Privacy Policy

Spring Panel (“we,” “us,” or “our”) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws.

2. INFORMATION WE COLLECT

2.1 Personal Information

We collect personal information that you voluntarily provide to us, including:

• Contact information (name, email address, phone number, mailing address)
• Billing and shipping addresses
• Payment information (processed securely through Stripe)
• Order history and preferences
• Communications with our customer service team
• Account login credentials

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on our site
• Referring website addresses
• Cookies and similar tracking technologies

2.3 Payment Information

Payment processing is handled by Stripe, Inc., a PCI DSS compliant payment processor. We do not store complete credit card information on our servers. Stripe may collect and process payment information according to their privacy policy, available at stripe.com/privacy.

3. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and account
• Providing customer support and responding to inquiries
• Improving our products, services, and website functionality
• Sending promotional materials and marketing communications (with your consent)
• Complying with legal obligations and preventing fraud
• Analyzing website usage and customer behavior for business insights

4. LEGAL BASIS FOR PROCESSING

We process your personal information based on:

• Your consent for marketing communications and non-essential cookies
• Contractual necessity for order processing and customer service
• Legal obligations under applicable laws
• Legitimate business interests in improving our services and preventing fraud

5. SHARING OF INFORMATION

5.1 Service Providers

We may share your personal information with trusted third-party service providers, including:

• Stripe for payment processing
• Shipping carriers for order delivery
• Email service providers for communications
• Web hosting and analytics providers
• Professional advisors (lawyers, accountants) as necessary

5.2 Legal Requirements

We may disclose your personal information when required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of business assets, your personal information may be transferred as part of the business transaction, subject to appropriate privacy protections.

6. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Generally:

• Account information: Until account deletion plus 7 years for legal compliance
• Order and payment records: 7 years for tax and legal requirements
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics: 26 months maximum

7. YOUR PRIVACY RIGHTS

Under PIPEDA and applicable privacy laws, you have the right to:

• Access your personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent for marketing communications
• Request deletion of your personal information (subject to legal retention requirements)
• File a complaint with the Privacy Commissioner of Canada
• Receive information about how your personal information is being used

To exercise these rights, contact us using the information provided in Section 12.

8. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to enhance your website experience, analyze site usage, and provide personalized content. You can control cookie preferences through your browser settings. Essential cookies necessary for website functionality cannot be disabled.

8.1 Types of Cookies

• Essential cookies for website functionality
• Analytics cookies to understand site usage
• Marketing cookies for personalized advertising (with consent)
• Preference cookies to remember your settings

9. INTERNATIONAL TRANSFERS

Some of our service providers, including Stripe, may be located outside of Canada. When we transfer personal information internationally, we ensure appropriate safeguards are in place to protect your information in accordance with Canadian privacy laws.

10. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL encryption for data transmission
• Secure servers and databases
• Access controls and authentication
• Regular security assessments
• Employee training on privacy protection

11. CHILDREN’S PRIVACY

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

12. CONTACT INFORMATION

For questions about this Privacy Policy or to exercise your privacy rights, please contact us at:

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Privacy Policy on our website and indicate the effective date of the changes. Your continued use of our services after the effective date constitutes acceptance of the updated Privacy Policy.

14. COMPLAINTS

If you have concerns about how we handle your personal information, please contact us first. If you are not satisfied with our response, you may file a complaint with the Privacy Commissioner of Canada at priv.gc.ca or by calling 1-800-282-1376.