Privacy

Last updated 25 October 2026.

Arpilo is a small studio in Victoria, British Columbia. We collect only what we need to send you your order, and we never sell or share your details for anyone else's marketing.

What we collect, and why

• When you order on arpilo.ca: your name, email address, shipping address and what you ordered. PayPal passes these to us when you pay, so we can pack, ship and answer you. Your card or bank details stay with PayPal; we never see them.
• When you email us: your email address and whatever you choose to write, so we can reply.

What we don't do

• This site sets no cookies and runs no tracking or advertising. On the cart page, PayPal's checkout buttons may use their own cookies, under PayPal's privacy policy.
• No mailing list. We won't email you anything except about your order or your question.
• We never sell, rent or trade your details.

Who else handles your details

• PayPal processes payments under its own privacy policy.
• Our carriers (Chit Chats, and Canada Post or another courier for the final delivery) receive your name and address so they can deliver your parcel.
• Etsy: pieces bought on our Etsy shop are covered by Etsy's privacy policy.
• This website is hosted on GitHub Pages. Like most websites, the host and the services that load our fonts (Google Fonts) and the Victoria weather line (Open-Meteo) receive your device's IP address when the page loads. We don't receive or keep it.

Your cart

Your cart is saved in your own browser on your own device, not on our side, so it's still there when you come back. Clearing your browser's site data removes it.

How long we keep it

Order records are kept for as long as Canadian tax law requires (six years), then deleted. Emails that aren't about an order are deleted once they're answered and no longer needed.

Your choices

You can ask to see the details we hold about you, correct them, or have them deleted where the law allows. Email hello@arpilo.ca and we'll reply within 30 days.

We follow British Columbia's Personal Information Protection Act and Canada's privacy law (PIPEDA). If you're not happy with our answer, you can contact the Office of the Information and Privacy Commissioner for British Columbia.

Changes

If what we collect changes, we'll update this page and the date at the top.