on which we process your personal data are: your consent (for newsletters and marketing), the performance of a contract (when you make a purchase), and our legitimate interests (to operate and improve our services).

8. Data Retention

Personal information is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Order and transaction records are retained as required for tax and accounting obligations.

9. Data Security

We take reasonable technical and organizational measures to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, or destruction.

10. Your Rights

Under Canadian privacy law, you have the right to:

  • Access your personal information
  • Request corrections to inaccurate data
  • Withdraw consent to data processing
  • Request deletion of your personal data, where applicable

To exercise these rights, please contact us at hello@crilab.design.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Updates will be posted on this page with a revised “Last updated” date.