Privacy policy

Last updated: October 12, 2026

MystiManic is the business name of 9575-6854 Québec inc., a small business based in Québec, Canada. We sell made-to-order apparel and digital products through mystimanic.com (the "Store"). This policy explains, in plain terms, what personal information we collect, why, who we share it with, how long we keep it, and how you can control it.

We follow Québec's Act respecting the protection of personal information in the private sector (as amended by Law 25), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL), as well as the privacy laws that apply to customers in the United States and Australia.

1. Our person in charge of personal information

Our Person in Charge of the Protection of Personal Information (Responsable de la protection des renseignements personnels) makes sure we respect this policy and the law, and answers every privacy question, request and complaint.

  • Title: Person in Charge of the Protection of Personal Information, MystiManic (9575-6854 Québec inc.)
  • Email: info@mystimanic.com (subject line: "Privacy")

2. What we collect and why

We only collect what we need for the purposes below. We do not sell your personal information.

  • To process and deliver your order: your name, email, shipping and billing address, phone number (optional, for the carrier), the products you order, and your order history. We collect this from you at checkout.
  • To take payment: your payment details are entered directly into Shopify's secure checkout and handled by Shopify Payments, Shop Pay or the payment method you choose. We never see or store your full card number.
  • To manage your customer account (if you create one): your email, name, addresses and order history.
  • To answer you: the messages and information you send us by email, chat (Shopify Inbox) or our contact forms.
  • To send our newsletter and offers (only if you subscribe): your email address and how you interact with our emails (opens, clicks). You can unsubscribe at any time from the link in every email or by writing to us. We do not send marketing text messages (SMS).
  • To collect product reviews: after delivery, we may email you once to ask for a review. If you post one, your name (as you enter it), rating, text and any photos are published on the Store.
  • To run our creator and artist program (if you join it): your name, email, social media handles, payment details for commissions or royalties, and sales linked to your referral link or code.
  • To keep the Store secure and working: technical information such as your IP address, device and browser type, and pages visited, collected automatically through cookies (see section 4).
  • To meet our legal obligations: order and tax records required by Canadian and Québec tax laws.

If we ever want to use your information for a new purpose, we will ask for your consent first, unless the law allows it without consent.

3. Your consent

By placing an order, creating an account or subscribing, you consent to the uses described above for that activity. Marketing emails are always opt-in. You can withdraw your consent at any time by writing to us. Withdrawing consent may prevent us from providing some services (for example, we cannot ship an order without an address).

Cookies are small files stored by your browser. We use:

  • Essential cookies: needed for the cart, checkout, login and security. These are always on.
  • Analytics cookies: help us understand how the Store is used (Shopify analytics).
  • Marketing cookies: let advertising partners such as Pinterest and Google measure our ads and show you relevant ads on other sites.

Analytics and marketing cookies, and any technology that could identify, locate or profile you, are off by default. They are only activated if you accept them in the cookie banner shown on your first visit. You can change your choice at any time through the cookie preferences link at the bottom of the Store, or by clearing your browser's cookies.

5. Who we share your information with

We share only the information each provider needs to do its job, and we require them to protect it. Our main service providers are:

  • Shopify (Canada): hosts the Store, checkout, payments (Shopify Payments, Shop Pay), customer accounts, chat (Shopify Inbox), forms and our creator program (Shopify Collabs). Shopify's own practices are described in the Shopify Privacy Policy.
  • Our print-on-demand partners: receive your name, shipping address, phone number (if given) and order details to make and ship your items. Their production facilities are currently in the United States and China.
  • Shipping carriers: receive your name, address and phone number to deliver your parcel.
  • Omnisend: sends our newsletters and promotional messages.
  • Judge.me: sends review requests and publishes reviews.
  • Order Printer Pro: creates your invoices.
  • Backup Labs: keeps secure backups of our store data.
  • Pinterest and Google: advertising and measurement, only if you accept marketing cookies.

We may also disclose personal information when the law requires it (for example, to tax authorities or under a court order), or as part of a sale or transfer of our business, in which case the buyer must respect this policy.

6. Information stored or processed outside Québec

Several of our providers store or process information outside Québec, including in other Canadian provinces, the United States, the European Union and China (production of your order). Before sharing information outside Québec, we assess whether it will be adequately protected, and our agreements with providers require them to keep it confidential and secure. Information held outside Québec may be subject to the laws of the country where it is located.

7. How long we keep your information

  • Orders, invoices, payments and other financial or tax records: 7 years, which covers the retention required by Canadian and Québec tax laws.
  • Customer account: until you ask us to close it.
  • Newsletter subscription: until you unsubscribe. Inactive subscribers are removed after 3 years.
  • Messages and support requests: 3 years after our last exchange.
  • Published reviews: as long as they remain on the Store, or until you ask us to remove them.

When information is no longer needed, we securely destroy it or anonymize it so it can no longer identify you.

8. How we protect your information

Access to personal information is limited to the people and providers who need it. We use secure (HTTPS) connections, protect our business accounts with strong passwords and two-step verification, and rely on providers with recognized security practices. No system is perfectly secure, so please do not send sensitive information (such as card numbers) by email or chat.

If a confidentiality incident involving your personal information creates a risk of serious harm, we will notify you and the Commission d'accès à l'information du Québec promptly, and record every incident in our incident register, as the law requires.

9. Your rights

You have the right to:

  • Access the personal information we hold about you;
  • Correct information that is inaccurate, incomplete or ambiguous;
  • Withdraw your consent to a use of your information;
  • Ask us to delete your information, unless we must keep it by law (for example, tax records);
  • Receive your information in a structured, commonly used technological format, or have it transferred to another organization (portability);
  • Ask us to stop disseminating your information or to de-index any link to it, where the law allows;
  • Be informed of any decision about you made solely by automated processing. We do not make such decisions.

To exercise a right, email our Person in Charge of the Protection of Personal Information at info@mystimanic.com. We may ask you to confirm your identity. We will answer in writing within 30 days, free of charge.

10. Children

The Store is not intended for children. We do not knowingly collect personal information from anyone under 14 without the consent of a parent or guardian. If you believe a child has given us personal information, contact us and we will delete it.

11. Questions and complaints

If you have a concern, please write to us first at info@mystimanic.com. We will acknowledge your complaint, look into it and give you a written answer within 30 days.

If you are not satisfied with our answer, you can contact:

12. Changes to this policy

We may update this policy when our practices or the law change. We will post the new version here with a new "Last updated" date, and notify you by email of any important change that affects you.