Privacy Notice
Who is responsible
Colin Greenhalgh is responsible for personal information handled by Star Shadows Creative Studio. For privacy questions, access or correction requests, or complaints, email support@starshadows.ca.
Information and purposes
When you contact support, we receive your email address, message and any order details you choose to provide. We use these to reply and resolve your request. Support email is forwarded through Porkbun to our Microsoft Outlook/Hotmail inbox.
For digital orders, Payhip and the payment provider collect the information needed for checkout, delivery, fraud prevention and tax handling. We can receive order details such as the buyer’s email, purchased product, amount and order reference, plus information made available through their seller dashboards. We use order records for delivery support, refunds, disputes and necessary business records. We do not receive your full payment card number or security code.
Service providers and website visits
This website is hosted through ChatGPT Sites. Hosting and security providers may process technical information such as IP address, browser information and request logs to deliver and protect the site. We have not added Google Analytics or Facebook Pixel. The free samples can be downloaded without an email signup.
Payhip checkout tools may load resources from Payhip when you visit the shop and may use cookies or similar technologies. Their privacy and cookies policy explains their processing. Card processing is through Stripe; see Stripe’s privacy policy. Amazon handles information for paperback orders under its privacy notice. Providers may process or store information outside Canada.
Use, sharing and marketing
We use personal information to fulfil orders, provide support, address disputes and meet legal obligations. We do not sell customer information or add buyers to a marketing list simply because they buy a pack. Information may be shared with providers needed for these purposes or when required or permitted by law.
Keeping and protecting information
We restrict access to information needed for business purposes and use reasonable safeguards. We retain information only as needed for its purpose, legal recordkeeping and dispute handling, then securely delete or anonymize it. Information used to make a decision directly affecting an individual is kept for at least one year after the decision. Provider-managed records may have their own retention periods.
Your choices
You may request access to or correction of information we control, or ask about withdrawing consent or deletion. We will explain any identity checks, lawful exceptions or records we must retain. If a concern is not resolved, you may contact the Office of the Information and Privacy Commissioner for British Columbia.
Updated 27 October 2026. This notice will be revised if our practices change.